Privacy Policy

1. Data controller

The data controller is MSP IT Technologies Solutions S.R.L., commercial brand MSP WebApps, based in Romania.

The canonical website is https://msp-webapps.ro. For data protection requests, use the contact details shown on this page.

2. Scope

This policy applies to data collected through msp-webapps.ro, the contact form and other digital channels operated by MSP WebApps in connection with our web development, software and digital marketing services.

3. Data we collect

We collect only data necessary for the purposes described below:

• Identity and contact data: name, email address, phone number (if voluntarily provided).
• Request data: service of interest, message submitted via the contact form, preferred language.
• Technical data: IP address, browser type, operating system, pages visited, traffic source — to the extent generated by the site infrastructure or essential technical services.
• Cookie preference: storage of consent for essential cookies.

4. Purposes of processing

• Responding to requests submitted via the contact form or email.
• Evaluating commercial enquiries and communicating about services.
• Technical operation, security and improvement of the website.
• Compliance with applicable legal obligations.

5. Legal basis

• Consent — for non-essential cookies where applicable, and for voluntarily initiated communications.
• Legitimate interest — for site security, abuse prevention and reasonable commercial follow-up.
• Contract or pre-contractual steps — when you contact us about a project.
• Legal obligation — where the law requires retention of certain information.

6. Retention

We retain data only as long as necessary for the purposes for which it was collected: contact enquiries are kept during evaluation and, where applicable, for the duration of the commercial relationship or as required by law. Technical log data may be kept for limited periods depending on security needs.

7. Recipients and processors

We may use technology providers (for example hosting, cloud infrastructure, email delivery) that process data on our behalf under appropriate data processing agreements. We do not sell personal data to third parties.

8. International transfers

Some technical services may involve processing outside the European Economic Area. Where required, we rely on appropriate GDPR safeguards such as standard contractual clauses.

9. Your rights

• Right of access, rectification and erasure.
• Right to restrict processing and data portability, where applicable.
• Right to object to processing based on legitimate interest.
• Right to withdraw consent without affecting prior lawful processing.
• Right to lodge a complaint with the Romanian supervisory authority (ANSPDCP) or your local authority.

10. Security

We apply reasonable technical and organisational measures to protect data against unauthorised access, loss or alteration. No online system can guarantee absolute security.

11. Changes

We may update this policy periodically. The latest update date is shown at the top of this page. Material changes will be reflected here.