Privacy Policy

01Data Controller

The Data Controller is TRANSFORM YOUR BUSINESS SRL, with registered office in Romania. You can contact us at: privacy@optibox.io or office@transformyourbusiness.net.

The Controller determines the purposes and means of processing personal data collected through this website and related services.

02Data collected

We collect the following categories of personal data:

Navigation data: IP address, browser type, pages visited, session duration. This data is collected automatically by the systems responsible for the operation of the website.

Voluntarily provided data: first name, last name, email, company, role and message when you fill out the contact form or request a call.

• Identifying data: first name, last name, business email
• Business data: company name, professional role
• Contact data: phone number (optional)
• Technical data: IP address, access logs, technical cookies

03Purposes and legal basis of processing

We process your personal data for the following purposes:

• Managing contact requests and introductory calls (legal basis: pre-contractual measures)
• Sending quotes and commercial proposals (legal basis: pre-contractual measures)
• Website improvement and anonymous statistical analysis (legal basis: legitimate interest)
• Compliance with legal and fiscal obligations (legal basis: legal obligation)
• Sending commercial communications with explicit consent (legal basis: consent)

04Cookies and tracking technologies

We use technical cookies necessary for the website to function. With your consent, we may activate analytical cookies (to understand how the site is used) and marketing cookies (to show relevant content).

You can manage your cookie preferences at any time through the cookie banner or by contacting us directly. Technical cookies do not require consent as they are strictly necessary.

05Data retention

Data collected through the contact form is retained for the time necessary to handle the request and, subsequently, for a maximum of 24 months, unless legal obligations require longer retention.

Navigation data is retained for a maximum of 12 months. Data relating to contracts and commercial relationships is retained for 10 years in accordance with legal obligations.

06Data sharing

We do not sell or transfer your personal data to third parties for their own purposes. We may share data with:

Data is not transferred outside the European Economic Area, except where necessary for the provision of the service, with the appropriate safeguards provided by the GDPR.

• Technical service providers (hosting, email, CRM) acting as Data Processors
• Public authorities, in cases provided for by law
• Legal and tax advisors, within strictly necessary limits

07Your rights

As a data subject, you have the following rights under the GDPR:

• Right of access: obtain confirmation that your data is being processed and receive a copy
• Right to rectification: correct inaccurate or incomplete data
• Right to erasure: request deletion of data ("right to be forgotten")
• Right to restriction: limit processing in certain circumstances
• Right to data portability: receive your data in a structured format
• Right to object: object to processing based on legitimate interest
• Right to withdraw consent: at any time, without affecting the lawfulness of prior processing
• Right to lodge a complaint: with the Data Protection Authority

08Security

We adopt appropriate technical and organizational measures to protect personal data from unauthorized access, loss, destruction or disclosure, in accordance with Art. 32 of the GDPR.

Measures include: HTTPS encrypted transmission, restricted data access, incident management procedures.

09Changes to this Privacy Policy

We reserve the right to update this Privacy Policy at any time. In the event of material changes, we will notify you through the website or via email to registered users.

We invite you to periodically consult this page. The last modification date is always indicated at the top of the document.