Privacy Policy

Last updated: 13.05.2026

General information

This policy describes how iasitoday.com collects, uses, and protects the personal data of visitors and users of the website. The data controller is SC IASITODAY SRL, headquartered at str Sf. Teodor nr.41, et.1, ap.1, municipiul Iași, email: contact@iasitoday.com, hereinafter referred to as the Operator. Therefore, we will dedicate all necessary resources and efforts to process your data in full compliance with Regulation (EU) 2016/679 (“General Data Protection Regulation” or “GDPR”), as well as with any other applicable legislation in Romania.

Categories of personal data processed

Depending on how you interact with our website, we may collect the following types of personal data:

  • Identification data (name, surname, email address, phone number);

  • Authentication data (for user accounts, where applicable);

  • Technical data (IP address, device type, browser used, operating system);

  • Website behavior data (interactions, pages visited, visit duration);

  • Other data voluntarily submitted through forms or other communication channels.

2.1. If you are a client of the Website, the Operator will process your personal data such as name and surname, phone number, email address, data related to how you use the Website, for example your behavior/preferences/habits within the website, as well as any other categories of data that you provide directly in the context of completing the contact form or in any other way resulting from the use of the Website.

2.2. If you are a visitor of the Website, the Operator will process your personal data that you provide directly in the context of using the Website, such as the data you provide within the contact section, to the extent that you contact us in this way.

How we collect data

Data is collected directly when you fill out forms on the website, subscribe to the newsletter, or contact us. We also collect data automatically through the use of cookies and similar technologies in order to understand how the site is used and to improve the browsing experience.

Please consult the Cookie Policy for more information about these technologies.

Purposes of processing

We use personal data for the following legitimate purposes:

  • To respond to requests and inquiries received;

  • To provide and improve our services;

  • For communications via email or other channels, for administrative or marketing purposes (only with your consent);

  • For statistical analysis regarding website usage;

  • For complying with legal obligations and protecting the legitimate interests of the organization.

Legal basis

Data processing is carried out in accordance with GDPR, based on one or more of the following legal grounds:

  • The explicit consent given by the user;

  • The execution of a contract or a request initiated by the data subject;

  • The fulfillment of a legal obligation;

  • The legitimate interest of the operator, while respecting the fundamental rights and freedoms of the user.

You may express your consent for data processing for this purpose by checking the corresponding box when voluntarily completing the contact form. In addition, you may unsubscribe by sending an email.

Providing your data for this purpose is voluntary. Refusing to give consent for processing your data for this purpose will not have negative consequences for you.

Disclosure of personal data

In order to fulfill the processing purposes, the Operator may disclose your data to partners, third parties, or entities that support the operator in carrying out activities through the Website (for example an IT service provider), or to central/local public authorities, in the following cases, exemplified below:

  • for the administration of the Website;

  • for maintaining, personalizing, and improving the Website and the services carried out through it;

  • for performing data analysis, testing and research, monitoring usage and activity trends, developing security features and authenticating users;

  • for sending commercial marketing communications, within the conditions and limits provided by law;

  • when the disclosure of personal data is required by law, etc.

Transfer of personal data

In certain situations, personal data provided to the operator may be transferred outside Romania, but only to countries within the European Union.

Data retention period

We retain personal data only as long as necessary for the purposes for which it was collected or for the periods required by law. After the purpose has been fulfilled or upon your request, the data will be deleted or anonymized, except in situations where we are legally required to retain it for a longer period.

If you are a client, we will process your data throughout the duration of the contractual relationship and afterwards according to the legal obligations incumbent upon the operator (for example, in the case of financial-accounting supporting documents for which the retention period provided by law is 10 years from the end of the financial year in which they were issued).

If you withdraw your consent for data processing for marketing purposes, the operator will cease processing your personal data for this purpose, without affecting the processing carried out based on the consent expressed by you before its withdrawal.

User rights

Under the conditions provided by legislation regarding the processing of personal data, as data subjects you benefit from the following rights:

  • the right to information, namely the right to receive details regarding the processing activities carried out by the operator, as described in this document;

  • the right of access to data, namely the right to obtain confirmation from the operator regarding the processing of personal data, as well as details regarding the processing activities such as how the data is processed, the purpose of the processing, the recipients or categories of recipients of the data, etc.;

  • the right to rectification, namely the right to obtain, without unjustified delay, the correction by the operator of inaccurate/unjustified personal data, as well as the completion of incomplete data; the rectification/completion will be communicated to each recipient to whom the data was transmitted, unless this proves impossible or involves disproportionate effort;

  • the right to erasure of data, without unjustified delay (“the right to be forgotten”), if one of the following reasons applies:

    • they are no longer necessary for the purposes for which they were collected or processed;

    • consent is withdrawn and there is no other legal basis for processing;

    • the data subject objects to processing and there are no overriding legitimate grounds;

    • personal data has been processed unlawfully;

    • personal data must be erased for compliance with a legal obligation;

    • personal data has been collected in relation to the offering of information society services under Union or national law applicable to the operator.

It is possible that following a request for data deletion, the operator may anonymize the data (thus removing its personal character) and continue processing it under these conditions for statistical purposes.

  • the right to restriction of processing where:

    • the person contests the accuracy of the data, for a period enabling us to verify the correctness of the data;

    • the processing is unlawful and the data subject opposes the deletion of personal data and instead requests the restriction of its use;

    • the operator no longer needs the personal data for the purposes of processing, but the data subject requires it for the establishment, exercise, or defense of legal claims; or

    • the data subject has objected to processing (other than direct marketing), for the period during which it is verified whether the legitimate rights of the operator override those of the data subject.

  • the right to data portability, namely (i) the right to receive personal data in a structured, commonly used, and easily readable format, and (ii) the right for this data to be transmitted by the operator to another data controller, insofar as the conditions provided by law are met;

  • the right to object – regarding processing activities, this may be exercised by submitting a request according to the indications below;

    • at any time, for reasons related to the particular situation of the data subject, that the data concerning them be processed based on the legitimate interest of Mîndruță Dan or in the public interest, except where Mîndruță Dan can demonstrate legitimate and compelling grounds for processing that override the interests, rights, and freedoms of the data subject or where the purpose is the establishment, exercise, or defense of legal claims;

    • at any time, free of charge and without justification, that the data concerning them be processed for direct marketing purposes.

  • the right not to be subject to an automated individual decision, namely the right not to be subject to a decision based solely on automated processing activities, including profiling, which produces legal effects concerning the data subject or similarly significantly affects them;

  • the right to address the National Supervisory Authority for Personal Data Processing or the competent courts, if you consider it necessary.

For any additional questions regarding how personal data is processed and to exercise the rights mentioned above, please contact us at the email address displayed on this page.

Use of cookies

The website uses cookies for functionality, analysis, and personalization. Some cookies are essential for the proper functioning of the website, while others are used only with your explicit consent. For details, please consult the Cookie Policy available at: iasitoday.com/cookie-policy/.

Security measures

We apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, or alteration. These include data encryption, access control to our systems, periodic backups, and security audits. We also train personnel involved in data processing regarding confidentiality and security obligations.

Changes to the policy

We reserve the right to update and modify this Privacy Policy periodically in order to reflect any changes in the way we process your personal data or any changes in legal requirements. In the event of any such modification, we will display the updated version of the Privacy Policy on our website, therefore we recommend that you periodically review the content of this Privacy Policy.