This policy explains how personal data is processed when you use the katalinorosz.com website and, in particular, when you write to us through the contact form. The processing complies with Regulation (EU) 2016/679 (GDPR), Law no. 190/2018 (implementing the GDPR in Romania) and Law no. 506/2004 on the processing of personal data in the electronic communications sector.
1. Who we are and how you can contact us
The data controller is Salespro SRL, which carries out its activity under the brand Family Firm Advisors, with its registered office at str. Predeal 82/B, Targu Mures, Romania, registered with the Trade Register under no. J2019002003269, sole registration code RO41829350 (hereinafter "we", "the controller" or "Salespro").
For any question about your data or to exercise the rights below, you can contact us at:
- Email: contact@salespro.ro
- Address: str. Predeal 82/B, Targu Mures, Romania
We have not appointed a data protection officer (DPO), as this is not an obligation under art. 37 GDPR for our type of processing. Data protection requests are handled directly by the controller, at the address contact@salespro.ro.
2. What categories of data we process
The website is a presentation website. We do not sell products and we do not process payments on this site. We process data in the following situations.
2.1. Data from the contact form
When you fill in the form to request a private conversation, we process:
- your name (required);
- your email address (required, needed so we can reply to you);
- your role in the company (optional);
- the question or message you send us, in free text (required);
- the name of the family business (optional);
- the annual turnover range (optional).
Please do not include sensitive data in the free-text field (health data, detailed financial data, legal documents). The form is not intended for the transmission of confidential documents.
2.2. Technical browsing data
The hosting of the site (Cloudflare) and the traffic analytics may process minimal technical data, such as the IP address, the browser type and the pages visited, for the operation and security of the site. The traffic analytics is configured without cookies and in aggregated form, without identifying you personally. Details in the Cookie policy.
2.3. Newsletter (external, on LinkedIn)
We do not run an email newsletter on our side. The "Subscribe on LinkedIn" button takes you to LinkedIn, where the subscription and the processing of data take place under LinkedIn's terms and privacy policy, not ours.
3. The purposes and the legal bases of the processing
| Processing | Purpose | Legal basis (GDPR) |
|---|---|---|
| Form data | To reply to you and to schedule a private consulting conversation | Art. 6(1)(b): steps taken at your request prior to entering into a possible contract; and/or art. 6(1)(a): consent |
| Subsequent correspondence | Managing the relationship and your request | Art. 6(1)(f): the legitimate interest in responding to the requests received |
| Technical data, security, prevention of abuse and spam | The secure operation of the site | Art. 6(1)(f): legitimate interest |
| Cookie-free, aggregated traffic analytics | Understanding the use of the site | Art. 6(1)(f): legitimate interest (without individual identification) |
| Compliance with legal obligations | Compliance (e.g. requests from authorities) | Art. 6(1)(c): legal obligation |
Providing the data marked as required is necessary in order for us to be able to reply; without it we cannot contact you. The optional fields remain at your choice.
4. How long we keep the data
We keep the form messages for as long as is necessary to resolve the request, and afterwards for a period of at most 24 months from the last contact, so that we can get back in touch or demonstrate compliance with our obligations. If a collaboration results from the request, the related data is kept for the duration of the contractual relationship and in accordance with the applicable legal obligations (tax, accounting) afterwards. Technical data and security logs are kept for short periods, in accordance with the providers' practices. Once these terms expire, the data is deleted or anonymized.
5. To whom we disclose the data
We do not sell your data. We may make it accessible only:
- to the providers who help us operate the site, in their capacity as processors, on the basis of processing agreements (art. 28 GDPR): in particular Cloudflare (the hosting and protection of the site, as well as the sending of the form emails) and Microsoft (the Microsoft 365 service, in which we receive and manage your messages);
- to public authorities, when the law requires us to.
6. Transfers outside the European Economic Area
Some providers (for example hosting providers) may process data on infrastructure located outside the EEA. In such cases, the transfer takes place only with adequate safeguards in accordance with the GDPR (adequacy decisions or standard contractual clauses of the European Commission). You can request details from us at the contact address above.
7. What rights you have
As a data subject, you have the right:
- of access to your data;
- to rectification of inaccurate data;
- to erasure ("the right to be forgotten"), under the conditions of the law;
- to restriction of the processing;
- to object to processing based on legitimate interest;
- to data portability;
- to withdraw your consent at any time, when the processing is based on consent, without affecting the lawfulness of the processing carried out prior to the withdrawal.
You can exercise your rights by writing to contact@salespro.ro. We reply within the terms provided by the GDPR (as a rule, within one month at most).
You also have the right to lodge a complaint with the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (the National Supervisory Authority for Personal Data Processing, ANSPDCP), B-dul General Gheorghe Magheru nr. 28-30, sector 1, Bucharest, www.dataprotection.ro.
8. Data security
We apply reasonable technical and organizational measures to protect the data against unauthorized access, loss or disclosure, including a secure connection (HTTPS) and the protection provided by the Cloudflare infrastructure.
9. Minors
The site is addressed to adults (entrepreneurs, members of family businesses). We do not intentionally collect data of minors.
10. Changes to this policy
We may update this policy to reflect changes in the business or in the legislation. The version in force is the one published on the site, with the date of the last update indicated at the beginning.