Privacy policy

Who we are

The data controller is XDD CLOUD S.R.L., CUI 52111540, J2025049540005, Str. 1 Decembrie 1918 nr. 25, birou 2, 520008 Sfântu Gheorghe, jud. Covasna, România. For any data question, write to xdd@xdd.ro.

What we collect and why

• Quote form: name, email, phone (optional), company (optional), the chosen service and your message. We use them only to reply and prepare a quote (legal basis: steps prior to entering a contract, Art. 6(1)(b) GDPR). The form is processed on our own servers in Romania and reaches us only as an email in our xdd.ro mailbox. We do not store it in a database or pass it to other companies.
• Email, phone, WhatsApp: what you send us directly, used only to reply.
• Visit statistics: we use Umami, hosted on our own servers, with no cookies and no identification of visitors. We only see totals (pages, country, device type), so we do not ask for cookie consent.
• Server logs: IP address and requested page are recorded for security and abuse prevention (legitimate interest, Art. 6(1)(f) GDPR) and deleted periodically.

How long we keep data

Messages from people who do not become clients are deleted within 24 months. Client data is kept for the duration of the contract and then as long as accounting law requires.

Your rights

You have the right of access, rectification, erasure, restriction, portability and objection. Write to xdd@xdd.ro; we reply within one month. You can complain to the Romanian data protection authority (ANSPDCP, dataprotection.ro).

We do not sell data or use it for advertising.