Privacy policy & GDPR

This policy explains how we collect and use personal data when you visit this website or contact us, in line with the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).

1. Data controller

The controller is MANOLIU DIGITAL GROUP SRL, trading as MDigital Group, Str. Diaconu Coresi 53, Sector 1, Bucharest, Romania, Trade Register no. J2018005104409, VAT/CUI RO39183655. Contact for all privacy matters: [email protected].

2. Data we collect

Contact and enquiry forms: your name, email address, organisation, phone number (optional), the details of your request and your message.

Emails you send us: the content of your email and your contact details.

Technical data: our hosting provider records standard server logs (IP address, date and time, requested page, browser type) to operate and protect the website.

We do not use analytics, advertising or social media trackers on this website.

3. Purposes and legal bases

To answer your request and prepare a possible collaboration — steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in responding to business enquiries (Art. 6(1)(f)).

To operate, secure and protect the website against abuse — our legitimate interest (Art. 6(1)(f)).

Optional statistics or marketing cookies, if ever introduced — only with your consent (Art. 6(1)(a)), which you can withdraw at any time.

To comply with legal obligations such as accounting and tax rules (Art. 6(1)(c)).

4. Recipients

Your data is processed by our team and by our hosting and email provider acting as processor under a data processing agreement. We never sell your data.

We may disclose data to authorities where required by law.

5. International transfers

Our website and email are hosted in the European Union. Fonts and all website resources are served from our own server, so visiting the website does not send your data to third parties such as Google.

If a transfer outside the EEA ever becomes necessary, it will be protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

6. Retention

Enquiries and related correspondence: up to 24 months after our last exchange, unless a contract follows, in which case contractual and legal retention periods apply.

Server logs: kept for a short period by our hosting provider for security purposes.

Job applications: up to 12 months, or longer with your consent.

7. Your rights

You have the right to access, rectify and erase your data, to restrict or object to its processing, to data portability, and to withdraw your consent at any time without affecting prior processing.

To exercise your rights, email [email protected]. We reply within one month.

You also have the right to lodge a complaint with a supervisory authority — in Romania, the National Supervisory Authority for Personal Data Processing (ANSPDCP, www.dataprotection.ro), or the authority of your country of residence or work.

8. Security

We apply appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), restricted access and data minimisation. See our Security & data protection page for details.

9. Changes

We may update this policy. The date at the top shows the latest version.