Privacy policy

The controller of your personal data is Consilo Web SRL, registered in Sibiu, Romania, tax identification number (CUI) 35218904, Trade Register number J2015001094321 (“Consilo”, “we”).

For any question about personal data or to exercise your rights, write to us at hr@consilo.ro.

We only collect data you send us directly or that is needed for the site to work technically:

• Contact form: name, company, email address, phone number (optional), subject and message.
• Project brief form: name, company, email address, phone number, message (optional) and the project details you select (services, team size, languages, coverage, timeline).
• Job applications: if you contact us about a role, the data you choose to include in your message.
• Technical data: IP address, browser and device type, the page requested and the time of the request, recorded automatically by our hosting infrastructure in server logs for security and operation.
• Your preferred site language, stored in a strictly necessary cookie (see the Cookie policy).

• Replying to messages sent through the contact form — Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract) and Art. 6(1)(f) GDPR (our legitimate interest in corresponding with people who contact us).
• Reviewing your project brief and sending a proposal — Art. 6(1)(b) GDPR and the consent you give in the form, Art. 6(1)(a) GDPR.
• Assessing job applications — Art. 6(1)(b) GDPR (steps before entering into an employment contract).
• Security and operation of the site, preventing abuse — Art. 6(1)(f) GDPR (legitimate interest in protecting the site and its users).
• Complying with legal obligations, where applicable — Art. 6(1)(c) GDPR.

We do not use your data for automated marketing, profiling or automated decision-making, and we do not sell it to third parties.

Your data is accessed only by the people at Consilo who need it for the purposes above. We use the following providers, who act as processors and handle data only on our instructions:

• Vercel Inc. — website hosting and server logs.
• Resend — delivering form submissions to our email address.
• Microsoft — the email service in which we receive and keep messages.

Some of these providers may process data in the United States. In such cases, transfers rely on the EU-US Data Privacy Framework where the provider is certified, or on the Standard Contractual Clauses adopted by the European Commission, in line with Articles 45–46 GDPR.

• Messages and briefs: up to 24 months after our last interaction, unless they become part of a contractual relationship, in which case statutory archiving periods apply.
• Job applications: up to 12 months after receipt, unless you ask us to delete them sooner.
• Server logs: for the limited period set by our hosting provider, usually a few days.

Under the GDPR you have the right:

• to access the data we hold about you;
• to have inaccurate data corrected;
• to have your data erased (“right to be forgotten”);
• to restrict processing;
• to data portability;
• to object to processing based on legitimate interest;
• to withdraw your consent at any time, without affecting the lawfulness of earlier processing.

Write to us at hr@consilo.ro. We reply within one month of receiving your request; this period may be extended under Art. 12 GDPR, in which case we will let you know.

You also have the right to lodge a complaint with the Romanian data protection authority (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, sector 1, Bucharest, www.dataprotection.ro, or with the supervisory authority in your EU country of residence.

The site uses encrypted connections (HTTPS) only. Access to the data we receive is limited to the people who need it, and our providers apply appropriate technical and organisational safeguards.

The site is aimed at companies and professionals. We do not knowingly collect data from anyone under 16.

We may update this policy when the way we process data changes. The version in force is always the one published on this page, with its last-updated date.