<p>This policy explains what personal data we process when you use the site, why we do it and what rights you have. [TO COMPLETE: reviewed by a lawyer before publishing]</p>
<h2>Who we are</h2>
<p>The data controller is [TO COMPLETE: company name, registration number, registered address]. You can write to us at [TO COMPLETE: data protection email address].</p>
<h2>What data we process</h2>
<ul>
<li>the data you send us through forms: name, email, phone and your message;</li>
<li>the technical data needed for the site to work and your cookie choice;</li>
<li>[TO COMPLETE: other categories, for example event registrations or newsletter subscriptions]</li>
</ul>
<h2>Why we process it and on what basis</h2>
<p>We answer your requests (steps prior to a contract), keep a record of consent (legal obligation) and, only with your consent, measure how the site and our campaigns are used. [TO COMPLETE: the exact legal basis for each purpose]</p>
<h2>How long we keep the data</h2>
<p>Form submissions are kept for 24 months and consent records for 3 years. [TO COMPLETE: confirm or adjust the periods]</p>
<h2>Who we share the data with</h2>
<p>We use providers who help us host the site and send emails, bound by data processing agreements. [TO COMPLETE: list of processors and transfers outside the EU, with their legal basis]</p>
<h2>Your rights</h2>
<p>You have the right of access, rectification, erasure, restriction, objection and data portability, and the right to withdraw your consent at any time. We answer within one month of receiving your request. You can lodge a complaint with the Romanian supervisory authority (ANSPDCP).</p>
<h2>How to contact us</h2>
<p>For any request about your data, use the request form on the website ([TO COMPLETE: link to the page with the form, for example /pm/forms/dsr]), write to us at [TO COMPLETE: email address] or call us at [TO COMPLETE: phone].</p>