Cookie settings

Choose what you accept. You can come back anytime via the footer (Cookie settings).

Strictly necessary

Basic site functionality and remembering these preferences. Cannot be disabled.

Traffic analytics

Google Analytics 4: which pages work and what to improve. Aggregated data, no names or emails.

Marketing

Google Ads: measures which campaign brought your quote request and may show relevant ads.
Fiber IT
ro
Legal · GDPR

Privacy and data processing policy

Last updated: 2026-09-07

This page describes which personal data reaches us through the site and the contact channels, why we use it, how long we keep it and what rights you have. It is written about what happens now, not about what might happen. We process data in accordance with Regulation (EU) 2016/679 (GDPR) and Romanian Law 190/2018.

1. Data controller

SC FIBER IT SRL, with its registered office at Str. Observatorului nr. 11, Cluj-Napoca, jud. Cluj, Romania, registered with the Trade Register under J12/178/2013, VAT ID RO31124491.

We have not appointed a data protection officer, because the law does not require us to. For any question about your data, write to the address above.

2. Which data we receive and where it comes from

All data comes directly from you, through the channel you choose:

  • Email and phone · your name, contact details, company and what you write or tell us about the project.
  • WhatsApp · your phone number and the conversation.
  • Newsletter (the form on the blog) · only your email address. The subscription is confirmed from the email you receive.
  • CVs sent to [email protected] · the contents of your CV and your message.
  • Visiting the site · technical data (IP address, browser type, pages requested), processed by Cloudflare to serve and protect the site.
  • Traffic statistics · only if you accept the Traffic analytics category in the banner: Google Analytics 4 receives the pages viewed, the device, where the visit came from, which contact button you press and a random identifier from a cookie. No names, emails or your phone number.

The site has no user accounts, no contact form, loads Google Analytics 4 and Google Ads measurement only with your consent. We do not ask for special categories of data (health, beliefs and the like) and ask you not to send them to us.

3. Why we use it and on what legal basis

Purpose Data Legal basis (GDPR)
Replying to enquiries and preparing a quote name, contact details, company, what you tell us about the project steps taken at your request before a contract, art. 6(1)(b), and our legitimate interest in replying, art. 6(1)(f)
Performing the contract and communicating on the project contact details, project details the contract, art. 6(1)(b)
Invoicing and accounting billing details legal obligation, art. 6(1)(c)
Newsletter email address your consent, art. 6(1)(a), which you can withdraw at any time via the unsubscribe link
Recruitment your CV and message steps taken at your request before a possible employment contract, art. 6(1)(b)
Running and securing the site technical data about the visit our legitimate interest in serving and protecting the site, art. 6(1)(f)
Google Ads campaign measurement whether you came from a Google ad (the click identifier) and which contact button you pressed your consent in the cookie banner, Marketing category, art. 6(1)(a), which you can withdraw at any time from the footer
Traffic statistics (Google Analytics 4) pages viewed, device and browser, where the visit came from, which contact button you press (phone, WhatsApp, email), a random identifier from a cookie your consent in the cookie banner, art. 6(1)(a), which you can withdraw at any time from the footer

We make no automated decisions affecting you and do no profiling. If you do not give us your contact details, we cannot reply or prepare a quote; the rest of the data is optional.

4. How long we keep the data

  • Correspondence and quote requests · 5 years from the last contact
  • Contract data · 5 years from the end of the engagement
  • Financial and accounting documents · 10 years, as required by accounting law
  • Newsletter email address · until you unsubscribe
  • CVs · for the duration of the selection process for that role; if you want us to keep it for future roles, you tell us
  • Consent cookie · 12 months, see the cookie policy
  • Technical data about the visit · at Cloudflare, for the short period in their policy
  • Google Ads campaign measurement · cookies for 90 days; conversions stay in the Google Ads reports, without your contact details
  • Traffic statistics · at Google: per-visitor data for at most 14 months (the Google Analytics 4 setting), aggregated reports without a time limit; its cookies live 2 years, see the cookie policy

5. Who else sees the data

We do not sell or rent your data to anyone. It is seen, strictly as far as needed to do their job, by:

  • Cloudflare · hosts and protects the site; sees the technical data of the visit.
  • Google · Google Analytics 4 and Google Ads, only with your consent; processes the traffic statistics and campaign measurement on our behalf.
  • app.fiberit.ro · our platform, where newsletter subscriptions arrive and from which the confirmation email and the newsletter are sent.
  • Our email, newsletter delivery and accounting providers · for correspondence, emails and invoices.
  • WhatsApp (Meta Platforms Ireland) · only if you choose to write to us there; the conversation goes through their service, under their rules.
  • Public authorities · if the law requires it or in the course of legal proceedings.

6. Transfers outside the European Union

Some of the providers above are companies outside the European Union or have infrastructure there as well. When data reaches such a country, the transfer is based on the standard contractual clauses approved by the European Commission (art. 46 GDPR) or on an adequacy decision (art. 45), such as the one for the EU-US Data Privacy Framework.

If you want to know exactly where your data goes in a specific case, write to us and we will tell you.

7. How we protect the data

The whole site runs over an encrypted connection (HTTPS). The site is static, with no database and no accounts, and its fonts and all its resources load from our own domain, not from third parties. Emails and our platform are accessible only to the people who need them, with authentication, and are backed up.

8. Your rights

Under the GDPR you have the right:

  • to know which data we hold about you and to receive a copy (access)
  • to correct it if it is wrong (rectification)
  • to ask for its erasure, when we no longer have a legal reason to keep it
  • to ask for the restriction of processing
  • to receive the data in a common format so you can take it elsewhere (portability)
  • to object to processing based on legitimate interest
  • to withdraw your consent at any time, without affecting what was done before
  • not to be subject to an automated decision; we make no such decisions anyway

Write to [email protected]. We reply within one month at most; for complex requests we may extend by two more months and will let you know. So that we do not hand data to someone else, we may ask you to confirm your identity.

9. Complaints

If you are unhappy with how we process your data, you may turn to the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) and, separately, to the courts:

B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 Bucharest, Romania
Email: [email protected]
Web: www.dataprotection.ro

10. Minors

The site and our services are not aimed at people under 16 and we do not knowingly collect data from them. If we learn that we have received such data, we delete it.

11. Cookies

What the site stores in your browser and how you change your choice is described in the Cookie Policy.

12. Changes to this policy

When something changes in the way we process data, we update this page and the date above. The current version is always the one here.