Privacy Policy
Last updated: —
1. Introduction
SynPleo respects the privacy of your personal data and is committed to protecting it in accordance with the General Data Protection Regulation (GDPR - Regulation EU 2016/679) and Romanian Law no. 190/2018 on measures to implement Regulation (EU) 2016/679.
This Privacy Policy explains what personal data we collect, how we use it, who we disclose it to, how long we retain it, and what your rights are.
2. Data Controller Identity
Contact email: [email protected]
Phone: +40778357436
3. What Personal Data We Collect
We collect the following categories of personal data:
3.1. Data you provide directly
- Identification data: first name, last name
- Contact data: email address, phone number
- Professional data: company name (optional)
- Content: your message, project description
- Attached files: documents, images or other uploaded files (maximum 3 files × 15 MB)
- Estimator configuration: services, features and options selected in the interactive estimator
3.2. Automatically collected data
- IP address: for spam protection and rate limiting
- Date and time: timestamp of form submission
- Source page: URL from which you accessed the form
- Preferred language: Romanian or English
- Technical cookies: for site functionality (see Section 9)
3.3. Data generated by anti-bot system
- Cloudflare Turnstile: automatic validation without visible captcha
4. Purposes and Legal Bases of Processing
| Purpose | Legal basis |
|---|---|
| Processing quote requests and communicating with you | Legitimate interest (Art. 6(1)(f) GDPR) and implicit consent through form submission |
| Storage and management of requests in database | Performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR) |
| Protection against spam and abuse (rate limiting) | Legitimate interest (Art. 6(1)(f) GDPR) — protecting our systems |
| Improving services and price estimator | Legitimate interest (Art. 6(1)(f) GDPR) |
| Essential technical cookies | Legitimate interest (Art. 6(1)(f) GDPR) — site functionality |
5. Who We Disclose Your Data To
Your data may be disclosed to the following recipients:
5.1. Service providers (Data Processors)
To operate the site and process requests, we work with cloud service providers for hosting, storage and protection. All providers process data in compliance with GDPR and European data protection legislation.
5.2. International data transfer
Our service providers process data within the European Union. For global services (e.g., Cloudflare CDN), we ensure appropriate safeguards are implemented in accordance with Art. 46 GDPR and that processing complies with European data protection regulations.
5.3. Public authorities
We may disclose your data to competent authorities if required by law or to protect our legal rights.
6. Data Retention Period
- Active requests: duration of quote processing and business relationship
- Rate limiting (IP addresses): 24 hours
- Attached files: stored with the request, deleted upon request or automatically after archival period
After the expiration of the mentioned periods, data is deleted or irreversibly anonymized.
7. Your Rights
Under GDPR, you have the following rights:
Right of access (Art. 15)
You can request a copy of the personal data we hold about you.
Right to rectification (Art. 16)
You can request correction of inaccurate or incomplete data.
Right to erasure / "right to be forgotten" (Art. 17)
You can request deletion of your data under certain conditions.
Right to restriction of processing (Art. 18)
You can request limitation of data processing in certain situations.
Right to data portability (Art. 20)
You can receive your data in a structured, commonly used and machine-readable format.
Right to object (Art. 21)
You can object to processing based on legitimate interest.
Right to lodge a complaint (Art. 77)
You can lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP):
B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest
Tel: +40.318.059.211 / +40.318.059.212
Email: [email protected]
Website: www.dataprotection.ro
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.
8. Data Security
We implement appropriate technical and organizational measures to protect your data:
- Encryption in transit: HTTPS/TLS for all communications
- Secure storage: encrypted databases, restricted access
- Private files: attached files are stored in private buckets (not public), accessible only through temporary signed URLs
- Administrative authentication: secure access with HMAC sessions and HttpOnly cookies
- Rate limiting: protection against brute-force attacks
- Server-side validation: all data is validated before storage
- Honeypot and Turnstile: bot protection
9. Cookies and Similar Technologies
Our website uses only essential technical cookies necessary for the proper functioning of the site:
| Cookie | Purpose | Duration |
|---|---|---|
| synpleo_landing_admin | Administrative session (admin panel only) | 7 days |
| synpleo_cookie_consent | Storing cookie banner preference (localStorage) | Permanent (until manual deletion) |
Analytics is optional. If Google Analytics is enabled, it loads only after you accept analytics in the banner. We measure page visits and actions such as submitting an enquiry or selecting a contact link. These events do not include names, email addresses, phone numbers, messages or uploaded files. You can withdraw consent through Cookie preferences in the footer. We do not enable advertising services.
For more details, see our Cookie Policy.
10. Minors
Our services are intended exclusively for legal entities and professionals. We do not intentionally collect data from persons under 16 years of age. If you discover that a minor has provided us with personal data, please contact us to delete this information.
11. Changes to Privacy Policy
We reserve the right to update this Privacy Policy periodically. Any significant changes will be communicated on this page, with an update to the revision date. We recommend checking this page regularly.
12. Contact
For any questions or requests regarding personal data protection, you can contact us:
Email: [email protected]
Phone: +40778357436