Privacy Policy

Last updated: August 10, 2026

This Privacy Policy explains how AFFITEK S.R.L. ("Affitek", "we", "us", "our") processes personal data in connection with this website, affitek.com, in accordance with Regulation (EU) 2016/679 (the "GDPR") and applicable Romanian law, including Law No. 190/2018 on the implementation of the GDPR.

1. Scope of this policy

This policy applies only to affitek.com, our corporate presentation website. It does not cover the separate consumer-facing websites operated within our advertising network, each of which has its own, dedicated privacy policy describing how it processes visitor data.

2. What personal data we process

We aim to keep data collection on this website to a minimum. We process:

• Technical and log data automatically generated by our hosting and content delivery infrastructure (e.g. IP address, browser type, date and time of access, pages requested) for security, fraud prevention, and operational purposes.
• Correspondence data you provide voluntarily when you contact us by email, such as your email address and the content of your message.

This website does not use advertising or analytics cookies, and does not run any visitor-tracking scripts. If this changes in the future, we will update this policy and, where required by Law No. 506/2004 on the processing of personal data in the electronic communications sector, request your prior consent through a cookie banner before placing any non-essential cookie.

3. Legal basis for processing

• Technical/log data: our legitimate interest (Art. 6(1)(f) GDPR) in keeping our website secure and operational.
• Correspondence data: our legitimate interest in responding to inquiries you initiate (Art. 6(1)(f) GDPR), or the performance of pre-contractual steps taken at your request (Art. 6(1)(b) GDPR) where relevant.

4. Recipients of personal data

We may share personal data with service providers who process data on our behalf under data processing agreements, currently limited to our infrastructure providers (Amazon Web Services, for website hosting, and Google, for email communication). We do not sell personal data to third parties.

5. International transfers

This website is hosted on Amazon Web Services infrastructure located in the European Union (Frankfurt, Germany). Where any of our service providers process data outside the European Economic Area, we rely on appropriate safeguards recognized under GDPR, such as the European Commission's Standard Contractual Clauses.

6. Data retention

Technical/log data is retained only for as long as necessary for the security and operational purposes described above. Correspondence is retained for as long as needed to address your inquiry and for a reasonable period afterward, unless a longer retention period is required by law.

7. Your rights

Under the GDPR, you have the right to:

• request access to your personal data;
• request rectification of inaccurate data;
• request erasure of your data, where applicable;
• request restriction of processing;
• object to processing based on legitimate interest;
• request data portability, where applicable;
• lodge a complaint with a supervisory authority.

You may exercise these rights by contacting us at office@affitek.com. You also have the right to lodge a complaint with Romania's National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, București, www.dataprotection.ro.

8. Children

This website is not directed at children, and we do not knowingly collect personal data from children through it.

9. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a revised "Last updated" date.

10. Contact us

For any questions about this Privacy Policy or how we handle your personal data, contact us at office@affitek.com.