.ro

Purpose

This Policy describes how CLEX collects and uses personal data, in accordance with the GDPR Regulation.

Data Collected

Account information: first name, last name, email, company represented (if applicable), company address, VAT number, legal representative of the company
Usage data: pages accessed.
Communication data: messages sent through forms
The user's IP address, browser, device model used to connect, and session duration are NOT stored by CLEX. However, this data is collected exclusively by the Google Analytics platform but only if the user has specifically consented.

Purposes of Data Processing

- Providing platform services
- Authentication and technical support
- Usage analysis and security improvement
User data is NOT used for commercial communication without the user's consent.

Legal Basis for Data Processing

- Contract performance (Art. 6(1)(b) GDPR)
- Consent (Art. 6(1)(a) GDPR)
- Legitimate interest (Art. 6(1)(f))

Data Location

Data is stored through cloud services located within the EU.

Security

Data is protected through secure transfers via TLS and limited access.

GDPR Rights

- Access, rectification, deletion, portability, objection.
To exercise your rights: [email protected]

Data Retention

We retain data for 5 years after the end of the contractual relationship, or as required by tax obligations.