1. Who controls your data
The controller of kadd.ro is KONCEPT ADVERTISING SRL, Romanian VAT ID RO24193170, Trade Register no. J12/1358/2019, EUID ROONRC.J12/1358/2019, registered office at 144 Sub Cetate Street, building 5, apartment 13, Florești, Cluj County, 407280 (“KADD”, “we”). Our operational contact point is at 20A Onisifor Ghibu Street, Cluj-Napoca (Stables Office), 400185.
For privacy questions or to exercise your rights, email office@kadd.ro or use our contact form.
2. Scope
This policy applies to kadd.ro visitors and people who send an enquiry, request an SEO/GEO audit, subscribe to communications or enter into a business relationship with KADD. It covers processing through the website and communications initiated through it.
3. Data we may collect
- Identity and contact data: name, email, phone if provided, company and role.
- Enquiry data: message, service of interest, project context or budget and information you submit voluntarily.
- Audit data: analysed domain, email address, technical findings and recorded consent.
- Technical data: IP address, browser/device, pages viewed, timestamps, traffic source, identifiers and security logs.
- Contract and billing data: information needed for proposals, contracts, service delivery and accounting duties.
We do not ask for special-category data in public forms. Please do not send it unless strictly necessary.
4. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Answering enquiries, preparing proposals and pre-contractual steps | Article 6(1)(b) GDPR and, where relevant, legitimate interests |
| Delivering services, managing the relationship and billing | Contract performance and legal obligations |
| Website operation, security, abuse prevention and troubleshooting | Legitimate interest in protecting the service and users |
| Audience analytics via Google Analytics and other optional cookies | Consent provided through the cookie banner |
| Newsletters, campaigns and commercial communications | Consent, which you may withdraw at any time |
| Legal claims, records and authority requests | Legal obligation and/or legitimate interests |
Where we rely on legitimate interests, we assess whether your interests and rights override ours. Mandatory form fields are marked; without them we cannot process the request.
5. Who may receive the data
Access is limited to people who need it. We may use providers for hosting and WordPress maintenance, security/CDN (including Cloudflare), email and SMTP, analytics (Google Analytics), consent management (CookieAdmin), contracted collaborators, legal/accounting services and authorities where required by law. Providers are subject to relevant instructions and contractual duties.
6. International transfers
Some global providers may process data outside the European Economic Area. Where this happens, we use GDPR-recognised safeguards such as adequacy decisions and/or Standard Contractual Clauses, with supplementary measures where needed.
7. Retention
- enquiries, briefs and audits: generally up to 24 months after the last interaction, unless a contract or dispute requires longer;
- marketing communications: until consent is withdrawn or after a reasonable period of inactivity;
- contractual, tax and accounting documents: for periods required by applicable law;
- technical and security logs: only as long as needed for security, investigations and service operation;
- cookies: for the periods listed in our Cookie Policy.
After the relevant period, data is deleted or anonymised unless needed to establish, exercise or defend a legal claim.
8. Your rights
Subject to GDPR conditions, you may request access, rectification, erasure, restriction, portability and object to processing. You may withdraw consent at any time without affecting earlier lawful processing. You may complain to the Romanian National Supervisory Authority for Personal Data Processing.
We will answer within the legal deadline and may ask for information strictly needed to verify identity.
9. Automated decisions and children
We do not use the website to make solely automated decisions producing legal or similarly significant effects. KADD services are aimed at organisations and professionals, not children, and we do not knowingly collect data from anyone under 16.
10. Security and updates
We use technical and organisational measures appropriate to the risk, although no online transmission can be guaranteed risk-free. We may update this policy when the website, providers or legal requirements change. The current version is always published here.