1. Company Information & Introduction

At Nevolut S.R.L. ("we", "us", "our"), registered in Bucharest, Romania under CUI 52296007 and EUID ROONRC.J2025059392001, we respect your privacy and are committed to safeguarding your personal data in compliance with GDPR and Romanian data protection laws.

2. Information We Collect

3. Why We Collect Data & Legal Basis

We process your information to:

• Provide, manage, and improve our services
• Process secure payments via Stripe
• Communicate about projects and updates
• Comply with legal obligations and ensure contract execution

Under GDPR, our legal bases include:

• Contract necessity (delivering the services you request)
• Legitimate interest (service improvement, fraud prevention)
• Legal compliance (accounting, audit)

4. How We Use & Share Your Data

Your data may be used to:

• Deliver and bill our services
• Provide customer support and project-related communications
• Improve user experience and website functionality
• Meet legal and regulatory obligations

We only share your data with trusted third parties essential to our operations:

5. Data Retention

We retain data for specific periods based on legal requirements and business needs:

• Contract-related data: Up to 5 years post-completion (Romanian fiscal law)
• Payment records: 10 years for accounting compliance
• Usage analytics: 2 years, then anonymized
• Session data: Until logout or expiration
• Marketing consents: Until withdrawn
• Blog content: Until deletion requested

Data is securely deleted or anonymized using automated schedules once retention periods expire.

6. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience and analyze website usage:

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect website functionality. By continuing to use our website, you consent to our use of cookies as described here.

7. Security Measures

We deploy industry-standard technical and organizational measures to protect your data. Payment information is handled through Stripe's secure, PCI-compliant infrastructure.

8. Your Privacy Rights (GDPR)

Under GDPR, you have the right to:

• Access, correct, or delete your personal data
• Restrict or object to certain processing
• Request data portability
• Withdraw consent at any time (when consent is the legal basis)

To exercise your rights, please contact us at admin@nevolut.com. We'll respond within the legally required timeframe.

9. Changes to This Policy

We may periodically update this Privacy Policy. Significant changes will be communicated via our website or directly to affected users.

10. Contact Us & Data Protection Officer

For privacy-related questions or to exercise your GDPR rights:

We respond to privacy requests within 48 hours for routine matters and within one month for complex GDPR requests. If unsatisfied with our response, you may contact the Romanian Data Protection Authority (ANSPDCP) at anspdcp.ro.