1. Introduction

JOYDEV SRL ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide when you:

• Contact us through our website contact forms
• Request information about our services
• Schedule consultations
• Subscribe to our newsletters
• Engage with us through email or phone

This information may include:

• Name and surname
• Email address
• Phone number
• Company name and position
• Professional interests and requirements
• Communication preferences

2.2 Technical Information

We automatically collect certain technical information when you visit our website:

• IP address and general location information
• Browser type and version
• Operating system
• Pages visited and time spent on our website
• Referring website addresses
• Device information (desktop, mobile, tablet)

3. How We Use Your Information

3.1 Lawful Basis for Processing

We process your personal information based on the following lawful bases under GDPR:

• Consent: When you provide explicit consent for marketing communications
• Legitimate Interest: To improve our services and website functionality
• Contract Performance: To deliver services you have requested
• Legal Obligation: To comply with Romanian and EU legal requirements

3.2 Purposes of Processing

We use your information to:

• Respond to your inquiries and provide requested information
• Deliver enterprise technology consulting services
• Send newsletters and service updates (with your consent)
• Improve our website and service offerings
• Analyze website usage and optimize user experience
• Comply with legal and regulatory obligations
• Protect against fraud and maintain security

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our website and conducting business (e.g., email marketing platforms, analytics providers)
• Legal Requirements: When required by law, court order, or government regulation
• Business Protection: To protect our rights, property, or safety, or that of our clients or others
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with prior notice)

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against:

• Unauthorized access, alteration, disclosure, or destruction
• Accidental loss or damage
• Unlawful processing

Security measures include:

• SSL encryption for data transmission
• Secure hosting infrastructure
• Regular security assessments
• Access controls and authentication
• Employee training on data protection

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy:

• Contact Inquiries: 3 years from last contact
• Newsletter Subscriptions: Until you unsubscribe
• Service Contracts: 7 years for legal and tax compliance
• Website Analytics: 26 months (Google Analytics retention)

7. Your Rights Under GDPR

As a data subject, you have the following rights:

7.1 Right of Access

You have the right to request access to your personal information and receive details about how we process it.

7.2 Right to Rectification

You can request correction of inaccurate or incomplete personal information.

7.3 Right to Erasure ("Right to be Forgotten")

You may request deletion of your personal information under certain circumstances.

7.4 Right to Restrict Processing

You can request limitation of processing in specific situations.

7.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used format.

7.6 Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

7.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time.

8. Cookies and Tracking Technologies

Our website uses cookies and similar technologies. Please refer to our Cookie Policy for detailed information about:

• Types of cookies we use
• How cookies are used
• How to manage cookie preferences
• Third-party cookies

9. International Data Transfers

Your personal information may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure adequate protection through:

• Adequacy decisions by the European Commission
• Standard Contractual Clauses
• Certification schemes and codes of conduct

10. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we discover we have collected information from a child under 16, we will delete it promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will:

• Post the updated policy on our website
• Update the "Last updated" date
• Notify you of significant changes via email (if applicable)
• Obtain new consent where required by law

12. Legal Compliance

This Privacy Policy complies with:

• European Union General Data Protection Regulation (GDPR) 2016/679
• Romanian Law no. 190/2018 on implementing GDPR
• Romanian Law no. 506/2004 on personal data processing in electronic communications
• ePrivacy Directive 2002/58/EC

13. Supervisory Authority

If you have concerns about our data processing practices, you have the right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP):

• Website: www.dataprotection.ro
• Email: anspdcp@dataprotection.ro
• Address: Bdul Magheru 28-30, Sector 1, București, Romania