Privacy Policy

Data Controller

CAUTĂ.RO SOLUŢII SRL (trade register number J24/467/04.04.2017, tax ID 37333012), registered at Strada Culturii no. 13, apt. 4, Baia Mare, Maramureș County, Romania, is the data controller responsible for your personal information. CAUTĂ.RO SOLUŢII SRL has assessed the obligation to appoint a Data Protection Officer (DPO) and concluded that it does not apply to current operations. For questions, contact us at [email protected].

Information We Collect

We collect information you provide directly and information collected automatically:

Information You Provide

• Account information (name, email address, password)
• Payment information (billing email, purchase history)
• Waitlist signups (email, consent)
• Alerts you requested (email, the company or search followed, and consent records)
• Your guided projects (title, notes, deadlines, uploaded documents)
• The experiences you publish (duration, cost, tips, chosen signature)
• We keep the text you enter in searches and in the homepage box where you describe what you need, with no deletion date. Do not enter phone numbers or personal identity numbers there.

Information Collected Automatically

• IP address (stored as a hash made with a secret key) and the country you visit the site from
• We temporarily keep counters tied to your IP address in our database to limit abuse.
• With your consent to analytics: browser type and operating system
• Pages visited and visits to our request and claim forms are counted without cookies, with your country and an IP address hash (see Data Retention). With your consent to analytics, time spent and navigation patterns too
• Cookies (essential and analytics, with consent)

Public Company Data

Data about individuals displayed in their capacity as legal representatives or shareholders of companies constitutes public data, registered with ONRC pursuant to the legal obligation of trade registry publicity, and is processed on the basis of the legitimate interest of the public in information (Art. 6(1)(f) GDPR).

Public Data About Elected Officials and Candidates

The names of elected officials and candidates, their constituency or town, their party or parliamentary group and their results come from documents published by Parliament and the Permanent Electoral Authority. The people concerned made these data public themselves by standing for and holding office (Art. 9(2)(e) GDPR), and we display them on the basis of the legitimate interest of the public in information (Art. 6(1)(f) GDPR).

How We Use Your Information

• Providing and managing your account
• Processing purchases and report access
• Sending the alerts you requested
• Analyzing site usage to improve our service
• Detecting and preventing fraud
• Complying with legal obligations

Legal Basis (GDPR Art. 6)

• Consent — for email alerts, analytics cookies and marketing communications
• Contract performance — for account management and purchases
• Legitimate interest — for security, abuse prevention, counting visits without cookies, and loading Google fonts and OpenStreetMap maps
• Legal obligation — for compliance with applicable law

Cookies

We use cookies for site functionality and, with your consent, for analytics:

• Essential cookies — required for authentication and functionality (no consent needed)
• Analytics cookies — only with your consent, Google Analytics sets _ga and a cookie whose name starts with _ga_. Google sets their expiry, by default up to 2 years. Usage data is sent to Google LLC (USA).

Sub-processors and International Transfers

We use Hetzner Online GmbH (hosting), Cloudflare, Inc. (site traffic, abuse checks and uploaded documents), Postmark / Wildbit LLC (email), Stripe Inc. (payments) and Sentry (error reporting). Google Fonts receives your IP address when a page opens, and OpenStreetMap receives it when the real-estate map opens, without waiting for your cookie choice. With your consent to analytics, we also use Google Analytics.

Automated Decision-Making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

Your Rights

Under GDPR, you have the following rights. We will respond to requests within one month (Art. 12(3) GDPR):

• Right of access — you can request a copy of your data
• Right to rectification — you can correct inaccurate data
• Right to erasure — you can request deletion of your account and data
• Right to restriction — you can request limitation of processing under certain conditions
• Right to data portability — you can download your data in JSON format
• Right to object — you can object to processing based on legitimate interests
• Right to withdraw consent — you can withdraw consent at any time
• Right to lodge a complaint with ANSPDCP (Romanian National Supervisory Authority for Personal Data Processing, anspdcp.ro)

Data Retention

Account-linked data is kept while your account is active and deleted with it, subject to the exceptions below. Consent records, including the IP address hash, are kept while we need evidence of consent. The IP address hash used to count visits is deleted after 30 days; hashes attached to company claims and offer requests are deleted after 12 months. The IP address hash used at sign-in is kept while the account exists. Search text remains stored with no deletion date; after 30 days, the IP address hash is no longer linked to it.

Unconfirmed alert requests are deleted after two days. After you stop an alert, we keep its email address and withdrawal record for 30 days. You can request earlier deletion at the privacy contact above.

One exception: published experiences (duration, cost) stay on the site after account deletion, but fully anonymized — we remove the displayed name, the tip you wrote and the link to your account, keeping only the figures. Other users rely on this information, and in that form it can no longer identify you. Likewise, a template you published and that was approved stays available, but without your name; templates still in draft or under review are deleted along with the account. A project started without an account and never claimed is deleted automatically after 90 days.

Data Sharing

We do not sell your personal data. We share data only with the sub-processors listed above and only to the extent required for service operation.

Contact

To exercise your rights or ask questions: [email protected]