Privacy Policy

1.1. Data Controller: NETCRAFT DIGITAL SRL, a commercial company registered in Romania, with registered office in Cluj-Napoca, Cluj County, registered with the Trade Register under no. J12/XXXX/2024, unique registration code RO XXXXXXXX (hereinafter referred to as "Controller", "Netcraft Digital", "we" or "Provider"), is a personal data controller within the meaning of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) and Law no. 190/2018 on measures to implement GDPR.

1.2. Contact Details for Data Protection:

1.3. Purpose of the Policy: This Privacy Policy explains how Netcraft Digital collects, uses, stores, protects and processes personal data of:

• (a) Visitors to the website https://netcraft.digital (referred to as "Visitors");
• (b) Clients who use our Website as a Service (referred to as "Clients");
• (c) Representatives of legal entities entering into contractual relationships with us;
• (d) Contact persons, partners and suppliers;
• (e) End users of websites developed for Clients (when we act as data processor).

1.4. Our Commitment: Netcraft Digital is dedicated to protecting the privacy and security of your personal data. We commit to processing data in accordance with GDPR principles: lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity and confidentiality.

Depending on the nature of your interaction with Netcraft Digital, we collect the following categories of personal data:

2.1. Identification and Contact Data

• First and last name (natural person) or company name (legal entity)
• Email address
• Phone number
• Postal address (registered office or domicile)
• Position/role within organization (for legal entity representatives)

2.2. Browsing and Technical Data (Website Visitors)

• IP address
• Browser type and version
• Operating system
• Internet Service Provider (ISP)
• Date and time of access
• Pages visited and visit duration
• Referrer URL
• Country and approximate geographic location (city level)
• Data from cookies and similar technologies

2.3. Transaction and Billing Data

• Payment and billing history
• Payment method used (without complete card details)
• Order and subscription data
• Commercial communications and correspondence

2.4. Content and Data Provided by Client

• Website content (texts, images, documents provided by Client)
• Data submitted through contact forms
• Communications via email, phone or ticketing system
• Feedback, reviews and ratings
• Messages and technical support requests

Important Note: We do not collect sensitive data within the meaning of art. 9 GDPR (data about racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, health, sex life) except where you have a separate explicit agreement with us in this regard and you provide us with explicit consent.

We process your personal data for the following legitimate and lawful purposes:

3.1. Contract Performance (art. 6(1)(b) GDPR)

• Providing Website as a Service according to the concluded Agreement
• Website development, implementation and maintenance
• Hosting, security and technical support
• Communication with Clients regarding services
• Managing Client account and platform access
• Payment processing and invoicing
• Performance reporting and analytics

3.2. Compliance with Legal Obligations (art. 6(1)(c) GDPR)

• Fulfillment of accounting and tax obligations (keeping invoices, records according to Tax Code)
• Responses to requests from competent authorities (tax authority, data protection authority, courts)
• Prevention of fraud and money laundering
• Archiving in the public interest, scientific research or statistics

3.3. Legitimate Interests (art. 6(1)(f) GDPR)

• Improvement and optimization of services and platform
• Security and integrity of IT systems
• Prevention of fraudulent or illegal use of services
• Market analysis and research, anonymized statistics
• Managing pre-sales inquiries and quotations
• Protection of Netcraft Digital's rights and property
• Detection and prevention of technical abuse (spam, DDoS attacks)

3.4. Explicit Consent (art. 6(1)(a) GDPR)

• Direct marketing (newsletter, promotional offers, information about new products)
• Personalization of content and ads based on preferences
• Use of non-essential cookies and tracking technologies
• Sharing data with third-party partners for marketing purposes (with explicit opt-in)
• Collection of feedback and public testimonials

Note: Consent can be withdrawn at any time without affecting the lawfulness of processing based on consent before its withdrawal. Withdrawal can be done via email to privacy@netcraft.digital or through the unsubscribe link in emails.

The processing of your personal data is based on the following legal grounds, according to art. 6 GDPR:

Balancing of Interests (art. 6(1)(f)): When we rely on legitimate interests, we perform a Legitimate Interest Assessment (LIA) to ensure that your rights are not unduly affected. You have the right to object to processing based on legitimate interests.

We retain your personal data only for the period necessary to fulfill the purposes for which it was collected, respecting the following periods:

Automatic Deletion: We implement automated data deletion procedures upon expiration of the mentioned periods, except for data that must be retained according to legal obligations or for defense of our rights in court.

According to GDPR, you benefit from the following rights regarding your personal data:

12.1. Contact Details:

12.2. Privacy Policy Changes:

Netcraft Digital reserves the right to modify this Privacy Policy at any time to reflect changes in data processing practices, legal requirements or service improvements. Any substantial changes will be communicated through:

• Email notification to active Clients (at least 30 days in advance)
• Visible banner on website for Visitors
• Publication of updated version with highlighted changes
• Update of "Last Updated" date in document footer

We recommend periodically consulting this Privacy Policy to stay informed about how we protect your data.

12.3. Acceptance and Consent:

By using Netcraft Digital services, you confirm that you have read, understood and agree to the terms of this Privacy Policy. For processing based on consent, we will request your explicit separate agreement.