Privacy Policy

Last updated: 22 September 2026

This Privacy Policy describes how MATEGEO INTERNATIONAL SRL collects, uses, stores and protects the personal data of individuals who visit mategeointernational.eu, contact us, request a quote or become our clients or partners. It has been drafted in accordance with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (the "GDPR"), Romanian Law no. 190/2018 implementing the GDPR and Romanian Law no. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector.

Please read this document carefully. If you have any questions, you can write to us at any time at contact@mategeointernational.eu.

1. Identity of the controller

The data controller is MATEGEO INTERNATIONAL SRL, a Romanian legal entity with its registered office at Str. Prieteniei 1, Bl. L1, Sc. A, Et. P, Ap. 2, 710077 Botoșani, Romania, registered with the Trade Register under no. J2023000161076, tax identification number 47774229 ("MATEGEO INTERNATIONAL", the "Company", "we", "us").

The Company is not legally required to appoint a Data Protection Officer within the meaning of Article 37 GDPR; however, it has designated a person responsible for data protection who can be contacted at contact@mategeointernational.eu or by post at the registered office address, marked "Data protection".

2. Categories of data we process

Depending on how you interact with us, we may process the following categories of data:

1. Data provided through website forms (contact, quote request, price calculator, package or partnership request): first and last name, company name, email address, telephone number, service of interest, estimated budget, your message and any other information you choose to include.
2. Communication data: the content of messages sent by email, WhatsApp, telephone or other channels, together with the related metadata (date, time, sender number or address).
3. Contract data: identification details of the legal representatives or contact persons of clients and partners, job title, signature, data required to perform the contract (access to accounts, domains, platforms), project and communication history.
4. Billing data: the client's name and tax details, address, bank account, payment and invoice history. We do not store full card details; online payments are processed by authorised payment service providers.
5. Technical data collected automatically: IP address, browser and device type, operating system, pages visited, visit duration, traffic source, identifiers from cookies or similar technologies (detailed in our Cookie Policy).
6. Data from public sources: company information taken from public registers (Trade Register, ANAF) in order to verify the identity of contracting partners.

We do not intentionally process special categories of data (Article 9 GDPR) and we ask you not to send us such information through forms or email.

3. Purposes and legal bases of processing

Purpose	Data processed	Legal basis
Responding to contact and quote requests, preparing estimates	form data, communication data	Art. 6(1)(b) GDPR – pre-contractual steps at the data subject's request
Concluding and performing service contracts	contract data, communication data	Art. 6(1)(b) GDPR – performance of a contract
Invoicing, accounting, tax archiving, reporting to authorities	billing data	Art. 6(1)(c) GDPR – legal obligation (Romanian Fiscal Code, Accounting Law no. 82/1991)
Sending automated emails confirming receipt of your request	email, name, content of the request	Art. 6(1)(b) GDPR – pre-contractual steps
Follow-up emails regarding an open request	email, name, request history	Art. 6(1)(f) GDPR – our legitimate interest in concluding the commercial discussion you initiated
Commercial communications (newsletter, offers, news)	email, name, preferences	Art. 6(1)(a) GDPR – consent, which may be withdrawn at any time
Operating, securing and improving the website	technical data, server logs	Art. 6(1)(f) GDPR – legitimate interest
Traffic statistics (Google Analytics) and personalised advertising (Meta, Google, TikTok)	analytics and marketing cookies	Art. 6(1)(a) GDPR and Art. 4 of Law 506/2004 – consent given through the cookie banner
Showcasing completed projects in our portfolio	client name, logo, website address	Art. 6(1)(f) GDPR or the contractual reference clause
Establishing, exercising or defending legal claims, preventing fraud	any relevant category	Art. 6(1)(f) GDPR – legitimate interest

Where we rely on legitimate interest, we have carried out a balancing test and concluded that the processing does not disproportionately affect your rights and freedoms. You may request details of this assessment at any time.

4. Automated emails

When you submit a form on the website, you will automatically receive an email from no-reply@mategeointernational.eu confirming that we have received your request. This is a service message, not a commercial communication, and its legal basis is the pre-contractual steps taken at your request. If we do not hear back from you, we may send at most two follow-up emails within the following 30 days on the basis of our legitimate interest. You may object to these messages at any time by simply replying to the email or writing to contact@mategeointernational.eu.

We recommend checking your SPAM/Promotions folder, as automated messages may be filtered by your email provider.

