Privacy Policy

eBrains Digital SRL ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website ebrainsdigital.ro (the "Site") or engage with our services.

1. Data Controller

The data controller responsible for your personal data is:

eBrains Digital SRL
Romania, European Union
Email: [enable JS to see email]

2. Information We Collect

Information you provide directly

• Contact information: name, email address, company name, and any message you submit through our contact form or email.
• Service engagement data: project requirements, business details, and communications related to our services.

Information collected automatically

• Usage data: pages visited, time spent on pages, referring URLs, and navigation paths.
• Device data: browser type, operating system, screen resolution, and language preferences.
• IP address: used for approximate geographic location and security purposes.

3. How We Use Your Information

We use your personal data for the following purposes:

• Responding to your inquiries and contact form submissions.
• Providing, operating, and maintaining our services.
• Sending you project-related communications.
• Improving our website, services, and user experience.
• Complying with legal obligations, including GDPR and applicable EU regulations.
• Detecting and preventing fraud or abuse.

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Consent: when you voluntarily submit your information through our contact form or subscribe to communications.
• Contractual necessity: when processing is required to deliver our services to you.
• Legitimate interest: for website analytics, security, and improving our services, provided these interests do not override your rights.
• Legal obligation: when we are required to process data by applicable law.

5. Cookies and Tracking

We use a cookie consent system that stores your preferences in your browser's local storage. This is the only client-side data storage we employ. We do not use advertising, marketing, or third-party tracking cookies.

• ebd_cookie_consent (localStorage): stores your cookie consent preferences so we do not ask you repeatedly. Retained for 12 months.

Our Site loads fonts from Google Fonts and, on the homepage, a 3D graphics library from jsDelivr CDN. These external services may receive your IP address as part of standard HTTP requests, but they do not set cookies on our domain.

You can manage your cookie preferences at any time by clicking "Cookie Settings" in the footer of any page. If we introduce analytics or other optional cookies in the future, we will update this policy and request your consent before activating them.

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data. We may share your information only in the following circumstances:

• Service providers: trusted third parties who assist us in operating our website and delivering services (e.g., hosting providers, email services), bound by data processing agreements.
• Legal requirements: when disclosure is required by law, regulation, legal process, or governmental request.
• Business transfers: in connection with a merger, acquisition, or sale of assets, with appropriate safeguards in place.

7. International Data Transfers

Your data is primarily processed within the European Economic Area (EEA). If any data transfer outside the EEA is necessary, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by law. Contact form submissions are retained for up to 24 months unless you request earlier deletion. Project-related data is retained for the duration of our engagement and for a reasonable period afterward for legal and accounting purposes.

9. Your Rights Under GDPR

As a data subject in the EU, you have the following rights:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure: request deletion of your personal data ("right to be forgotten").
• Restriction: request that we limit the processing of your data.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interest.
• Withdraw consent: withdraw your consent at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [enable JS to see email]. We will respond within 30 days.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

11. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

eBrains Digital SRL
Email: [enable JS to see email]
Or use our contact form.

You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) or your local data protection authority.