This English translation is provided for convenience. In case of discrepancies, the Romanian version prevails.

GDPR Policy — Protection of Personal Data

Last updated: March 2026 · Regulation (EU) 2016/679

1. Data controller

R.W.T. CreativPub S.R.L., with its registered office at Jud. Bacău, Mun. Onești, Str. Serelor, Nr. 10, tax ID (CUI) 27255944 (intra-Community VAT no. RO54281452), Trade Register no. J20/1000064/9040, is a personal data controller within the meaning of Regulation (EU) 2016/679 (GDPR).

Data protection officer (GDPR contact person): Florin Cojocariu · florin@smartworktogether.com · Tel: +40 723 352 959

2. Principles of data processing

We process your data in compliance with the GDPR principles:

  • Lawfulness, fairness, transparency — data is processed lawfully and transparently
  • Purpose limitation — collected for specified, explicit and legitimate purposes
  • Data minimisation — we collect only what is necessary
  • Accuracy — data is updated upon request
  • Storage limitation — kept only as long as strictly necessary
  • Integrity and confidentiality — appropriate security

3. Legal bases for processing

  • Performance of a contract (Art. 6(1)(b)) — processing orders and providing services
  • Legal obligation (Art. 6(1)(c)) — invoicing, tax records, reporting to authorities
  • Legitimate interest (Art. 6(1)(f)) — IT security, fraud prevention
  • Consent (Art. 6(1)(a)) — newsletter, non-essential cookies

4. Categories of data processed

  • Identification data: first name, last name
  • Contact data: email address, phone number
  • Company data (for corporate clients): name, tax ID (CUI), address
  • Financial data: transaction information (no full card details)
  • Technical data: IP address, browser type, cookie data

We do not process special categories of data (Art. 9 GDPR): data concerning health, religion, racial origin, political opinions, etc.

5. Rights of data subjects

Right of access (Art. 15 GDPR)

You can request a copy of the personal data we hold about you.

Right to rectification (Art. 16 GDPR)

You can request the correction of inaccurate data or the completion of incomplete data.

Right to erasure — “right to be forgotten” (Art. 17 GDPR)

You can request the erasure of data when it is no longer necessary for the original purpose. Exception: data required by law (tax, accounting).

Right to restriction of processing (Art. 18 GDPR)

Under certain conditions, you can request the restriction of processing.

Right to data portability (Art. 20 GDPR)

You can request your data in a structured, machine-readable format.

Right to object (Art. 21 GDPR)

You can object to processing for direct marketing purposes at any time, free of charge.

To exercise any right, send a request to: florin@smartworktogether.com. We will respond within 30 calendar days.

6. International transfers

Your data is processed mainly within the EU/EEA. Where we use cloud service providers with servers outside the EEA, we ensure that appropriate safeguards are in place (standard contractual clauses approved by the European Commission).

7. Technical and organisational security measures

  • Data transmission over HTTPS (TLS)
  • Role-based restricted access to data
  • Confidentiality agreements with collaborators
  • Periodic backups and recovery procedures
  • Access monitoring and periodic security audits

8. Supervisory authority

If you believe that the processing of your data infringes the GDPR, you have the right to lodge a complaint with:

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP) (Romanian Data Protection Authority)
Bd. G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 București
Tel: +40.318.059.211
Website: www.dataprotection.ro