Privacy Policy

Who we are

L&E Solutions SRL, with its registered office at Str. Edgar Quinet, Nr. 55/9, Cluj-Napoca, 400684, Romania, VAT ID RO16684355, registered with the Trade Register under J12/2981/2004, is the controller of the personal data collected through this website.

For any question regarding your data, write to office@l-and-e.ro or call +40 722 203 236.

What data we collect and why

Contact form. We collect your name, email address and message — required fields — plus, optionally, company name, phone number and type of business. We use them solely to answer your enquiry and to prepare a possible collaboration.

The legal basis is Article 6(1)(b) GDPR — steps taken at your request prior to entering into a contract.

Newsletter subscription. We collect only your email address, based on your consent — Article 6(1)(a). We use it to send information about WinMENTOR, legislative obligations and our services. Existing customers receive the same news about the software they purchased on the basis of legitimate interest — Article 6(1)(f) — and Article 12 of Romanian Law 506/2004, with the option to unsubscribe at any time.

Usage statistics. If you accept analytics cookies, we collect data on how the site is used: pages visited, clicks, scrolling, device type. The basis is your consent, which you may withdraw at any time.

Server logs. Like any web server, ours automatically records, for each request: the IP address, date and time, requested page, response code, referring page and browser type. We use them only for security (detecting attack attempts and abuse) and for aggregate traffic statistics, which we compute on our own computer without sending the data to anyone else. The legal basis is our legitimate interest in keeping the site secure and working — Article 6(1)(f).

We do not collect sensitive data and we do not make automated decisions producing legal effects concerning you.

Where the data goes

Messages sent through the contact form are delivered to us by email, to office@l-and-e.ro, hosted on Google Workspace. In parallel, a copy of the message is saved to a text file on our server — a safety measure, so that no enquiry is lost if email delivery fails. This copy is deleted automatically after 90 days.

Newsletter subscriptions are stored in a file on the same server and added to our list in Mailchimp (Intuit Inc., USA), the platform we send the newsletter through. The transfer relies on Intuit’s certification under the EU-U.S. Data Privacy Framework and on the European Commission’s standard contractual clauses. You can unsubscribe via the link in every email or by writing to office@l-and-e.ro.

The website is hosted in the European Union, on CNCTED infrastructure.

Statistics are collected by Microsoft Clarity, a service of Microsoft Corporation. This service may transfer data outside the European Economic Area, on the basis of standard contractual clauses approved by the European Commission. We have configured the service so that content entered into forms is masked and does not reach Microsoft.

We do not sell or rent your data to anyone.

How long we keep it

• Local copy of form messages: 90 days, deleted automatically
• Server logs: 12 months, deleted automatically by our hosting provider
• Email correspondence: for the duration of the business relationship and 3 years after last contact
• Newsletter addresses: until you unsubscribe (deleted from Mailchimp as well)
• Analytics data: per Microsoft Clarity policy, generally up to one year

Accounting and contractual documents are retained for the periods required by Romanian tax law, independently of this policy.

Your rights

Under Regulation (EU) 2016/679 (GDPR), you have the following rights:

• Right of access (Art. 15): to know whether we process your data and to receive a copy of it
• Right to rectification (Art. 16): to have inaccurate or incomplete data corrected
• Right to erasure, the "right to be forgotten" (Art. 17): to have your data deleted
• Right to restriction of processing (Art. 18): to have your data kept but no longer used
• Right to data portability (Art. 20): to receive your data in a structured, machine-readable format
• Right to object (Art. 21): to object to processing based on legitimate interest, including receiving news from us
• Right to withdraw consent (Art. 7(3)) at any time, without affecting the lawfulness of prior processing: via the unsubscribe link, the "Cookie settings" button in the site footer, or by email
• Right to lodge a complaint with a supervisory authority (Art. 77): the Romanian Data Protection Authority (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest, dataprotection.ro

How to exercise your rights: write to office@l-and-e.ro, a mailbox read every working day. We will reply within one month of receiving your request, free of charge. If we cannot identify you from the email, we may ask for a confirmation, only as far as needed to avoid disclosing data to someone else.

Security

The website is served exclusively over HTTPS, with a valid certificate. The files storing message copies and newsletter addresses are kept outside the public area of the server and cannot be reached from the internet.

No technical measure offers absolute security, but we treat your data with the care we would want for our own.

Changes to this policy

If we change the way we process data, we update this page and the date at the top of it. We recommend checking it periodically.