Privacy Notice

How we handle your personal data

Last updated: August 14, 2026

This Privacy Notice explains how personal data is collected and used when you visit WIS.ro or contact us through this website. It is written to comply with the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and applicable Romanian and EU data protection law.

WIS.ro is a marketing website. It does not host user accounts. The only personal data it handles is what you send us through the contact form, together with the standard technical data any website server records and privacy-friendly, cookieless analytics. Our separate Webris application has its own, more detailed Privacy Policy.

1. Who we are (Data Controller)

Teodoreanu C.M. C.F. I.I. (trading as WIS.ro)
Registered with the National Trade Register Office (ONRC), Argeș — EUID: ROONRC.F3/971/2019
Sole-trader tax identification code (CUI): 41485442
Moșoaia, Argeș County, Romania
Email:

The full registered address is available through the ONRC public register, on our invoices, or on request.

2. What we collect and why

2.1 Contact form

When you use the contact form we collect the name, email address, subject and message you provide. We use this data solely to read and respond to your enquiry. The message is delivered to us by email; we do not store it in a database on this website.

Legal basis: taking steps at your request prior to entering into a contract and our legitimate interest in responding to enquiries (GDPR Article 6(1)(b) and 6(1)(f)).

2.2 Technical data (server logs)

Like any website, our hosting server automatically records standard technical data such as your IP address, browser type, and the time of your request. This is used to operate the site securely, prevent abuse, and diagnose problems.

Legal basis: our legitimate interest in the security and integrity of the website (GDPR Article 6(1)(f)).

2.3 Analytics

We use Umami, a privacy-friendly analytics tool that does not use cookies and does not track individuals. It records only aggregated, non-personal information such as page views, navigation patterns, and referrer information. No profile is built and no data is sold or shared for advertising.

Legal basis: our legitimate interest in understanding, in aggregate, how the site is used so we can improve it (GDPR Article 6(1)(f)).

3. Cookies

We do not use advertising or third-party tracking cookies, and our analytics is cookieless. The only cookie this site may set is a strictly necessary session cookie, used when you submit the contact form to protect against cross-site request forgery. Strictly necessary cookies do not require consent under GDPR and the ePrivacy Directive.

4. Who your data is shared with

We do not sell your personal data. To operate the website and deliver contact-form messages we rely on one processor for hosting and email delivery: Cyber_Folks SRL (CIF RO33424916; EUID ROONRC.J2015014964400), Calea Floreasca 169, Bucharest, Romania (EU). It hosts this website and provides the mail server used to deliver your contact-form message to us. Your data is stored on EU-based infrastructure.

We may also disclose personal data where required by law, regulation, or a valid request from a competent authority, or to establish, exercise, or defend legal claims.

5. How long we keep your data

  • Contact-form messages: kept only as long as needed to handle your enquiry and any reasonable follow-up, then deleted.
  • Server logs: retained short-term for security and troubleshooting.
  • Analytics: aggregated, non-personal data only; no individual records are kept.

6. Where your data is processed

Your personal data is stored and processed within the European Union — specifically on servers located in Bucharest, Romania. We do not transfer your personal data outside the EU/EEA.

7. Your rights (GDPR)

Under the GDPR and applicable EU data protection law, you have the right to:

  • Access the personal data we hold about you (Article 15)
  • Rectify inaccurate or incomplete data (Article 16)
  • Erase your data — the “right to be forgotten” (Article 17)
  • Restrict processing in certain circumstances (Article 18)
  • Data portability — receive your data in a machine-readable format (Article 20)
  • Object to processing based on legitimate interests (Article 21)

To exercise any of these rights, contact us at . We may ask for information to verify your identity, and we will respond without undue delay and in any event within one month.

8. Complaints

If you believe we have handled your personal data unlawfully, you have the right to lodge a complaint with a supervisory authority. In Romania this is the National Supervisory Authority for Personal Data Processing (ANSPDCP).

9. Changes to this notice

We may update this Privacy Notice from time to time. The “Last updated” date at the top of this page indicates when it was last revised. Material changes will be reflected here.

10. Contact

For any privacy-related question, or to exercise your rights, contact us at .