Privacy Policy

Last Updated: June 10, 2025

NodeITStudio we are committed to protecting your privacy in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679, Romanian Law 506/2004, and other applicable data protection laws. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (www.nodeitstudio.com) or use our services.

1. Information We Collect

1.1 Personal Data

We may collect the following categories of personal data:

Identity Data: Name, username, title
Contact Data: Email, phone number, address
Professional Data: Company name, job title
Financial Data: Payment details (processed securely by third parties)
Technical Data: IP address, browser type, device information
Usage Data: Website interaction data, page visits
Marketing Data: Communication preferences

1.2 Collection Methods

We collect data through:

Contact forms and service requests
Website analytics (Google Analytics with anonymized IPs)
Cookies and similar technologies
Server logs (via Cloudflare)
Client service agreements

2. Legal Basis for Processing

We process personal data based on:

Contractual necessity: To fulfill our service agreements
Legitimate interests: For website security, analytics, and business operations
Consent: For marketing communications and non-essential cookies
Legal obligations: To comply with Romanian tax and business laws

3. How We Use Your Data

We use personal data for the following purposes:

To provide and maintain our services
To process transactions and send service-related communications
To improve our website and services
To prevent fraud and enhance security
To comply with legal obligations
For marketing (with consent)

4. Data Sharing and Transfers

4.1 Third-Party Processors

We may share data with:

Cloudflare: For CDN and security services
Payment processors: Stripe, PayPal for transactions
Analytics providers: Google Analytics (anonymized data)
Hosting providers: For website infrastructure

4.2 International Transfers

Data may be transferred outside the EU only with adequate protections under GDPR Article 46.

5. Data Retention

We retain personal data only as long as necessary:

Client data: 5 years after contract termination (for tax compliance)
Marketing data: Until consent withdrawal
Website logs: 7 days (Cloudflare default)
Cookies: As specified in our Cookie Policy

6. Your Rights Under GDPR

You have the right to:

Access: Request copies of your personal data
Rectification: Correct inaccurate data
Erasure: Request deletion under certain conditions
Restriction: Limit processing of your data
Portability: Receive your data in a structured format
Object: To processing based on legitimate interests
Withdraw consent: For marketing or cookies

To exercise these rights, contact us at [email protected].

7. Cookies and Tracking Technologies

We use:

Essential cookies: Necessary for website functionality
Analytics cookies: Google Analytics (anonymized)
Preference cookies: To remember user settings
Security cookies: Cloudflare's __cf_bm for bot protection

Detailed information is available in our Cookie Policy.

8. Data Security

We implement appropriate technical and organizational measures including:

SSL/TLS encryption for data transmission
Regular security assessments
Access controls and authentication
Data minimization principles
Secure development practices

9. Children's Privacy

Our services are not directed to individuals under 16. We do not knowingly collect data from children without parental consent.

10. Changes to This Policy

We may update this policy periodically. Significant changes will be notified via email or website notice.

11. Complaints

If you have concerns about our data practices, you may lodge a complaint with:

Our Data Protection Officer at [email protected]
The Romanian Data Protection Authority (ANSPDCP)

12. Contact Us

For privacy requests: [email protected]
Postal Address: NodeITStudio SRL, Bucharest, Romania
Response Time: We respond to requests within 30 days as required by GDPR