Privacy Policy

The protection of your data is a responsibility we take seriously. We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and the applicable data protection legislation in Romania.

This policy explains:

  • ‣ what data we collect;
  • ‣ how long we keep it;
  • ‣ who we share it with;
  • ‣ what rights you have and how you can exercise them;
  • ‣ for what purposes we use it and on what legal basis.

Data controller

SC Risksoft SRL

  • Str. Ing. Giulini, nr. 7, Bucharest, Romania
  • Company Reg. No.: J2001004559404· VAT ID: RO13873074
  • Email: support@risksoft.ro
  • Website: www.risksoft.eu

Risksoft is currently not legally required to appoint a Data Protection Officer (DPO). For any personal data inquiries, you can contact us at the email address above.

Scope of this policy

This policy applies to all users and visitors of the website, as well as to the services provided through it, including contact forms, commercial inquiries, and newsletter subscriptions.

What data we collect

Data provided directly:

  • ‣ First and last name
  • ‣ Email address
  • ‣ Phone number
  • ‣ Company and position
  • ‣ Message submitted through the form


Automatically collected data:

  • ‣ IP address, anonymized where possible
  • ‣ Browser, operating system, and device type
  • ‣ Pages visited and website interactions
  • ‣ Cookies and online identifiers

Purposes and legal bases

Responding to requests

Legal basis: legitimate interest – Art. 6(1)(f) GDPR

Sending offers and commercial communications

Legal basis: consent – Art. 6(1)(a) GDPR

Newsletter

Legal basis: consent or performance of the requested service – Art. 6(1)(a) / Art. 6(1)(b) GDPR

Website functionality and security

Legal basis: legitimate interest – Art. 6(1)(f) GDPR

Traffic analysis and optimization

Legal basis: consent for analytical cookies – Art. 6(1)(a) GDPR

Cookies and traffic analysis

The website uses cookies for functionality, security, and traffic analysis. Below you can see the complete list of cookies used on risksoft.eu, grouped by category.

You can change or withdraw your consent at any time by clicking the cookie icon in the bottom-left corner of any page, or by using the "Change consent" button below.

How we use cookies:

Google Analytics 4

  • ‣ Used for aggregated usage statistics;
  • ‣ IP addresses are anonymized;
  • ‣ Active only with your consent (Statistics category).

Cookiebot:

  • ‣ Manages cookie consent;
  • ‣ Stores your preferences as proof of GDPR compliance;
  • ‣ Always active (Necessary category).

Recipients and processors

Data may be processed by contractual providers for:

  • ‣ hosting and IT infrastructure;
  • ‣ email and communication services;
  • ‣ traffic analysis;
  • ‣ marketing, where applicable.

All processors are contractually required to ensure the confidentiality and security of personal data.

International transfers

Some services used, such as Google or Microsoft, may involve data transfers outside the European Economic Area.

These transfers are carried out, where applicable, based on:

  • ‣ Standard Contractual Clauses (SCC); and/or
  • ‣ the EU–US Data Privacy Framework, where applicable.

Retention period

Response to requests
‣ 12 months
Commercial communications
‣ until consent is withdrawn
Newsletter
‣ until unsubscribe
Cookies
‣ according to the specific duration of each cookie type
Technical logs
‣ up to 6 months
Data required for defending rights
‣ according to statutory limitation periods

Automated decisions and profiling

We may use automated processing for:

  • ‣ content personalization,
  • ‣ usage statistics,
  • ‣ marketing, only with your consent.

We do not make automated decisions that produce legal effects or significantly affect users.

Data security

We implement appropriate technical and organizational measures to protect personal data, including:

‣ access control;

‣ encryption in transit, where applicable;

‣ security monitoring;

‣ internal policies and periodic audits.

Your rights

You have the right to:

‣ access your personal data;

‣ object to processing;

‣ rectify inaccurate data;

‣ data portability;

‣ erase your data;

‣ withdraw consent;

‣ restrict processing;

‣ file a complaint.

Competent authority:

ANSPDCP – www.dataprotection.ro

To exercise your rights:

support@risksoft.ro

Direct Marketing

You may object at any time to the processing of your personal data for direct marketing purposes.

In this case, we will no longer use your data for this purpose.

Updates

We may update this policy periodically to reflect legal, technical, or operational changes. The current version will always be available on the website.