Privacy Policy

Controller

The controller for personal data processed on this website is PEXON ROMANIA S.R.L., Calea Dorobanților 14–16, Etaj 2, Ap. 62, 400117 Cluj-Napoca, Romania, represented by Noel Dinger.

Contact for data protection matters: info@pexon.com

We have not appointed a data protection officer, as our processing does not meet the thresholds in Article 37 GDPR.

What this website does not do

We state this first because it determines most of what follows. As of the date above, this website:

• sets no cookies of its own; the contact page loads a HubSpot form, which sets cookies of its own
• sends no requests to third-party servers on any page except the contact page, where the enquiry form is loaded from HubSpot — fonts are served from our own domain, not from Google Fonts
• runs no analytics, no tracking pixels and no advertising tags
• does not profile visitors and makes no automated decisions

On every page except the contact page, nothing is stored on or read from your device beyond what is strictly necessary to deliver it. The contact page is the exception: the HubSpot form loads with the page and sets cookies. A consent mechanism for that is in preparation; until it is in place you can avoid those cookies entirely by writing to us by email instead.

Server log files

When you request a page, our hosting provider automatically records technical data sent by your browser. This is the only personal data we process through normal use of the site.

• IP address
• date and time of the request
• the page requested and the HTTP status returned
• referring URL, browser type and version, operating system

Legal basis: Article 6(1)(f) GDPR. Our legitimate interest is delivering the website reliably, diagnosing faults and defending against attacks. Logs are retained only as long as needed for those purposes and are not combined with other data or used to identify individuals.

Hosting

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA, and served from Vercel's Frankfurt region (fra1). Vercel acts as our processor under a data processing agreement pursuant to Article 28 GDPR.

Vercel is a US company, so a transfer to a third country cannot be ruled out for support and administration purposes. Such transfers are covered by the safeguards agreed with Vercel, including the European Commission's Standard Contractual Clauses.

Contacting us

If you write to us by email or book a call, we process the data you provide in order to respond. Legal basis: Article 6(1)(b) GDPR where the contact relates to a contract or pre-contractual steps, otherwise Article 6(1)(f).

We keep this correspondence for as long as needed to handle your enquiry and thereafter only where statutory retention periods require it.

Contact form (HubSpot)

The enquiry form on our contact page is provided by HubSpot Ireland Ltd., 1 Sir John Rogerson's Quay, Dublin 2, Ireland, with data stored in the EU.

The form loads together with the contact page. HubSpot therefore receives your IP address and sets cookies as soon as you open that page, before you enter anything. No other page on this site loads it.

Once loaded, HubSpot sets cookies and receives the data you enter in order to deliver the form and pass your enquiry to us. Legal basis for handling your enquiry: Article 6(1)(b) GDPR.

We do not currently ask for your consent before the form is loaded, although storing and reading cookies on your device requires it under Article 5(3) of the ePrivacy Directive and the national law implementing it. We are stating this plainly rather than claiming a legitimate interest we cannot rely on for that step. A consent mechanism is being introduced. Until then, you can avoid it entirely by writing to us by email instead of using the form.

HubSpot processes on our behalf under an Article 28 agreement. Data is stored in the EU, but HubSpot, Inc. is a US parent company, so access from a third country cannot be ruled out for support purposes. Such access is covered by the EU Standard Contractual Clauses agreed with HubSpot.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you (Art. 15)
• have inaccurate data corrected (Art. 16)
• have data erased (Art. 17)
• restrict processing (Art. 18)
• receive your data in a portable format (Art. 20)
• object to processing based on legitimate interest (Art. 21)

To exercise any of these, write to info@pexon.com.

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 Bucharest, Romania — dataprotection.ro. You may also complain to the authority where you live or work.

Changes to this policy

We will update this policy when the processing it describes changes — in particular before any analytics or marketing tools are introduced. Any such tools will require your prior consent where the law demands it, and this page will describe them before they are activated.