Privacy policy

Who processes the data

The data controller is DEYCRUSADER SRL, Tax ID 49404737, Trade Register number J2024000587406, with its registered office at Str. Sg. Șerban Manea nr. 5, Sector 5, Bucharest, operating under the DC Media brand.

For any question about your data, you can write to us at office@deycrusader.ro.

What data we collect

• Identification and contact data: first name, last name, email, phone, company, when you fill in a form, the questionnaire, a booking or an order.
• Billing data: name, address, tax code, trade register number; for individuals, the personal numeric code (CNP) only if you enter it for invoicing. The CNP is stored encrypted.
• The content of the request: your answers in the configurator and questionnaire, messages, uploaded files, details of technical incidents.
• Payment data: amounts, due dates and payment status. Card details are entered only on the secure Stripe page and never reach us.
• Minimal technical data: security logs and rate limiting of repeated attempts, with no profiling.
• Website usage data, only if you accept the Analytics or Marketing categories in the cookie banner.

Why we use it and on what legal basis

• To respond to your request and prepare the configuration or quote: steps taken at your request before entering into a contract.
• To perform the contract: planning, communication, delivery, invoicing, due dates.
• To comply with legal obligations: accounting and tax records.
• To protect the website against abuse: legitimate interest.
• To send you marketing news: only with your separate consent, which you can withdraw at any time.
• To measure website usage: only with consent from the cookie banner.

Who else receives the data

We don't sell data. We share it only with the providers needed for the service and only as far as necessary: the website and database hosting provider, the email service provider, the payment processor Stripe, if you choose to pay by card, and the analytics or marketing tools you accept: currently no optional tool is active.

We may share data with authorities only when the law requires it.

How long we keep the data

• Requests that don't become orders: up to 12 months from the last interaction, then we delete or anonymize them.
• Data from orders, contracts and invoices: for the period required by accounting and tax legislation.
• Marketing consent: until you withdraw it.
• Links to resume a configuration: expire automatically after the period shown.

Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, as well as the right to withdraw consent. You can write to us at office@deycrusader.ro; we reply within the time limit set by law.

You have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP).

Security

We use HTTPS connections, passwords stored as hashes, protection against repeated requests, uploaded files stored outside public access and limited admin access. We don't ask for passwords through forms. Technical access needed for a support intervention is set up through a secure channel, after the request is taken.