Legal
Privacy Policy
Last updated: 11 September 2026
1. Who we are
This website is operated by EXTIND BUSINESS SRL, with its registered office in Iași, str. Baltagului nr. 14, registered with the Trade Register under no. J22/1827/2008, tax ID (CUI) 24027429 (“EXTIND”, “we”, “us”). Our spaces are at Strada Sfântul Andrei nr. 39A, Palas Campus, building B2, 6th floor, Iași.
We are the controller of the personal data collected through this website. For anything concerning your data, write to office@extind.ro or call 0722 523 102.
2. What we collect, and why
Contact form. When you send us a message we process your name, email address, phone number and company (where you provide them) together with the content of your message, so that we can reply and discuss our spaces with you. Legal basis: your consent (Art. 6(1)(a) GDPR) and, where the message concerns a possible agreement, steps taken at your request prior to entering into a contract (Art. 6(1)(b)).
Newsletter. If you subscribe through the form in the site footer, we process your email address solely to send you news about EXTIND and about community events. Legal basis: your consent (Art. 6(1)(a) GDPR). Every newsletter carries an unsubscribe link, and you can also unsubscribe at any time by writing to office@extind.ro. Our newsletters record whether they were opened and which links were clicked, so we can tell what is worth writing about.
Booking a visit. The booking form is provided by Cal.com. What you enter there — your name, email address, the slot you choose and any details you add — reaches both Cal.com and us, so that we can confirm and prepare your visit.
Technical data. Like any website, the servers hosting it automatically log your IP address, browser type, the page requested and the time of the request. We use this to keep the site running and secure. Legal basis: our legitimate interest (Art. 6(1)(f)) in keeping the site available and protected.
We do not use analytics tools, tracking pixels or advertising on this website. We do not profile you and we take no automated decisions about you.
3. Who else sees your data
We do not sell your data and we do not pass it to anyone for marketing purposes. The following providers may process it strictly in order to deliver the services we rely on:
- Cloudflare, Inc. — hosting and delivery of this website.
- Cal.com, Inc. — the visit booking form.
- Google Ireland Ltd. (Google Workspace) — our email. A message you send through the contact form is delivered to, and kept in, our mailbox there. The typefaces this site uses are served from our own server, so reading a page sends nothing to Google.
- CARTO — the map on our contact page, built on OpenStreetMap data. Your browser loads the map tiles directly from CARTO, which therefore receives your IP address.
- The Rocket Science Group LLC d/b/a Mailchimp (United States) — our newsletter. Your address is stored on Mailchimp’s servers in the United States, and they send the newsletters on our behalf. They receive nothing from this website unless you subscribe.
Cloudflare privacy policy·Cal.com privacy policy·Google privacy policy·CARTO privacy policy·Mailchimp privacy policy
4. Transfers outside the EEA
Some of the providers above are companies established in the United States. Any transfer is made on the safeguards provided by the GDPR — the standard contractual clauses approved by the European Commission or, where applicable, the EU–US Data Privacy Framework.
5. How long we keep it
- Messages sent through the contact form: up to 2 years from our last exchange, if you do not become a client.
- Newsletter email address: until you unsubscribe.
- Bookings: for as long as we need to organise the visit, and afterwards in our commercial records.
- Server logs: short retention periods set by our hosting providers.
If you become an EXTIND client, data relating to your contract is kept for the statutory archiving periods — generally 10 years for accounting documents.
6. Your rights
Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable format, and to withdraw your consent at any time — withdrawal does not affect the lawfulness of processing carried out beforehand.
To exercise any of these, write to office@extind.ro. We reply within one month at the latest.
If you are not satisfied with our answer, you can lodge a complaint with the Romanian supervisory authority, ANSPDCP, B-dul G-ral. Gheorghe Magheru nr. 28-30, sector 1, Bucharest, anspdcp@dataprotection.ro.
7. Security
The site is served over HTTPS only. Access to messages received through it is limited to the members of our team who need them. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.
8. Children
This website is addressed to professionals and companies. We do not knowingly collect data relating to persons under the age of 16.
9. Changes to this policy
We may update this policy when the way the site works changes, or when the law requires it. The version in force is the one published here, and the date of the latest update is shown at the top of the page.
10. Cookies
What this site stores in your browser is set out separately, in plain terms: