Privacy Policy

  1. Home
  2. Privacy Policy

Last updated: 21 July 2026

1. Who we are

This privacy policy explains how CUBITRON SRL (“Cubitron”, “we”, “us”), registered with the Romanian Trade Register under no. J12/1733/2017, VAT ID 37415244, with its registered office at str. Albac, nr. 2, et. P, ap. 1, Cluj-Napoca, Cluj county, Romania, processes personal data as a data controller, in accordance with Regulation (EU) 2016/679 (“GDPR”) and the applicable Romanian legislation.

You can contact us at any time regarding data protection at: e-mail [email protected], telephone +40 785 123 433, or by post at the registered office address above.

2. What personal data we process

a) The contact form on the website

  • your name, e-mail address, telephone number and the content of the message you send us;
  • technical data collected automatically when the form is submitted: IP address, approximate location derived from the IP (country/city), the referring page (referrer) and campaign parameters (UTM), if any.

b) WhatsApp communications

If you contact us or we contact you via WhatsApp (including through the WhatsApp Business Platform), we process: your telephone number, your WhatsApp profile name and the content of the conversation. The WhatsApp service is provided by Meta Platforms; the way in which Meta processes data is governed by the WhatsApp privacy policy.

c) Direct correspondence

If you write to us by e-mail or call us, we process the contact details used and the content of the communication.

Our website does not use its own cookies and does not integrate traffic analytics tools.

3. Purposes and legal bases of the processing

  • Responding to your requests sent through the form, WhatsApp, e-mail or telephone — legal basis: steps taken prior to entering into a contract at your request (Art. 6(1)(b) GDPR) and our legitimate interest in communicating with the persons who contact us (Art. 6(1)(f) GDPR);
  • Performance of the contracts concluded with our clients — legal basis: Art. 6(1)(b) GDPR;
  • Compliance with legal obligations (e.g. accounting, tax) — legal basis: Art. 6(1)(c) GDPR;
  • Marketing communications — only if you have given your prior consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.

4. Who we disclose the data to

We do not sell your personal data. We share it only with:

  • Forminit (forminit.com) — the service that processes and stores the messages sent through the contact form, acting as a processor;
  • Meta Platforms Ireland Ltd. — for communications via the WhatsApp Business Platform;
  • our web hosting provider — for the technical operation of the website;
  • Google LLC — the website loads fonts from Google Fonts; when you access the website, your IP address is transmitted to Google servers in order to deliver the fonts;
  • public authorities — where we have a legal obligation to do so.

5. International transfers

Some of the providers listed above may process data outside the European Economic Area (e.g. in the United States). Such transfers take place only with appropriate safeguards under Chapter V of the GDPR, such as adequacy decisions (including the EU–US Data Privacy Framework) or standard contractual clauses approved by the European Commission.

6. How long we keep the data

  • messages received through the form, by e-mail or via WhatsApp — for as long as necessary to resolve the request and, thereafter, for no more than 3 years from the last communication;
  • data relating to contractual relationships — for the period required by accounting and tax legislation;
  • data processed on the basis of consent — until that consent is withdrawn.

7. Your rights

Under the GDPR, you have the right to request:

  • access to your data (Art. 15);
  • rectification of inaccurate data (Art. 16);
  • erasure of the data (the “right to be forgotten”, Art. 17) — see also the Data Deletion page for step-by-step instructions;
  • restriction of processing (Art. 18);
  • portability of the data (Art. 20);
  • objection to processing based on legitimate interest (Art. 21);
  • withdrawal of consent, at any time, without affecting the lawfulness of the processing carried out before the withdrawal.

To exercise these rights, write to us at [email protected]. We will respond within one month of receiving the request at the latest.

You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) — B-dul G-ral. Gheorghe Magheru 28-30, Bucharest, www.dataprotection.ro.

8. Data security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or disclosure, including encryption of communications (HTTPS), restricted access to the data and the selection of providers that offer adequate security guarantees.

9. Minors

Our website and services are not addressed to minors under 16 years of age and we do not knowingly collect data about them.

10. Changes to this policy

We may update this policy from time to time; the current version, together with the date of the last update, is permanently published on this page.