Privacy Policy

1. Introduction

CPC Consulting, PM, Cloud Services SRL ("CPC SRL", "we", "us", or "our") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and applicable Romanian data protection laws.

By accessing our website or using our services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. Access to this website requires acceptance of our cookie policy.

2. Data Controller

The data controller responsible for your personal data is:

CPC Consulting, PM, Cloud Services SRL
Email: matthias.scharf@cpc-srl.com
Romania

3. Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Information You Provide Directly

• Contact information (name, email address, phone number, company name)
• Communication data (messages sent through our contact form)
• Business information for service provision

3.2 Information Collected Automatically

• Device information (browser type, operating system)
• Usage data (pages visited, time spent on site)
• IP address and approximate location
• Cookie data (see Section 8)

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent (Art. 6(1)(a) GDPR): When you have given explicit consent for specific processing activities, such as accepting cookies or subscribing to communications.
• Contract (Art. 6(1)(b) GDPR): When processing is necessary for the performance of a contract or to take pre-contractual steps at your request.
• Legitimate Interest (Art. 6(1)(f) GDPR): When processing is necessary for our legitimate business interests, provided these do not override your rights and freedoms.
• Legal Obligation (Art. 6(1)(c) GDPR): When processing is necessary to comply with legal requirements.

5. How We Use Your Data

• Responding to your enquiries and providing requested information
• Delivering our consulting and cloud services
• Scheduling and managing consultations via Calendly
• Improving our website and services
• Complying with legal obligations
• Protecting our legitimate business interests

6. Data Retention

• Contact form submissions: 3 years from last contact
• Client data: Duration of contract plus 10 years for legal compliance
• Cookie data: See Section 8 for specific retention periods
• Analytics data: 26 months

7. Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions for transfers to countries with equivalent data protection standards
• Binding Corporate Rules where applicable

Third-party services we use may process data internationally:

• Calendly: USA (EU-US Data Privacy Framework certified)

8. Cookies Policy

⚠️ Cookie Consent Required — Access to this website requires acceptance of our cookie policy. If you do not accept cookies, you will not be able to use this website.

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us provide you with a better experience and allow certain features to function properly.

8.2 Types of Cookies We Use

8.3 Managing Cookies

You can manage cookies through your browser settings. However, please note that disabling essential cookies will prevent you from using our website, as cookie consent is mandatory for access.

9. Your Rights Under GDPR

• Right to Access (Art. 15): Request a copy of your personal data we hold
• Right to Rectification (Art. 16): Request correction of inaccurate data
• Right to Erasure (Art. 17): Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing (Art. 18): Request limitation of processing
• Right to Data Portability (Art. 20): Receive your data in a structured format
• Right to Object (Art. 21): Object to processing based on legitimate interests
• Right to Withdraw Consent (Art. 7): Withdraw consent at any time

To exercise any of these rights, please contact us at: matthias.scharf@cpc-srl.com

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against:

• Unauthorised access or disclosure
• Accidental or unlawful destruction
• Loss or alteration

Security measures include encryption, access controls, secure data storage, and regular security assessments.

11. Third-Party Services

• Calendly: For scheduling consultations. Please review Calendly's Privacy Policy.
• WhatsApp (Meta Platforms, Inc.): Our website provides a direct link to contact us via WhatsApp. When you use this feature, your communication is subject to WhatsApp's Privacy Policy and Meta's Privacy Policy. WhatsApp may process your phone number, message content, device information, and usage data. Data may be transferred to the USA under the EU-US Data Privacy Framework.
• LinkedIn: For professional networking. Subject to LinkedIn's Privacy Policy.

12. Children's Privacy

Our services are not directed at individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

13. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP):

ANSPDCP
B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, București
Website: www.dataprotection.ro

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website with a revised "Last updated" date. Your continued use of our website after changes are posted constitutes acceptance of the modified policy.

15. Contact Us

For any questions about this Privacy Policy or our data practices, please contact:

CPC Consulting, PM, Cloud Services SRL
Email: matthias.scharf@cpc-srl.com