Privacy Policy (GDPR)

1. Purpose of this document

This policy explains how URSA admin SRL ("URSA admin", "we") collects, uses, stores and protects personal data in accordance with:

• Regulation (EU) 2016/679 (GDPR)
• Law no. 190/2018 (Romania)
• Law no. 506/2004 (electronic communications)

2. Who we are

The data controller is URSA admin SRL, headquartered in Târgu Mureș, Romania.

For any data protection inquiry: office@ursadmin.ro

3. Data we collect

We only collect data strictly necessary to provide our services:

• Contact data: name, email, phone
• Professional data: CV, experience, role, field of activity
• Technical data: IP address, browser type, cookies, anonymised analytics
• Marketing data: newsletter and communication preferences

4. Purposes of processing

Your data may be processed for:

• responding to contact form requests
• managing recruitment applications
• sending newsletters (with explicit consent)
• internal analytics and user experience improvement
• complying with legal obligations (records, archiving)

5. Legal basis

Processing relies on:

• Art. 6(1)(a) – consent
• Art. 6(1)(b) – contract performance / pre-contractual steps
• Art. 6(1)(c) – legal obligation
• Art. 6(1)(f) – legitimate interests (e.g., service improvement)

6. Data retention

We retain data only as long as necessary:

• contact queries – up to 12 months
• CVs / applications – up to 24 months or until consent withdrawal
• newsletters – until unsubscribe
• cookies – per the Cookies Policy

7. Data recipients

We do not sell or transfer personal data to third parties for commercial purposes.

Data may be shared strictly with:

• IT and hosting providers within the European Union
• public authorities or judicial bodies when required by law

8. Data subject rights

Under GDPR, you have the following rights:

• access
• rectification
• erasure
• restriction
• objection
• portability
• withdraw consent
• complaint to Supervisory Authority – www.dataprotection.ro

Requests can be sent to: office@ursadmin.ro

9. Data security

We implement appropriate technical and organisational measures to protect data against unauthorised access, loss, destruction or alteration, in line with Art. 32 GDPR.

10. Policy changes

We may update this policy periodically. Any change will be published on this page with a new update date.

What are cookies

Cookies are small text files placed on your device to enable proper site operation, traffic analysis and a personalised experience.

Types of cookies used

• Essential cookies: required for site operation
• Analytics cookies: anonymised statistics (e.g., Google Analytics)
• Marketing cookies: used only with your explicit consent (remarketing, social media)

Consent

On first visit, a consent banner appears (Law 506/2004, art. 5). You can accept all cookies or configure them individually. Settings can be changed anytime in your browser.

Deleting cookies

You can delete cookies at any time from your browser settings (Chrome, Edge, Firefox, Safari).