Legal
Processing of personal data
We explain what personal data we process, for what purpose, how long we keep it and what your rights are. This document follows EU Regulation 2016/679 (GDPR).
Last updated: July 2026
1. Data controller
SymData SRL, Bucharest, is the controller for data collected through this website and in the commercial relationship with clients and prospective clients. For any request: office@symdata.ro.
2. What we collect
Through the contact form: name, company, email address, phone, approximate number of workstations and your message.
Minimal technical data: your language preference, stored locally in your browser. We do not profile and we do not sell data.
3. Purposes and legal bases
To answer quote requests and prepare a contract: Article 6(1)(b) GDPR. For later commercial communication, with your consent: Article 6(1)(a). For accounting records: Article 6(1)(c).
4. Who we share data with
Suppliers who support our activity as processors: web hosting, Microsoft 365 email services, ticketing, monitoring and backup platforms, accounting. Each is contractually bound to confidentiality.
5. Transfers outside the EU
Some cloud services may involve transfers outside the European Union. These take place only to suppliers offering adequate safeguards, through standard contractual clauses or adequacy decisions.
6. Retention
Quote requests that do not become contracts: 12 months. Client data: for the duration of the contract and afterwards according to statutory archiving terms, in particular 10 years for financial documents.
7. Your rights
You have the right of access, rectification, erasure, restriction, objection and portability, and the right to withdraw consent. Write to office@symdata.ro; we answer within 30 days. You may also contact the Romanian data protection authority.
8. Data security
We apply proportionate measures: named account access, two-step authentication, logging, encryption of backup copies and staff training.
9. When we administer client systems
Within IT administration services, SymData acts as a processor for data held in client systems. Roles and security measures are set in a data processing agreement annexed to the contract. We do not access document or message content except where strictly necessary to resolve a request.