Privacy policy

Data controller

Arkadia, at Calea Dumbrăvii 111, Sibiu, is the controller of the personal data we receive through this site. For any question about your data, write to us through the form on the contact page or at our office address.

The data we process

Through the contact form we receive your name, e-⁠mail address, phone number, the name of the authority or company you represent and your message. When you send it we automatically record the date and time, the page you wrote from and a reference number for the message.

We do not ask for special categories of data, such as health data, and ask you not to include them in your message.

Purposes and legal basis

We use the data to assess your project's eligibility, to answer you and, if we decide to work together, to prepare the contract. The legal basis is your request, as a step before entering into a contract, and the consent you give by ticking the box in the form (Article 6(1)(b) and (a) of Regulation (EU) 2016/679).

We protect the form against automated messages, on the basis of our legitimate interest in keeping the site secure (Article 6(1)(f)). If we sign a contract, we keep its documents to meet our legal obligations, including accounting ones (Article 6(1)(c)).

How long we keep the data

We keep messages and the data that comes with them for at most 24 months after our last correspondence, then delete them. If we sign a contract, the contractual and financial documents are kept for the period set by accounting law.

Who has access to the data

Only the Arkadia team reads the messages. The site is hosted by Cloudflare, Inc., which keeps the messages in the site's database, sends us a copy of each by e-⁠mail and runs the spam check, as a processor acting only on our instructions. We do not sell or rent the data. We disclose it to public authorities only when the law requires us to.

Transfers outside the European Economic Area

Cloudflare may process data outside the European Economic Area, including in the United States. These transfers rely on the EU–US Data Privacy Framework and on the standard contractual clauses adopted by the European Commission.

Your rights

You have the right of access to your data, to its rectification and erasure, to the restriction of its processing, to data portability and the right to object to its processing. You may withdraw your consent at any time, without affecting the processing carried out before. We take no decisions based solely on automated processing.

Write to us through the contact form or at our office address. We answer within one month of receiving your request; for a complex request this may be extended by two further months, and we will tell you so.

If you believe your data is processed in breach of the law, you may lodge a complaint with Romania's National Supervisory Authority for Personal Data Processing, B-⁠dul G-⁠ral. Gheorghe Magheru 28-30, sector 1, Bucharest, www.dataprotection.ro.

Security

Data travels encrypted between your browser and the site (HTTPS). Access to the messages is limited to the Arkadia team and to the hosting provider, as far as running the site requires.

Cookies

The site uses no analytics, advertising or tracking cookies. The Cloudflare Turnstile spam check may read technical data from your browser, only to tell a person from an automated program.

Changes

We may update this policy when the way we process data changes. The version in force is the one on this page, with the date of its last update.

Updated on 13 October 2026.