Privacy policy

Who we are

This site is operated by CASPR SOFT S.R.L., with its registered office at Str. Nerva Traian 27-33, Office 6, Building B, Sector 3, Bucharest, Romania, registered with the Trade Register under J40/25087/09/007, VAT number 52890327.

For the personal data collected through this site, CASPR SOFT S.R.L. acts as the controller within the meaning of Regulation (EU) 2016/679 (GDPR). For any question about your data, write to us at contact@casprsoft.com.

What we collect and why

We only collect what you send us, through one of the two forms on this site. We do not buy contact lists and we do not gather data from other sources.

• The contact form: your name, email address, subject and the message you write. We use them to answer your enquiry.
• The free assessment (the questionnaire on /diagnostic): your answers to the four questions, the description of your situation and the contact details you fill in. We use them to prepare a recommendation and to get back to you with it.
• Minimal technical data: as with any website, your IP address and request headers reach the server that delivers the pages. We do not use them for profiling and we do not link them to your identity.

Legal basis for processing

• Your consent, given by submitting the form (Art. 6(1)(a) GDPR).
• Steps taken prior to entering into a contract, where the conversation moves towards working together (Art. 6(1)(b) GDPR).
• Our legitimate interest in keeping the site running and secure (Art. 6(1)(f) GDPR).

Who we share it with

We do not sell or rent your data to anyone. We pass it only to the providers the site needs in order to work:

• Resend (resend.com) — delivers the messages sent through the forms to our email. What you fill in passes through this service the moment you press send. The servers used are in the European Union (Ireland).
• Cloudflare Turnstile — the anti-spam check on the contact form. It is loaded only on the pages carrying that form and analyses technical browser signals to tell a person from a bot. It builds no profiles and does not track your browsing.
• Google Firebase (Firestore) — hosts the blog articles. The content is read by our server, not by your browser, and holds no personal data about visitors.

Beyond these, the site contacts no external service while you browse it: fonts are served from our own server, and the pages load no advertising or analytics scripts.

Cookies and local storage

We use no analytics, advertising or tracking cookies. That is why the site does not ask for your consent through a cookie banner: the only things stored are strictly necessary for it to work.

• The NEXT_LOCALE cookie — remembers which language you prefer to read the site in (Romanian or English).
• theme (local storage) — remembers whether you chose the light or the dark theme.
• caspr-diagnostic-v1 (local storage) — keeps your free-assessment answers on your own device so you don't lose them if you close the page. It is deleted automatically once the questionnaire is submitted successfully. Until then the data stays in your browser and you can clear it at any time from your browser settings.

How long we keep it

We keep messages received through the forms for as long as we need them to answer your enquiry and, if the conversation leads to working together, for the duration of the contract and the statutory retention periods that follow from it.

If the conversation goes nowhere and you don't ask us otherwise, we delete the correspondence once it no longer serves a purpose. You can ask us to delete it at any time, by email to contact@casprsoft.com.

Your rights

Under the GDPR, in relation to your personal data you have the following rights:

• The right of access — to find out what data we hold about you.
• The right to rectification — to have inaccurate data corrected.
• The right to erasure — to have the data deleted, where we have no legal reason to keep it.
• The right to restriction of processing.
• The right to data portability — to receive the data in a format another system can read.
• The right to object to processing based on legitimate interest.
• The right to withdraw your consent at any time, without affecting processing carried out beforehand.

You can exercise any of these rights by writing to contact@casprsoft.com. We reply within one month at the latest. If you are not satisfied with our answer, you have the right to lodge a complaint with the Romanian data protection authority (ANSPDCP), www.dataprotection.ro.

Data security

The site is served over HTTPS only, and form data travels encrypted. Access to the messages we receive is limited to the people on the team who need it in order to reply.

No system is perfectly secure. If you find a security problem on this site, please write to contact@casprsoft.com before making it public.

Changes to this policy

If we change how we process data — for example if we add an analytics tool — we update this page and the date below. We encourage you to re-read it from time to time.