Privacy Policy

Controller details

Legal basis and purposes of processing

We process your data on the basis of:

• Your explicit consent (GDPR art. 6(1)(a))
• Performance of a contract or steps taken prior to a quote (GDPR art. 6(1)(b))
• Compliance with legal obligations (GDPR art. 6(1)(c))

Main purposes:

• Responding to enquiries submitted through the contact forms
• Sending commercial offers and newsletters (only with consent)
• Improving the usability of our website and services

Categories of data collected

• Identification data: first name, last name, email address, phone number
• Technical data: IP address, browser type, operating system
• Usage data: pages visited, session duration, interactions with the site

How we collect data

Data is collected directly when you fill in the forms on the site, and automatically through cookies and similar technologies as you browse.

Cookies and tracking technologies

We use two analytics tools, with different roles:

• Umami — aggregate traffic statistics (pages visited, referral source, device type). It uses no cookies, stores no personal data and does not track visitors across sites. For that reason it runs without requiring consent.
• Microsoft Clarity — interaction heatmaps and anonymised session recordings, used solely to identify usability problems on the site. It uses cookies and is activated only after your explicit consent, given through the banner shown on your first visit.

You can change your mind at any time by clearing the site data in your browser settings — the banner will reappear on your next visit. You can also manage cookies directly from your browser settings.

How long we keep data

We keep personal data only for as long as it is needed for the purposes described above, or as required by law:

• Contact form data: until you request deletion, or a maximum of 3 years
• Analytics data and cookies: up to 2 years (depending on the type of cookie)

Your rights as a data subject

Under the GDPR, you have the right to:

• Access and rectify your personal data
• Request erasure (the “right to be forgotten”)
• Restrict processing
• Object to processing or request data portability
• Withdraw your consent at any time

To exercise these rights, contact us at office@netreach.ro or on +40 754 382 853 / +40 745 236 736.

Data security

We implement appropriate technical and organisational measures (SSL, access control, regular backups) to protect data against unauthorised access, disclosure or accidental destruction.

International data transfers

Data may be transferred to third-party service providers (e.g. hosting, marketing) located outside the European Economic Area, only under secure conditions and in accordance with the EU standard contractual clauses.

Links to other websites

Our policy does not apply to third-party sites we link to. We recommend reading the privacy policy of every site you visit.

Changes to this Privacy Policy

We reserve the right to update this policy. Any change will be published here together with the date of the latest revision.