Privacy Policy | Vectoora

1. Who we are

The data controller is PANA CONSTANTIN-RAZVAN PFA, trading as Vectoora.

Detail	Information
Legal name	PANA CONSTANTIN-RAZVAN PFA
Tax ID (CUI)	53154841
Trade Register no.	F2025052130000
Registered office	Constanța, Romania
Email	office@vectoora.com
Phone	+40 750 424 891

We are not required to appoint a Data Protection Officer (DPO). For any question about your data, write to office@vectoora.com.

2. What data we collect

When you send a message or a quote request through the website form: your name and company, email address, phone number (optional), the service or package you want (optional) and your message. Along with the message we store the date it was sent and the IP address, for security and to prevent abusive messages.

When you contact us directly by email, phone or WhatsApp: the data you share in the conversation.

When you become a client: the data needed for the contract and invoicing (name, company or personal identification details, address, contact details) and information about the project.

Internal visit statistics, without cookies: the page visited, date and time, language, device type, browser and operating system, the site or campaign you came from, an anonymized IP address (the last part of the address is removed before it is stored) and an anonymous visitor code valid for a single day (computed from this data, not stored in your browser), so we can count unique visitors without following you from one day to the next. We also record key interactions: clicks on phone, email, WhatsApp, social or external links and sending the form.

Google Analytics, only if you accept analytics cookies: data about how you use the website. Details in our Cookie Policy.

Our hosting provider may keep technical server logs (IP address, requested page, date) for security and operation.

We do not collect special categories of data (such as health data) and ask you not to send them through the form.

3. Why we use the data and the legal basis

Purpose	Legal basis (GDPR)
Replying to messages and preparing quotes	Art. 6(1)(b) – steps taken at your request before entering into a contract; Art. 6(1)(f) – our legitimate interest in answering enquiries
Delivering the project and communicating during it	Art. 6(1)(b) – performance of a contract
Invoicing, accounting and tax obligations	Art. 6(1)(c) – legal obligation
Website security, abuse prevention and anonymized internal statistics	Art. 6(1)(f) – legitimate interest
Traffic analysis with Google Analytics	Art. 6(1)(a) – your consent, which you can withdraw at any time
Defending our rights in case of a dispute	Art. 6(1)(f) – legitimate interest

We do not send newsletters or marketing messages without your separate consent, we do not sell data and we do not make automated decisions (including profiling) that have legal effects on you.

4. How long we keep data

Messages and quote requests that do not lead to a contract: up to 2 years after the last communication.
Client and project data: for the duration of the collaboration and 3 years after it ends (the general limitation period).
Financial and accounting documents (invoices, contracts): as long as accounting law requires (generally 5 to 10 years).
Internal visit statistics: 12 months, then deleted automatically.
Google Analytics data: up to 14 months, according to the account settings.
Your cookie choice: 6 months.

5. Who we share data with

Only we access the data. We share it only when necessary with:

our web and email hosting provider, whose servers run the website and the database;
Google Ireland Limited (Google Analytics), only if you accepted analytics cookies;
the OpenStreetMap Foundation, which displays the map on the contact page and, like any website, receives your browser’s IP address when the map loads;
our accountant and the tax authorities, for invoicing and legal obligations;
authorities or courts, only when the law requires it.

Providers that process data on our behalf do so only on our instructions and with appropriate safeguards.

6. Transfers outside the European Union

Google may also process Google Analytics data in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, and transfers are covered by the European Commission’s adequacy decision and standard contractual clauses. If you do not accept analytics cookies, no such transfer takes place.

7. Your rights

Under the GDPR you have the right:

of access – to find out what data we hold about you and receive a copy;
to rectification – to have incorrect or incomplete data corrected;
to erasure (“right to be forgotten”) – when the data is no longer needed or there is no legal basis;
to restriction of processing;
to data portability – to receive the data in a structured, commonly used format;
to object – to processing based on our legitimate interest;
to withdraw your consent at any time (for example for Google Analytics, from the ), without affecting processing carried out before.

To exercise your rights, email us at office@vectoora.com. We reply within one month of receiving the request; if needed, we may ask for information to confirm your identity.

If you believe your rights have been infringed, you can lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), 28-30 Gheorghe Magheru Blvd., Sector 1, Bucharest, www.dataprotection.ro, anspdcp@dataprotection.ro, or with the supervisory authority in your country.

8. How we protect data

The website uses an encrypted connection (HTTPS). The admin panel, where messages arrive, is password-protected and used only by us. We keep only the data we need and delete it at the end of the periods above.

9. Children

Our services are aimed at businesses and adults. We do not knowingly collect data from people under 16.

10. Changes to this policy

We may update this policy when the way we process data or the law changes. The date of the last update is shown at the top of the page. For the conditions of using the website, see our Terms and Conditions.