Privacy policy

This policy explains how SC Evotek Networks SRL ("Evotek", "we") processes personal data when you visit evotek.ro or contact us. We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Romanian Law no. 190/2018.

1. Who we are

The controller of your personal data is:
SC Evotek Networks SRL
Str. Drumul Taberei 56, București, Romania
Trade Register no. J40/7367/2009, CUI RO25720767
Email: Info@evotek.ro · Phone: +40 799 976 600

For any question about your personal data, or to exercise your rights, write to Info@evotek.ro.

2. Visiting this website

This website is a simple information site. It has no user accounts, no forms, no newsletter and no comments, and it does not use cookies, analytics, advertising or social media tracking. All fonts, scripts and images are served from our own website, so no third-party services are contacted while you browse it.

When you open a page, your browser sends technical data to the server that hosts the website: your IP address, the date and time, the page requested, the browser type and the referring page. Our hosting provider, Microsoft (Azure Static Web Apps), processes this data on our behalf to deliver the website and to protect it against attacks and abuse.

• Purpose: delivering the website, and keeping it secure and available.
• Legal basis: our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR).
• Retention: server logs are kept by the hosting provider for a limited period for operational and security purposes and are then deleted automatically. We do not use them to identify visitors.

The address link in the Contact section opens Google Maps, and some links in the footer open other websites. These websites are operated by third parties and have their own privacy policies.

3. When you contact us

If you email or call us, we process the data you give us: usually your name, email address, phone number, company, job title and the content of your message.

• Purpose: answering your question and, if you are interested in our services, preparing an offer or a contract.
• Legal basis: steps taken at your request before entering into a contract, or performing a contract (Art. 6(1)(b) GDPR). For other questions, our legitimate interest in answering the people who contact us (Art. 6(1)(f) GDPR).
• Retention: as long as needed to handle your request, and up to 3 years after our last contact. If a contract follows, we keep the related data for as long as the law requires (for example, accounting documents are kept for the period set by Romanian accounting law).

4. Clients, suppliers and business partners

We process the business contact details (name, job title, business email and phone number) of the people we work with at our clients, suppliers and partners, in order to perform our contracts and manage the business relationship. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR) and our legitimate interest in communicating with our business partners (Art. 6(1)(f) GDPR). We keep this data for the duration of the relationship and afterwards for the periods required by law.

5. Who receives your data

We never sell your personal data and we do not use it for marketing profiles. Your data may be received by:

• Our service providers, who act on our behalf and under a data processing agreement: Microsoft (website hosting on Azure, and email and office services through Microsoft 365), and CSE Team GmbH (CSE Swiss), which administers our Microsoft 365 email accounts.
• Professional advisers such as accountants, auditors and lawyers, where necessary and under a duty of confidentiality.
• Public authorities, only where the law requires it.

6. Transfers outside the EU

We aim to keep personal data within the European Union. CSE Team GmbH, which administers our email accounts, is established in Switzerland, a country that the European Commission recognises as providing an adequate level of data protection. Microsoft may process some data outside the EU, for example for support or security purposes. Such transfers are protected by the EU–U.S. Data Privacy Framework and by the European Commission's Standard Contractual Clauses.

7. How we protect your data

Our information security management system is certified to ISO/IEC 27001:2022. We use appropriate technical and organisational measures to protect personal data, including encryption in transit (HTTPS), access control based on the need to know and regular reviews of our security measures. See our Quality and Information Security Policy.

8. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you and receive a copy;
• have inaccurate data corrected;
• have your data erased, where there is no longer a reason for us to keep it;
• restrict the processing of your data;
• receive your data in a portable format, or have it sent to another controller;
• object at any time to processing based on our legitimate interest;
• withdraw your consent at any time, where processing is based on consent.

To exercise these rights, write to Info@evotek.ro. We will answer within one month. We may ask you to confirm your identity before we act on your request.

You also have the right to lodge a complaint with the Romanian data protection authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro.

9. Other information

We do not make decisions about you based solely on automated processing, including profiling. Our website and services are intended for businesses and are not directed at children.

10. Changes to this policy

We may update this policy when our activities or the law change. The current version is always published on this page.

Last updated: 21.10.2026