Data protection (GDPR)

Introduction

Thank you for your interest in our company, our products and/or our services. When you enter into any kind of relationship with us, you entrust us with your information.

The purpose of this privacy policy is to explain what data we process, why we process it and what we do with it. We take your privacy seriously and never sell lists of phone numbers and/or email addresses. Fully aware that your personal information belongs to you, we do our best to store it safely and process it carefully. We do not give information to third parties without informing you. This information is important, and we hope you will read it carefully.

This notice tells you about the information we process about you in connection with our organisation. When collecting this information we act as controller and, by law, we must tell you about ourselves, about why and how we use your data and about your rights over your data.

This privacy policy does not cover the applications and websites of third parties that you may reach through links on our website. These are beyond our control. We encourage you to review the privacy policy of any website and/or application before providing personal data.

Who we are

ALL SKY SOFTWARE SRL (“SKY” or “we”), with its registered office at Str. Gen. I. E. Florescu nr. 2, Bl. B1A, ap. 37, Târgoviște, Dâmbovița county, Romania, registered with the Trade Register under no. J15/638/2014, VAT ID RO33788550, is responsible for processing the personal data we collect directly from you or from other sources.

This data is obtained when you browse our website, by phone, by email or by other means when you use our services, including when you buy goods and/or after-sales services.

Who you are

Under the law, you — as an individual using our services/products, as the representative or contact person of a company, or as a person in any kind of relationship with our company — are an identified or identifiable natural person. To be fully transparent about data processing and to let you exercise your rights easily at any time, we have put measures in place to make communication between us, SKY, and you easier.

Our commitment

Protecting your personal information is very important to us. That is why we are committed to complying with European and national data protection law, in particular Regulation (EU) 2016/679, also known as the GDPR, and the following principles:

• Lawfulness, fairness and transparency — we process your data lawfully and fairly. We are always transparent about the information we use, and you are properly informed.
• You are in control — within the limits of the law, we let you review, change and delete the personal data you have shared with us and exercise your other rights.
• Data integrity and purpose limitation — we use data only for the purposes described when it was collected, or for new purposes compatible with them. In all cases our purposes comply with the law. We take reasonable steps to keep personal data accurate, complete and up to date.
• Security — we have put reasonable security and encryption measures in place to protect your information as well as possible. Please remember, however, that no website, application or internet connection is completely secure.
• Changes — we may change this privacy policy at any time. All updates and changes take effect immediately after notice, which we give by publishing them on the website and/or by email.

What information do we collect about you?

The types of personal information we collect and process include:

• your name and contact details (for example email address, delivery address and phone number);
• billing details and other information related to invoicing;
• business information, such as information provided during the contractual relationship between you and SKY, or provided by you voluntarily;
• information collected when you visit our website, such as cookies;
• information classed as “sensitive” personal data, for example about your health — this is collected and used only where necessary to provide the product or service you requested or to meet legal obligations;
• persistent identifiers, such as a customer number or other information held in a cookie or an IP address, and similar information that helps fulfil the purpose for which it was collected.

Cookies

A “cookie” is a small file, usually made of letters and numbers, that is downloaded to a device (such as a desktop, laptop or tablet) when the user visits certain websites. Cookies are useful because they let a website recognise a user’s device.

What this website stores, why, and how you can change your choice is described in the Cookie policy.

The AI assistant

The website has an AI assistant that answers questions about our solutions and services. The messages you write are sent to our server and from there to Google (the Gemini API service), only to generate the answer. We do not store the conversations on the server and do not use them to identify you.

The conversation stays in your browser, in the current tab, until you close it. Please do not enter sensitive personal data in the chat; for a quote or to be contacted, use the form, phone or email.

Why do we collect this information?

When you interact with us in any way, you may give us, or we may receive from other sources, information:

• to conclude or perform a contract between you and us;
• to answer your questions and requests;
• for marketing purposes, but only where we have your prior consent;
• to provide and improve our services and products;
• to diagnose or fix technical problems;
• to defend ourselves against cyber attacks;
• to create and/or maintain accounts;
• to comply with the law;
• to establish or exercise a legal claim.

What is the legal basis for processing?

• You have given your consent to the processing of your personal data. Remember that you can withdraw your consent at any time by following the unsubscribe instructions in each email or by sending a written request to [email protected].
• Processing is necessary to conclude or perform a contract between you and us.
• Processing is necessary to protect your vital interests or those of another natural person.
• Processing is necessary for our legitimate interests or those of another party.

How long do we keep the data?

We keep personal data only for as long as needed to fulfil the purposes, and no longer than 10 years after the end of the contract or your last interaction with us. After that period, personal data is destroyed, deleted from our IT systems or anonymised for scientific, historical or statistical research.

Please note that in certain situations expressly regulated by law, we keep data for the period the law requires.

How do we share your information with others?

The personal data SKY collects from you is not shared with any other company or third party.

SKY is, however, required to disclose certain personal data collected from you to third parties — for example providers of logistics services, email delivery, marketing, web hosting or cloud services, and financial audit services that we have chosen to support us in fulfilling the purposes above.

With your prior consent, we may share information about you for online advertising and marketing purposes, in print and on social media.

We assure you that SKY will never sell your personal data to any third party and will not allow third parties to sell the data we have shared with them.

Transfer of personal data outside the country

SKY does not normally transfer personal data outside the country. If a transfer ever becomes necessary, SKY will make sure it complies with data protection laws and the relevant EU regulations. Where data is transferred outside the European Economic Area, SKY will make sure the destination countries have data protection laws deemed adequate by the European Commission or have appropriate safeguards in place.

What are your rights?

Your rights under the GDPR are as follows:

1. The right to withdraw consent. Where SKY collects and/or processes data on the basis of your consent, you may withdraw that consent at any time.

2. In addition, you have the right to:

• access your personal data;
• copy or transfer your personal data;
• ask for incorrect or incomplete data to be corrected;
• ask for your personal data to be deleted or removed;
• ask not to be subject to fully automated profiling algorithms;
• restrict the processing of your personal data;
• object to the processing of your personal data on grounds other than your explicit consent.

3. We may use automated processing of your personal data to tell you about the services and products that best match your interests. If you are not satisfied with an automated decision, you can contact us and ask for a manual review.

4. If you believe SKY has breached your right to privacy by misusing your personal data and has not promptly remedied the breach after your request, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP).

Children’s privacy

We encourage parents and guardians to take an active role in their children’s online activities. We do not knowingly collect personal information from children without the consent of their parents or guardians. If you believe we may have collected personal information from someone below the age of consent without appropriate consent, please let us know using the contact details below, and we will take appropriate steps to investigate and resolve the matter promptly.

Questions, requests and exercising your rights

If you have concerns about how your personal data is collected or processed, about your rights, or any question about our privacy policy, you can contact us:

ALL SKY SOFTWARE SRL

Str. Gen. I. E. Florescu nr. 2, Bl. B1A, ap. 37

Târgoviște, Dâmbovița county

Romania

Trade Register no.: J15/638/2014

VAT ID: RO33788550

E-mail: [email protected]

Phone: +40 747 041 820