PRIVACY POLICY

Last updated: February 17, 2026

This Privacy Policy describes how NEAM DIGITALIZAT SRL ("Company", "We", "Us", or "Our") collects, uses, discloses, and protects Your Personal Data when You use our website and services.

By accessing or using the Website, You acknowledge that You have read and understood this Privacy Policy.

1. DATA CONTROLLER

For the purposes of the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the Data Controller is:

NEAM DIGITALIZAT SRL
Sat Rotbav, Nr. 186, Cod 507067
Brașov County, Romania
Email: contact@civilitics.com

The Company is established in Romania and operates worldwide.

2. DEFINITIONS

Personal Data means any information relating to an identified or identifiable natural person.

Usage Data means data collected automatically through the use of the Website.

Cookies are small text files stored on Your device.

Website refers to Civilitics, accessible at:
https://www.civilitics.com/

You means any individual accessing or using the Website.

3. TYPES OF DATA COLLECTED

3.1 Personal Data

We may collect:

First and last name
Email address
Phone number
Company name
Any information voluntarily submitted through contact forms

3.2 Usage Data

Collected automatically, including:

IP address
Browser type and version
Device type
Pages visited
Date and time of visit
Time spent on pages
Referring URLs
Device identifiers

4. TRACKING TECHNOLOGIES AND COOKIES

We use cookies and similar technologies for functionality, security, and analytics.

Cookies may be:

Session cookies
Persistent cookies

Non-essential cookies are placed only after Your explicit consent, in compliance with GDPR and Romanian law.

You can withdraw consent at any time through the cookie management tool or browser settings.

4.1 Google Tag Manager

We use Google Tag Manager, provided by Google Ireland Limited.

Google Tag Manager does not store Personal Data itself but enables the deployment of tracking technologies on our Website.

It may process technical data such as IP addresses necessary for tag execution.

4.2 Google Analytics (GA4)

We use Google Analytics 4, provided by Google Ireland Limited.

Google Analytics collects:

IP address (with IP anonymization where applicable)
Device information
Browser type
Interaction data
Session duration
Geographic region (approximate)

This data is used to:

Analyze website traffic
Improve performance
Understand user behavior

Google may transfer data to servers outside the European Union. Such transfers are protected by Standard Contractual Clauses (SCCs) or other legally approved safeguards.

Google Analytics is activated only after consent.

You may opt out by installing:
https://tools.google.com/dlpage/gaoptout

5. LEGAL BASIS FOR PROCESSING (GDPR)

If You are located in the EEA, we process Your Personal Data under:

Consent (Art. 6(1)(a)) – analytics cookies and marketing
Contract performance (Art. 6(1)(b)) – to provide requested services
Legal obligation (Art. 6(1)(c)) – tax, accounting, regulatory compliance
Legitimate interests (Art. 6(1)(f)) – website security, analytics improvement, fraud prevention

You may object to processing based on legitimate interests.

6. PURPOSES OF PROCESSING

We use Personal Data to:

Provide and maintain the Website
Respond to inquiries
Manage business communications
Improve services
Analyze traffic and performance
Ensure website security
Comply with legal obligations

We do not sell Personal Data.

7. DATA SHARING

We may share data with:

IT service providers
Hosting providers
Analytics providers (Google)
Legal authorities if required by law

All processors are bound by data protection agreements.

8. INTERNATIONAL DATA TRANSFERS

As we operate worldwide, Personal Data may be transferred outside the European Economic Area (EEA).

Where transfers occur, we implement safeguards such as:

European Commission Standard Contractual Clauses
Transfers to countries with adequacy decisions
Technical and organizational protection measures

9. DATA RETENTION

We retain Personal Data only as long as necessary:

Contact form data: up to 24 months
Analytics data: up to 24 months
Server logs: up to 24 months
Accounting data: as required by Romanian law

Data may be retained longer if required for legal defense or compliance.

After retention periods expire, data is securely deleted or anonymized.

10. YOUR GDPR RIGHTS

If You are located in the EEA, You have the right to:

Access Your Personal Data
Rectify inaccurate data
Erase data ("right to be forgotten")
Restrict processing
Object to processing
Data portability
Withdraw consent at any time
Lodge a complaint with a supervisory authority

Romanian Supervisory Authority:

National Supervisory Authority for Personal Data Processing (ANSPDCP)
https://www.dataprotection.ro/

You may exercise Your rights by contacting:
contact@civilitics.com

11. SECURITY OF DATA

We implement appropriate technical and organizational measures to protect Personal Data against unauthorized access, alteration, disclosure, or destruction.

However, no online transmission is 100% secure.

12. CHILDREN’S PRIVACY

The Website is not intended for individuals under 16 years of age.

We do not knowingly collect data from children.

13. AUTOMATED DECISION-MAKING

We do not use Personal Data for automated decision-making or profiling that produces legal or significant effects.

14. THIRD-PARTY LINKS

The Website may contain links to third-party websites. We are not responsible for their privacy practices.

15. CHANGES TO THIS POLICY

We may update this Privacy Policy periodically. Changes become effective when posted on this page.

The “Last updated” date will reflect revisions.

16. CONTACT

For any privacy-related requests:

Email: contact@civilitics.com
NEAM DIGITALIZAT SRL
Brașov County, Romania