Privacy Policy

Last updated: 28 July 2026

1. Data controller

The data controller is Online Synergy SRL, CUI RO45677505, with its registered office at 291–293 Splaiul Independenței, Sector 6, Bucharest, Romania.

For questions or requests regarding personal data, contact us at contact@online-synergy.ro.

2. Information we collect

When you use the contact form, we may collect:

• your name;
• company name, when provided;
• email address;
• telephone number, when provided;
• the content of your message;
• the date and time of submission;
• limited technical information, such as the IP address, required for website security, spam prevention and automatic language selection.

Please do not include sensitive data or confidential information that is not necessary for your request.

3. Purposes of processing

We use the information to:

• receive, review and respond to your request;
• discuss a potential collaboration and take steps requested before entering into a contract;
• maintain a record of correspondence relating to the request;
• protect the contact form and website against spam, fraud and misuse;
• automatically display Romanian to visitors in Romania and English to visitors in other countries.

Information submitted through the form is not used for newsletters, advertising profiles or unsolicited marketing messages.

4. Legal basis

Depending on the nature of the request, processing is based on:

• taking steps at the data subject's request before entering into a contract, under Article 6(1)(b) GDPR;
• Online Synergy SRL's legitimate interests in responding to enquiries, managing correspondence, protecting the website and providing the relevant language version, under Article 6(1)(f) GDPR.

5. Providing information

Using the contact form is voluntary. Without the required fields - name, email address, message and acknowledgement of this notice - we may be unable to receive or handle the request.

6. Recipients and technical providers

Information may be accessed only by authorised persons within Online Synergy SRL and, when necessary, by providers responsible for website hosting, email delivery, security or technical maintenance.

For automatic language selection, the website first checks whether the hosting or CDN infrastructure provides a country code. When that information is unavailable, the IP address may be sent to Country.is, which returns only a country code. We do not request or use GPS location, a precise address or exact coordinates. Country.is states in its public documentation that it does not log requests.

We do not sell or rent personal information. Information may be disclosed to public authorities only where required by law.

7. International transfers

Some technical providers may use infrastructure located outside the European Economic Area. Where applicable, transfers are made under a mechanism recognised by applicable law, such as an adequacy decision or Standard Contractual Clauses.

8. Retention

Contact messages and related information are normally retained for no longer than 12 months after the last communication.

Information may be retained for longer when a contractual relationship begins, a legal obligation applies, or retention is required to establish, exercise or defend legal claims.

To limit abusive submissions, the website temporarily uses a cryptographic representation of the IP address and the timestamps of submission attempts. These records are used solely for rate limiting, are ignored after one hour and are held in the server's temporary storage.

9. Cookies and language preference

The website does not use analytics, advertising or tracking cookies and currently includes no Google Analytics, Meta Pixel or similar technology.

We use one first-party, strictly functional cookie:

• Name: os_language
• Purpose: remembers the language selected or determined on the first visit, so that the website displays the appropriate Romanian or English version;
• Duration: 180 days;
• Third-party access: none;
• Content: only ro or en.

This cookie is not used for analytics, marketing or behavioural tracking. Because it is required for language selection and preference storage, we do not display a consent banner for it. You may delete it at any time through your browser settings; the website will run language detection again on your next visit.

10. Your rights

Subject to the conditions of the GDPR, you may request access, rectification, erasure, restriction of processing, objection to certain processing and data portability where applicable.

To exercise your rights, email contact@online-synergy.ro. We may request additional information strictly to verify the identity of the person making the request.

You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing - ANSPDCP.

11. Automated decisions

Information collected through the contact form is not used for solely automated decisions producing legal or similarly significant effects. Automatic language selection only changes the language version displayed and can be overridden manually at any time.

12. Data security

We apply reasonable technical and organisational measures to protect information against unauthorised access, loss, alteration or unlawful disclosure. No method of electronic transmission or storage can guarantee absolute security.

13. Policy changes

This policy may be updated when the form, technical services or legal requirements change. The updated version will be published on this page together with the date of the latest revision.