Privacy Policy

Version 2.0, updated 6 October 2026.

1. Who is responsible

CYBERBUILD SOLUTIONS S.R.L., tax ID (CUI) 53532866, registered office at 42 Ioan Stănei St., Corbu, Constanța County, Romania, is the controller of the data described here.
For any question or request about your data: [email protected]. We have no data protection officer (DPO), as the law does not require one; the company's director answers you directly.

Contact form and quote request: name, email, phone, company and your message. We use them to reply and send you an offer (pre-contractual steps, Art. 6(1)(b) GDPR). Kept for 2 years after the last contact.
Newsletter: email address and language. Only with your consent (Art. 6(1)(a) GDPR), until you unsubscribe; every email has an unsubscribe link.
Customers: contract and billing data, to perform the contract and meet legal obligations (accounting, e-invoicing). Accounting records are kept for 10 years, as the law requires.
Site usage statistics (Google Analytics, Microsoft Clarity): only if you accept in the cookie banner (consent). Details in the Cookie Policy.
Server logs: IP address, date and requested page. Used for security (legitimate interest, Art. 6(1)(f) GDPR) and kept only as long as needed for that.
Business prospecting: data that companies publish themselves (company name, public phone or email, publicly listed contact person), to offer them our services (legitimate interest). You can object at any time with a simple "no" and we will not contact you again. Kept for at most 12 months after the last contact.

We never sell or rent data. The site and its forms are hosted on our own server, in Romania.
Providers working for us: OVH (email, France); Google and Microsoft (statistics, only with your consent); for customers, the Keez accounting service, our accountant, the bank and the Romanian tax authority (ANAF, e-invoicing).
Public authorities, only when the law requires it.
Google and Microsoft belong to US-based groups. Transfers rely on the EU-U.S. Data Privacy Framework and/or the European Commission's standard contractual clauses.

You can ask at any time to access, correct, erase or restrict your data, to receive it in a portable form, and you can object to processing, including marketing messages.
You can withdraw consent at any time (newsletter, cookies), without affecting what was done before.
Write to [email protected]; we reply within one month. You can also complain to the Romanian authority (ANSPDCP, www.dataprotection.ro) or to the authority in your country.

Encrypted connection (HTTPS), restricted access to data and backups. We make no automated decisions with legal effects on you.

When we host or process data on a customer's behalf (website, CRM, Odoo, AI assistant), we act as processor under the Terms and Conditions (section 13) and the data processing agreement (DPA) signed with the customer.
We may update this policy; the version and date are shown at the top.