5. Retention periods

We keep data only for as long as necessary for the purposes for which it was collected:

• Enquiries and quotes (leads) that did not result in a contract: 3 years from the last interaction, in line with the general limitation period under the Romanian Civil Code.
• Contracts, invoices and supporting documents: 10 years from the end of the financial year in which they were issued, as required by the Romanian Fiscal Code and Accounting Law no. 82/1991.
• Contractual correspondence: for the duration of the contract and 3 years after its termination.
• Cookies and online identifiers: according to the durations set out in the Cookie Policy (from session-only to a maximum of 2 years).
• Subscriptions to commercial communications: until consent is withdrawn or after 2 years of inactivity.
• Server logs: a maximum of 12 months.

Once these periods expire, data is deleted or irreversibly anonymised.

6. Recipients and processors

Your data may be shared, to the extent strictly necessary, with:

• hosting and infrastructure providers with servers located in the European Union;
• email and communication service providers (SMTP, WhatsApp Business);
• authorised payment service providers (banks, payment processors);
• accountants, auditors, lawyers and consultants bound by confidentiality obligations;
• Google, Meta and TikTok, solely on the basis of the consent you give through the cookie banner, for analytics and advertising services;
• subcontractors and partners involved in delivering the contracted services (for example printing houses, photo and video studios, developers), to the extent required to perform the project;
• public authorities, where the law requires it (tax authorities, courts, criminal investigation bodies).

We have signed data processing agreements under Article 28 GDPR with all our processors. We do not sell or rent your data to third parties.

7. International transfers

Data is generally stored within the European Union. Some providers (for example Google, Meta, TikTok) may transfer data outside the European Economic Area, in particular to the United States of America. In such cases we ensure that the transfer takes place on the basis of an adequacy decision (including the EU–US Data Privacy Framework) or the Standard Contractual Clauses adopted by the European Commission, supplemented by additional safeguards where necessary. You may request a copy of the applicable safeguards at contact@mategeointernational.eu.

8. Your rights

Under Articles 15–22 GDPR you have the following rights:

1. the right of access – to obtain confirmation that we process data about you and a copy of that data;
2. the right to rectification – to correct inaccurate or incomplete data;
3. the right to erasure ("right to be forgotten") – under the conditions of Article 17 GDPR;
4. the right to restriction of processing;
5. the right to data portability – to receive your data in a structured, commonly used and machine-readable format;
6. the right to object – to processing based on legitimate interest and, at any time, to direct marketing;
7. the right not to be subject to a decision based solely on automated processing – we note that we do not make such decisions;
8. the right to withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand.

To exercise your rights, send a request to contact@mategeointernational.eu or by post to our registered office. We will respond within 30 days of receiving the request; in complex cases this period may be extended by a further 60 days, in which case we will inform you in advance. To protect your data, we may ask for additional information to verify the identity of the requester.

9. Right to lodge a complaint

If you consider that the processing of your data infringes applicable law, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru no. 28–30, District 1, postal code 010336, Bucharest, Romania, telephone +40 318 059 211, email anspdcp@dataprotection.ro, www.dataprotection.ro. You may also bring an action before the competent courts. We would nevertheless encourage you to contact us first so that we can resolve any concern amicably.

10. Security measures

We have implemented appropriate technical and organisational measures to protect data against unauthorised access, loss, destruction or disclosure: encrypted traffic (HTTPS/TLS), role-based access control and secure authentication, regular backups, system updates, access logging, confidentiality clauses for employees and contractors and periodic vendor assessments. In the event of a personal data breach likely to result in a high risk to your rights, we will notify you without undue delay in accordance with Article 34 GDPR.

11. Minors

Our services are aimed at companies and professionals. We do not knowingly collect data from persons under the age of 16. If we become aware that we have collected such data without the consent of the holder of parental responsibility, we will delete it promptly.

12. Third-party links

The website may contain links to websites operated by clients, partners or other third parties. We are not responsible for their privacy practices and recommend that you review their policies.

13. Changes to this policy

We may update this policy to reflect changes in legislation or in our practices. The current version is always published at mategeointernational.eu, with the date of the last update stated at the top. In the event of significant changes, we will inform data subjects by email or through a prominent notice on the website.

14. Contact

MATEGEO INTERNATIONAL SRL Str. Prieteniei 1, Bl. L1, Sc. A, Et. P, Ap. 2, 710077 Botoșani, Romania Email: contact@mategeointernational.eu Website: mategeointernational.eu