Who we are
The controller of your personal data is Avacone Romania S.R.L., based at Bdul. Nicolae Titulescu 4, Et. MEZ, Ap. XIV/A, 400420 Cluj-Napoca, Cluj County, Romania (Trade Register J2021003530123, CUI 44632114). You can write to us at any time at Info@avacone.com with any question about your data.
What data we process
If you write to us through the contact form: your name, email address, company and phone number (if you fill them in), the type of request, the budget and timeline (if you choose them), the content of your message, and the attached file if you add one.
If you apply for an open role: the data requested in that role's form, usually name, email, phone, LinkedIn or portfolio link, your CV and other uploaded files, and your answers to the form's questions. The exact fields can differ from role to role and you see them before you submit.
Technical data: like any web server, ours records the IP address, date and time, the requested page, and the browser type. We use these logs for security, troubleshooting, and abuse prevention.
We do not ask for special categories of data (for example health or ethnic origin). Please leave them out of your CV and messages.
Why we use your data and on what legal basis
| Purpose | Legal basis |
|---|---|
| Replying to messages sent through the contact form | Your consent (Art. 6(1)(a) GDPR) and steps taken at your request before a possible contract (point b) |
| Reviewing applications and contacting you during recruitment | Steps taken at your request before employment (point b) and your consent (point a) |
| Keeping your application for future roles | Only with your explicit, separate agreement, for example by email (point a) |
| Website security, abuse prevention, server logs | Our legitimate interest in protecting the site and its users (point f) |
| Legal obligations (for example accounting records if we enter into a contract) | Legal obligation (point c) |
Who receives your data
Your data is accessible only to authorised people on the Avacone team (recruitment, management, technical administration). We use the following providers, who process data strictly on our behalf under data processing agreements:
- Our hosting and infrastructure provider, which runs the website and its database.
- Our transactional email provider, used for internal notifications and for confirmations sent to you (currently Resend, or an SMTP service we configure).
- Google, only if you accept functional cookies and the map on the contact page loads. See the Cookie Policy.
- Plausible Analytics, only if statistics are switched on for the site and you accept them. It uses no cookies and builds no personal profiles.
We do not sell your data and we do not use it for advertising. We may disclose it to authorities only where the law requires us to.
Transfers outside the European Economic Area
Some providers (for example the email service) may process data outside the EEA, including in the United States. In that case we rely on safeguards recognised by the GDPR: the adequacy decision for the EU-US Data Privacy Framework where the provider is certified, or the European Commission's standard contractual clauses. You can ask us for details at the email address above.
How long we keep your data
| Data | Period |
|---|---|
| Applications for open roles, including CV and answers | Up to 12 months from submission, then deleted, unless you explicitly agree to us keeping them longer for future roles |
| Contact form messages and their attachments | Up to 24 months after the last exchange |
| Technical server logs | A limited period, normally no longer than 14 days |
| Data needed for a contract or a legal obligation | As long as the law requires |
How we protect your data
The connection to the site is encrypted (HTTPS). Staff passwords are stored only as cryptographic hashes, the admin area requires sign-in, and uploaded files are checked for type and size and are available only to authorised people. Keys and passwords for external services are stored encrypted. No method guarantees absolute security, which is why we limit access to what is necessary.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict its processing, to data portability, and to object, in particular to processing based on legitimate interest. Where processing is based on consent you can withdraw it at any time, without affecting processing carried out before the withdrawal.
To exercise your rights, write to Info@avacone.com. We reply within one month at the latest. You can also lodge a complaint with the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), at dataprotection.ro.
Job candidates
Your application is used only for the recruitment process you applied to, by the people involved in it. We make no decisions based solely on automated processing. If you would like to be considered for future roles as well, write to us and we will keep your application only with your explicit agreement, which you can withdraw at any time.
Children
The site is aimed at professionals and companies. We do not knowingly collect data from anyone under 16.
Links to other websites
The site may link to third-party sites, for example Avacone LAB or Google Maps. They have their own privacy policies, for which we are not responsible.
Cookies
The site uses one strictly necessary cookie that remembers your cookie choice. Optional cookies and services, for example the Google map, are used only with your agreement, which you can change at any time from the "Cookie settings" link in the footer. Details are in the Cookie Policy.
Changes to this policy
We may update this policy when the way the site works or the law changes. The date of the latest update appears at the top of the page. We announce important changes on this page.
Contact
Avacone Romania S.R.L., Bdul. Nicolae Titulescu 4, Et. MEZ, Ap. XIV/A, 400420 Cluj-Napoca, Cluj County, Romania (Trade Register J2021003530123, CUI 44632114). Email: Info@avacone.com.