Privacy policy

Who processes your data

RezolvIT Services S.R.L., with its registered office at Strada Barometrului 20A, sector 2, București, registered with the Trade Register under no. J40/579/2014, tax ID RO32684110 (“RezolvIT”) is the controller of the personal data we receive through rezolvit.ro. Our mailing address is Calea Moșilor 100–104, etaj 2, 020881, sector 2, București.

This policy is based on Regulation (EU) 2016/679 on data protection (the “GDPR”) and forms part of the website’s terms and conditions.

Data protection officer

RezolvIT has appointed a data protection officer. For any question about your data, write to them at dataprotection@rezolvit.ro.

What data we process and why

For each situation: what data we receive, why, and on which legal basis under Article 6(1) of the GDPR (points (a), (b), (c) or (f)).

• You send us a request through a form (free audit, contact). Data: phone number, email and, if you fill them in, name, company, city, number of computers and servers and what is getting in your way. Purpose: to confirm by email that we received your request, to call you and to prepare your offer. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b)).
• You fill in a form on the website. Data: your IP address and technical data about your browser and device, checked by Cloudflare Turnstile. Purpose: to stop bots from sending fake requests. Legal basis: our legitimate interest in protecting our forms (Art. 6(1)(f)). Details in the Turnstile privacy policy.
• You subscribe to the newsletter. Data: your email address. Purpose: to send you the newsletter. Legal basis: your consent (Art. 6(1)(a)), confirmed by email; you can unsubscribe from any message.
• You write to us in the chat. Data: your email address, which we ask for before the conversation, your messages and, if you give them to us, your name and phone number; at the email step, also your IP address and technical data about your browser and device, checked by Cloudflare Turnstile. Purpose: to reply to you, to put you in touch with a member of our team, to email you the link to the conversation so you can pick it up again, and to let you know when you have a new reply. We contact you outside the chat only if you ask us to. Your address does not go on the newsletter without your consent. Legal basis: steps taken at your request (Art. 6(1)(b)) and our legitimate interest in replying to visitors and stopping bots (Art. 6(1)(f)).
• You accept marketing cookies. Data: the source of your visit (the landing page, the campaign, the search or the website that brought you to us), sent along with the form. Purpose: to know what brings us requests. Legal basis: your consent (Art. 6(1)(a)).
• You accept analytics or marketing cookies. Data: browsing data collected through Google Analytics 4, Google Ads and Meta Pixel (cookie identifiers, pages visited, IP address). Purpose: aggregated statistics about the website and measuring our ads. Legal basis: your consent (Art. 6(1)(a)). Details in our cookie policy.
• You send your CV to jobs@rezolvit.ro. Data: the data in your CV and email. Purpose: recruitment, for the position you chose and, for one year, for other suitable positions. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b)), and our legitimate interest in letting you know about other positions (Art. 6(1)(f)), which you can object to at any time.
• You are a RezolvIT client or work for one. Data: name, job title, phone number, email address, mailing address. Purpose: performing the contract and corresponding with you about the services. Legal basis: the contract (Art. 6(1)(b)) and our legal invoicing and archiving obligations (Art. 6(1)(c)).
• You visit the website. Data: your IP address and technical data about the request, processed by our hosting provider. Purpose: to load the website and protect it from attacks. Legal basis: our legitimate interest (Art. 6(1)(f)).
• The authorities ask us for data. Data: any of the above, as applicable. Purpose: to respond to legal requests. Legal basis: legal obligation (Art. 6(1)(c)).

Form requests, newsletter subscriptions and chat conversations go into our client management application (MspCoreX), which we develop ourselves. If you decline to give us the data a form asks for, we cannot respond to that request.

The AI assistant in the chat

In the chat, the first reply comes from an AI assistant, which tells you from the start that it is an AI assistant. The assistant runs on our own servers, alongside the chat, and does not send your conversation to an external AI provider. It answers only from the information published on the website, makes no decisions with legal effects on you and can hand you over to a member of our team at any time.

How long we keep your data

• Form requests and chat conversations: for the duration of the discussion and of any business relationship that follows; if you don’t become a client, no more than 3 years from our last contact.
• The newsletter: until you unsubscribe or withdraw your consent.
• The source of your visit and cookies: as long as shown in the tables in our cookie policy.
• CVs: one year from receipt, so we can also let you know about other suitable positions; then we delete them. You can ask us at any time to delete them sooner.
• Client data: for the duration of the contract and then for as long as invoicing and archiving laws require.

At the end of these periods, we delete or anonymize the data. We do the same with data for which you withdraw your consent.

Who we share your data with

We do not sell your data. We only share it with:

• the providers that help us run the website, as processors, within the limits of their contracts with us: Cloudflare (website hosting, checking forms and the chat for bots with Turnstile, and forwarding forms to MspCoreX) and, only if you accept analytics or marketing cookies, Google (Google Analytics 4, Google Ads);
• Meta Platforms Ireland Limited, only if you accept marketing cookies: for collecting and transmitting data through Meta Pixel, we and Meta are joint controllers; once Meta receives the data, it processes it on its own behalf, for ads on Facebook and Instagram;
• public authorities, auditors or institutions that oversee us, when the law requires it;
• our legal or financial advisors and the courts, if a dispute arises;
• anyone else, only with your express consent.

The chat, the AI assistant and MspCoreX run on our own servers.

Data transfers outside the EU and EEA

Cloudflare, Google and Meta may also process data outside the European Union and the European Economic Area, for example in the US. Before any such transfer, we make sure the GDPR conditions are met: the EU–US adequacy decision (Data Privacy Framework) or the standard contractual clauses approved by the European Commission.

Your rights

Under the GDPR, you have the right:

• of access: to find out whether we process your data and to receive a copy of it;
• to rectification: to have incorrect data corrected and incomplete data completed;
• to erasure: in the cases provided by law, for example if you withdraw your consent or the data has been processed unlawfully;
• to withdraw your consent at any time, without affecting the processing carried out before; for cookies, from the “Cookie settings” button in the website footer;
• to data portability: to receive the data you provided in a structured, machine-readable format, or to have us send it to another controller;
• to restriction of processing: for example while we check a dispute about the accuracy of the data;
• to object: to processing based on our legitimate interest and to direct marketing;
• to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP, the Romanian data protection authority, www.dataprotection.ro).

To exercise your rights, email us at dataprotection@rezolvit.ro or send a written, dated and signed request to Calea Moșilor 100–104, etaj 2, 020881, sector 2, București. We will reply within one month at the latest.

How we protect your data

We take the technical and organizational measures needed to prevent your data from being lost, stolen, misused, or accessed, disclosed, altered or destroyed without authorization: encryption, passwords, access limited to those who need the data, regular updates and security testing of our systems, and confidentiality training for our team.

RezolvIT is certified to ISO 9001:2015 and ISO/IEC 27001, the standard for information security management systems.

Data of children under 16

Our website and services are aimed at companies, and the processing described above only concerns people aged 16 or over. We do not knowingly process the data of children under 16 without the consent of their parents or legal representatives. If we find out that this has happened, we stop the processing and delete the data.

Changes to this policy

We may change or supplement this policy at any time. The version in force is the one published on this page, with the date of the last update.

Contact

For any question about this policy: dataprotection@rezolvit.ro or by post at Calea Moșilor 100–104, etaj 2, 020881, sector 2, București.