Privacy Policy

1. Data Controller

Mio Servicii IT SRL
Registered office: Bd. Alexandru Obregia 38A, Sector 4, Bucharest, Romania
VAT: RO30988805 | Registration: J2012014420404
Contact email: ···

2. What Data We Collect

We only collect data strictly necessary to respond to your requests and to provide contracted services:

• Identification data: name, surname, company name
• Contact data: email address, phone number
• Communication data: content of messages sent through the contact form or email
• Technical data: IP address, browser type, operating system (collected automatically when visiting the website)

We do not collect sensitive data (ethnic origin, political beliefs, health data, etc.).

3. Purpose and Legal Basis

We process your data for the following purposes:

• Responding to inquiries (basis: consent and legitimate interest) — to respond to your quote requests, questions, or other communications initiated by you
• Service delivery (basis: contract performance) — to provide contracted services and issue fiscal documents
• Legal obligations (basis: legal obligation) — for compliance with Romanian tax and accounting legislation
• Website operation (basis: legitimate interest) — to ensure the functionality and security of the website

4. Data Retention

Personal data is kept for as long as necessary to fulfill the purposes for which it was collected:

• Non-contractual inquiries: maximum 12 months from last contact
• Contractual and fiscal data: as required by Romanian law (generally 10 years)
• Technical data (logs): maximum 90 days

5. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. Data may only be shared with:

• Hosting and email service providers (as data processors, with processing agreements in place)
• Public authorities, only when there is an express legal obligation

6. Data Transfers Outside the EU/EEA

We do not intentionally transfer personal data outside the European Economic Area. If a service provider we use operates outside the EU/EEA, we ensure that adequate safeguards are in place (Standard Contractual Clauses of the European Commission or adequacy decisions).

7. Your Rights

Under the GDPR, you have the following rights:

• Right of access — to request confirmation of processing and a copy of your data
• Right to rectification — to request correction of inaccurate data
• Right to erasure — to request deletion of data, except data retained under legal obligation
• Right to restriction — to request limitation of processing
• Right to portability — to receive data in a structured, commonly used, and machine-readable format
• Right to object — to object to processing based on legitimate interest
• Right to withdraw consent — at any time, without affecting the lawfulness of prior processing

To exercise any right, contact us at ···. We will respond within a maximum of 30 days.

If you believe your rights have not been respected, you have the right to file a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) — www.dataprotection.ro.

8. Cookies

The mio-it.ro website does not use tracking or marketing cookies. Only strictly necessary cookies may be used for website functionality (for example, to maintain language preference).

9. Data Security

We implement appropriate technical and organizational measures to protect personal data, including: encryption in transit (HTTPS/TLS), restricted data access on a need-to-know basis, and regular security system updates.

10. Policy Changes

We reserve the right to update this policy. Significant changes will be communicated by publishing the updated version on the website, with the date of the last update indicated.