Privacy policy
Legal · Updated: 7 October 2026
This policy explains what personal data we collect through abg-soft.ro, why we collect it and your rights under Regulation (EU) 2016/679 (GDPR).
Who the controller is
The data controller is [Company legal name] (ABG Soft), VAT/CUI [CUI], Trade Register no. [Reg. Com. no.], registered office at [Registered address], Romania. For any data-related question, contact us at [email protected] or +40 754 529 750.
What we collect and why
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact form | name, email, phone (optional), company (optional), message (not saved on our server: they only reach us by email) | to reply and send you a quote | consent and pre-contractual steps (Art. 6(1)(a) and (b)) |
| Website scanner | the scanned site address, scan results (not kept on our server: the report stays only in your browser tab) | to generate the report | legitimate interest (Art. 6(1)(f)) |
| Full scanner report | name, email, phone (optional), the report (not saved on our server: they only travel by email, to you and to us) | to send the report and contact you about it | consent (Art. 6(1)(a)) |
| Running the site | IP address, browser type | security and abuse prevention (rate limiting) | legitimate interest |
| Cookie choices | random identifier, the choices made, policy version, date, GPC signal (no IP address) | to prove we asked for consent | legal obligation (Art. 6(1)(c) and Art. 7(1)) |
| Traffic statistics (only with consent) | pages visited, country, device type, aggregated | to improve the site | consent (Art. 6(1)(a)) |
We don't use your data for newsletters or advertising, and we never sell it.
Traffic statistics
Only if you consent in the cookie banner do we use Cloudflare Web Analytics, which measures visits without cookies and without identifying individual visitors. Without consent it doesn't load. You can change your choice at any time with "Cookie settings" in the page footer. Details in our Cookie policy. We don't use Google Analytics, Facebook Pixel or other tracking tools.
Who we share data with
We use the following providers, who process data on our behalf under contract:
- Hetzner Online GmbH (Germany) — the server the website runs on;
- Cloudflare, Inc. — delivering and protecting the website (CDN, firewall, bot protection) and, only with your consent, traffic statistics;
- Resend — sending emails (notifications and reports);
- Upstash — rate limiting and the anonymous record of cookie choices;
- Google — measuring the scanned site's speed through PageSpeed Insights (only the scanned site address is sent, never your contact details).
Some providers may process data outside the European Economic Area. Such transfers rely on the EU–US Data Privacy Framework adequacy decision or the European Commission's standard contractual clauses.
How long we keep data
- emails received through the contact form and with report requests: up to 24 months after the last contact, then deleted;
- scan reports: not kept on our server; they stay only in your browser tab until you close it;
- technical data for rate limiting: up to one hour;
- the anonymous record of cookie choices: 24 months.
Your rights
You have the right to access, rectify, erase, restrict, port and object to the processing of your data, and to withdraw consent at any time without affecting earlier processing. Write to [email protected] and we'll reply within 30 days.
If you believe your data isn't handled correctly, you can complain to the Romanian data protection authority, ANSPDCP, B-dul G-ral Gheorghe Magheru nr. 28-30, sector 1, Bucharest (dataprotection.ro), or the authority in your country.
Notice for US residents (CCPA/CPRA)
We do not sell or share personal information, as those terms are defined by the California Consumer Privacy Act and similar US state laws, and we don't use it for cross-context behavioural advertising. We honour the Global Privacy Control signal. You can exercise your rights to know, correct and delete by writing to [email protected]; we won't discriminate against you for doing so.
Changes
We may update this policy. The date of the last update is shown at the top of the page.