Legal

Privacy Policy

Effective date: 25 July 2026

This Privacy Policy explains how EVYNTRA S.R.L. processes personal data when you visit evyntra.com, contact us by email, or manage your analytics preferences.

01Who We Are

EVYNTRA S.R.L. is the data controller for the processing described in this policy.

Registered office
Bucureşti Sectorul 5, Strada Mihail Sebastian, Nr. 37C, Bl. 1, Ap. 26, Romania
Trade Register no.
J2026009926000
CUI / VAT number
RO53935796
Privacy contact
corporate@evyntra.com

We have not designated a separate Data Protection Officer contact for this website. Privacy and data-subject requests should be sent to the address above.

02How We Collect Personal Data

We may receive personal data:

The contact form displayed on the website is not active at launch. It can be filled in, but its submission control is disabled and it does not collect or transmit personal data.

03How We Use Personal Data

3.1 Direct Email Correspondence

If you contact us at corporate@evyntra.com, we may process your name, email address, company details, message, attachments, and subsequent correspondence.

We use this information to:

The legal basis is our legitimate interest in managing relevant business communications under Article 6(1)(f) GDPR. Where your request concerns steps before entering into a contract, Article 6(1)(b) GDPR may also apply.

Our legitimate interests are responding to genuine enquiries, maintaining professional relationships, and protecting our legal position. We consider these uses proportionate because you choose to contact us and can reasonably expect a response and limited correspondence record.

Google Workspace supports our corporate email service and may process correspondence on our behalf.

We normally retain this information for up to 12 months after the last meaningful contact. We may keep relevant records longer where a contract, statutory retention duty, dispute, security issue, or legal claim requires it.

3.2 Hosting, Delivery, and Security Logs

When you access the website, our hosting environment may process technical information such as:

We use this information to deliver the website, maintain its stability, diagnose faults, detect misuse, investigate incidents, and protect our systems.

The legal basis is our legitimate interest in operating and securing the website under Article 6(1)(f) GDPR. DigitalOcean provides hosting and technical infrastructure.

Technical logs are normally retained for up to 30 days. Relevant records may be preserved longer where reasonably necessary to investigate or document a security incident, abuse, or legal claim.

3.3 Google Analytics 4

With your consent, we use Google Analytics 4 to understand how visitors use the website. Depending on our configuration and your device, this may involve:

Google states that Google Analytics does not log or store individual IP addresses from users in the European Union, Switzerland, or the United Kingdom; IP data is used for approximate location before being discarded. More information is available in Google's EU-focused Analytics privacy information.

We use Analytics data to understand aggregated website use, identify technical or content improvements, and evaluate whether the site communicates effectively.

The legal basis is your consent under Article 6(1)(a) GDPR and the applicable Romanian rules on non-essential storage or access to information on a user's device.

Google Analytics remains disabled until you choose Accept analytics or enable Analytics in Cookie Preferences. If you reject Analytics, the website remains available. You may withdraw consent at any time by reopening Cookie Preferences. Withdrawal does not affect processing that occurred lawfully before withdrawal.

Analytics user-level and event-level data is configured for retention for 14 months. Aggregated reports may remain available without directly identifying you.

Google provides the Analytics service and may process Analytics information under its applicable data-protection terms. We do not intentionally send names, email addresses, or other direct contact details to Google Analytics.

3.4 Cookie-Preference Record

When you make a cookie choice, the website stores the preference needed to respect that choice. Depending on the consent solution, the record may contain:

We use this information to apply your selection and maintain evidence of consent preferences. The legal bases are compliance with applicable consent obligations under Article 6(1)(c) GDPR and our legitimate interest under Article 6(1)(f) GDPR in maintaining reliable consent records.

The preference is retained for six months, after which the website asks you to choose again. You can change the choice sooner through Cookie Preferences.

3.5 Contact Form Preview

The form currently shown on the website is a non-functional preview. It can be filled in, but its submission control is disabled and nothing is sent: entered information stays in your browser only, and EVYNTRA S.R.L. does not receive, store, or otherwise process information through this form.

Before the form is activated, this policy must be updated to describe the actual form processor, delivery method, data fields, recipients, safeguards, and retention period.

04Recipients and Service Providers

We limit access to personal data to people and providers who need it for the purposes described above. Current provider categories include:

Providers acting on our behalf are expected to process personal data under appropriate contractual and confidentiality obligations.

05International Data Transfers

Some providers may process information in the United States or other countries outside the European Economic Area. Where European data-protection law requires safeguards for such transfers, we rely on the mechanism applicable to the provider and service, such as an adequacy decision or European Commission Standard Contractual Clauses.

DigitalOcean publishes information about its Data Processing Agreement and international-transfer approach in its GDPR FAQ. Google publishes applicable data-processing terms for Google Workspace and Google Analytics.

You may contact us for further information about the safeguards relevant to your personal data.

06How Long We Keep Personal Data

We apply the following standard periods:

Email correspondence
Up to 12 months after the last meaningful contact
Hosting & security logs
Up to 30 days
Google Analytics data
14 months (user-level and event-level)
Cookie-preference record
Six months

We may retain specific information longer where necessary for a contract, statutory obligation, dispute, investigation, security incident, or legal claim. When information is no longer required, it is deleted, anonymized, or placed beyond ordinary use in accordance with the relevant provider's capabilities and our retention procedures.

07Your GDPR Rights

Subject to the conditions and limits in applicable law, you may ask us to:

You also have the right to object at any time to personal-data processing for direct marketing. EVYNTRA S.R.L. does not use the website processing described in this policy for direct email marketing.

To exercise a right, email corporate@evyntra.com. We may request information reasonably necessary to verify your identity and locate the relevant data. We will respond within the period required by applicable law.

08Complaints

If you believe that your personal data has been processed unlawfully, you may contact us first so that we can review the concern.

You also have the right to lodge a complaint with the Romanian supervisory authority:

Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal — ANSPDCP
www.dataprotection.ro

You may also contact the supervisory authority in the European Union or European Economic Area country where you live or work, or where the alleged infringement occurred.

09Whether Data Is Required

You are not legally required to email us or consent to Google Analytics. If you do not provide information needed to answer an enquiry, we may be unable to respond meaningfully. Rejecting Analytics does not restrict access to the website.

10Automated Decision-Making

The processing described in this policy does not involve automated decision-making, including profiling, that produces legal effects or similarly significant effects for you.

11Security

We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. No internet transmission or storage system is completely secure, so absolute security cannot be guaranteed.

12Third-Party Links

The website links to LinkedIn and may link to other third-party services. Those services process personal data under their own policies and are independently responsible for their practices. Review their notices before providing information to them.

13Changes to This Policy

We may update this policy when website functionality, providers, data use, or legal requirements change. The effective date at the top identifies the current version. Material changes should be communicated through an appropriate website notice where required.

14Contact

Questions or requests about this policy or your personal data can be sent to:

corporate@evyntra.com