Privacy policy

01 Who processes the data

The controller of your data is LENDAGO INTERNATIONAL S.R.L., a company registered in Romania, with its registered office at Calea Rahovei 322, District 5, Bucharest, Romania.

For any question about your personal data, write to us at contact@lendago.ro. We answer requests concerning your rights within one month of receiving them.

02 What data we collect and where it comes from

The site has no user accounts and does not ask you to register. The only place you give us data is the contact form.

Data you fill in yourself

• Name — required, so we know who we are talking to
• Email address — required, it is the channel we answer you through
• Phone — optional, only if you prefer us to call
• Company name — optional
• Project type and project size — optional, they help us prepare a useful answer
• Your message — required; please do not include sensitive data or third parties' confidential information in it

Data the site records automatically

• The IP address the form was sent from and the browser type (user agent) — to prevent automated submissions and abuse
• The page you first landed on and the page you came from (referrer)
• The campaign parameters in the page address, if present: gclid, utm_source, utm_medium, utm_campaign, utm_term, utm_content — they show us which advert or channel was useful to you
• The exact time of submission

03 Why we use it and on what legal basis

We do not use the data from the form to send you a newsletter or unsolicited commercial offers. If we ever do, we will ask for your consent separately, and that consent can be withdrawn at any time.

04 How long we keep it

• If the conversation does not lead to an engagement: we keep the enquiry for 3 years from the last contact, so we have the context if you come back, then delete it.
• If we become partners: we keep the data for the duration of the engagement and a further 10 years, as Romanian accounting legislation requires for supporting documents.
• The IP address and user agent, collected strictly to prevent abuse, are deleted together with the enquiry they are attached to.

You can ask for earlier deletion, and unless a legal obligation prevents us, we do it.

05 Who else has access to it

We do not sell anyone's data and we do not make it public. It reaches, strictly to the extent necessary:

• The people on our team dealing with the answer to your enquiry
• The hosting provider, on whose servers the site and the database run
• The email service provider, through which the notification reaches us and we answer you
• The accountant and, where relevant, legal advisers, once an engagement becomes contractual
• Public authorities, only where the law requires it

With the suppliers who process data on our behalf we have agreements in place under Art. 28 GDPR.

06 Transfers outside the European Union

The site and the database are hosted within the European Union.

If a service provider we use processes data outside the European Economic Area, the transfer takes place only on the basis of an adequacy decision of the European Commission or of the standard contractual clauses it has approved. We can provide the details on request.

07 Your rights

You have the following rights over your data. You can exercise them by writing to us at contact@lendago.ro, free of charge, and we answer within one month.

• The right of access — to find out what data we hold about you and receive a copy
• The right to rectification — to have incorrect data corrected or missing data completed
• The right to erasure — to have your data deleted, where there is no longer a legal reason to keep it
• The right to restriction — to pause processing while an objection is being verified
• The right to portability — to receive the data in a machine-readable format, so you can take it elsewhere
• The right to object — to object to processing based on our legitimate interest, including anything related to campaign measurement
• The right to lodge a complaint with the supervisory authority

The competent authority in Romania is the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), at B-dul General Gheorghe Magheru nr. 28-30, Sector 1, București, cod poștal 010336, email anspdcp@dataprotection.ro, https://www.dataprotection.ro. If you are resident in another EU country, you may also lodge a complaint with your local supervisory authority.

We would be glad if you wrote to us first — most of the time things get resolved faster directly.

08 How we protect the data

• Traffic between your browser and the site is encrypted (HTTPS)
• The form is protected against submissions from other sites and against bots
• Access to the database is limited to the people who need it for their work
• We take backups and periodically verify that they can be restored

No system is absolutely secure. If a breach occurs that could affect your rights, we will notify you and the authority within the deadlines set by the GDPR.

09 Automated decisions and profiling

We do not take automated decisions with legal effects concerning you and we do not carry out profiling. Your enquiry is read by a person.

10 Changes to this document

When we change something about how we process data, we update this document and change the date at the top of the page. If the change is significant, we flag it visibly on the site.