Privacy Policy

1. Data controller

The controller of personal data processed through this website is:

ALFI DIGITAL SRL · Tax ID 52377381 · Trade Register J2025063433002 · EUID ROONRC.J2025063433002
Email: [email protected]

2. About this website

alfidigital.ro is a presentation website for the company and its products. Our products (Mesea, Brim, SanaLock, CiviSENSE) are separate services, each with its own privacy policy available on that product’s own site.

3. What data we process

This site has no server-side form processing: the contact form simply opens your own email app with a pre-filled message. We process personal data only when you choose to contact us by email — namely your email address, your name (if you include it) and the content of your message.

For the operation and security of the server, our hosting provider may process standard technical data from access logs (e.g. IP address, browser type, date and time of access).

4. Purposes and legal basis

• To respond to requests you send us by email — basis: taking steps at your request and our legitimate interest in communicating (Art. 6(1)(b) and (f) GDPR).
• To operate, secure and maintain the website — basis: our legitimate interest (Art. 6(1)(f) GDPR).

5. Cookies and analytics

This site does not set tracking cookies and does not use visitor-behaviour analytics for advertising. Strictly technical mechanisms necessary to deliver the pages may be used.

6. Who we share data with

We do not sell or rent your data. We may disclose data only to providers acting as processors — our web hosting provider and our email provider — strictly to operate the site and communicate with you, and to authorities where required by law.

7. International transfers

Some infrastructure providers (hosting, email) may process data outside the European Economic Area. Where this happens, transfers are carried out with appropriate safeguards under the GDPR (e.g. the European Commission’s Standard Contractual Clauses).

8. How long we keep data

We keep email correspondence for as long as necessary to handle your request and to comply with applicable legal obligations, after which we delete or anonymise it.

9. Your rights

As a data subject, you have the following rights under the GDPR:

• the right of access to your data and to receive a copy;
• the right to rectification of inaccurate data;
• the right to erasure (“right to be forgotten”);
• the right to restriction of processing;
• the right to object to processing based on legitimate interest;
• the right to data portability;
• the right to lodge a complaint with the supervisory authority.

You can exercise these rights by writing to us at [email protected].

10. Supervisory authority

You have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) — www.dataprotection.ro.

11. Changes to this policy

We may update this policy from time to time. The version in force is the one published on this page, together with the date of the last update.