PRIVACY POLICY

Last Updated: August 27, 2025

ReadyTech Consulting is a European company incorporated in Romania, headquartered in Cluj-Napoca, but serving companies from several EU countries.

This Privacy Policy explains how we collect, use, and protect your personal information (“Personal Data”) when you visit readytechconsulting.com and interact with us, including through our contact form. It also outlines your rights under applicable data protection laws.

The website readytechconsulting.com is intended for informational purposes only. The only personal data we collect directly through the site is the information you choose to provide via our contact form (such as your name, email address, and message). We aim to keep data collection to the strict minimum necessary to respond to your inquiry.

By accessing and using readytechconsulting.com, you acknowledge that you have read and understood this Privacy Policy. We may update this Policy from time to time to reflect changes in our services, legal requirements, or privacy practices. We encourage you to review it periodically.

About us

ReadyTech Consulting is a boutique legal and compliance consulting firm based in Romania. We specialize in delivering intelligence-driven regulatory and strategic consulting services tailored to International companies, particularly in healthcare, telecommunications, and technology sectors.

Our team brings deep experience in logistics, business development, risk management, and data protection, helping clients navigate complex compliance landscapes, expand operations, and enhance business performance. We offer support on international and regional projects, including GDPR readiness, contract management, administrative optimization and industry-specific market entry strategies.

The Data Controller responsible for the processing of personal data described in this Privacy Policy is:

Your personal data

Information you provide to us

When you contact us through the contact form on the Website, we collect the personal data you choose to provide. This typically includes:

• Full name – so we know who we are communicating with
• Email address – so we can reply to your inquiry
• Phone number – if you wish us to contact you by phone
• Details of your inquiry or expressed interests – to understand your request and how we can best assist you

We use this information only for the purpose of responding to your inquiry, following up on your request, and maintaining our communication with you. We do not sell, rent, or otherwise share this personal data with third parties. You may request deletion of your personal data from our records at any time by contacting us at the details provided in this Privacy Policy.

Information collected automatically when you visit our website

When you access readytechconsulting.com, certain technical information is collected automatically by our web server. This is standard practice for all websites and is necessary to ensure security and proper functionality. The information may include:

1. Browser type and version (e.g., Chrome, Firefox)
2. Operating system used (e.g., Windows, macOS, Linux)
3. Referring website (URL of the site you visited before coming to our website)
4. Pages visited within our website (sub-pages accessed)
5. Date and time of your visit
6. Internet Protocol (IP) address of your device
7. Internet service provider (ISP) used to access the site
8. Other similar technical data necessary for the secure and efficient operation of the site

This information is stored in server log files and is used only for the following purposes:

• Delivering our website content correctly to your device
• Optimizing the functionality and performance of our website
• Ensuring the ongoing security and stability of our IT systems
• Detecting and preventing misuse or cyberattacks
• Providing information to law enforcement if required by law in the case of a security incident

We do not use this technical data to personally identify you, and it is never combined with other data sources for profiling purposes.

Cookies and analytics

At present, readytechconsulting.com does not:

• Use cookies for tracking or profiling
• Use Google Analytics or other analytics tools that collect personal data
• Serve advertisements or integrate third-party ad providers

If this changes in the future, we will update this Privacy Policy and implement the necessary cookie consent tools before placing any such technologies on your device.

Purpose and legal basis for processing

We process your personal data only when there is a clear and lawful basis under the General Data Protection Regulation (GDPR). The purposes for which we process data collected through readytechconsulting.com and in the course of our business include:

1. Responding to your inquiries and providing information

• Purpose: When you contact us via the contact form, email, or phone, we process your personal data (such as name, email address, phone number, and details of your request) to respond to your inquiry, provide you with information about our services, or take steps at your request prior to entering into a contract.
• Legal basis:
  Article 6(1)(a) GDPR – Consent (when you voluntarily provide your data through the contact form).

• Article 6(1)(b) GDPR – Contract (when processing is necessary to take steps at your request before entering into a contract).

2. Performing a contract and delivering services

• Purpose: If you become our client or partner, we process personal data necessary to fulfil our contractual obligations, including communication, service delivery, and invoicing.
• Legal basis:
  • Article 6(1)(b) GDPR – Contract (processing necessary for the performance of a contract).

3. Ensuring website security and functionality

• Purpose: We process technical and usage data (e.g., IP address, browser type, operating system, access time, and pages visited) to operate readytechconsulting.com, prevent security threats, troubleshoot technical issues, and ensure the website works as intended.
• Legal basis:
  • Article 6(1)(f) GDPR – Legitimate interests (ensuring the security, proper functioning, and improvement of our website).

4. Compliance with legal obligations

• Purpose: In certain cases, we may need to process and retain your personal data to comply with legal, tax, or regulatory requirements, or to respond to lawful requests from authorities.
• Legal basis:
  • Article 6(1)(c) GDPR – Legal obligation (processing necessary to comply with applicable laws).

5. Protecting our legitimate business interests

• Purpose: We may process personal data to protect and defend our rights, property, or operations, for example in the event of a legal dispute, suspected fraud, or security incident.
• Legal basis:
  • Article 6(1)(f) GDPR – Legitimate interests (protecting our business, systems, and users).

Retention and deletion of your personal data

The personal data you provide through the contact form on readytechconsulting.com will be stored for a maximum of 1 year from the date of your last communication with us, unless it is needed for a longer period to handle your inquiry, perform a contract with you, comply with a legal obligation, or protect our legitimate interests (for example, in the event of a dispute).

If the data is no longer required for these purposes, it will be securely deleted from our systems before the end of the 1-year period.

You may also exercise your right to erasure at any time under Article 17 of the GDPR by contacting us at the details provided in this Privacy Policy. We will process your request without undue delay, subject to any legal obligations that may require us to retain certain information.

Protection of your personal data

We take the security and confidentiality of your personal data seriously. Our Website is built on the WordPress platform, and we have implemented appropriate technical and organisational measures to ensure an adequate level of protection in accordance with Article 32 of the GDPR.

These measures are designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, access, or any other unlawful forms of processing. They include, but are not limited to:

1. Access control and user permissions – Only authorised personnel have access to personal data, and access is granted strictly on a need-to-know basis in line with their professional duties.
2. Strong authentication and passwords – All administrator accounts for WordPress and related systems are protected with strong, unique passwords and, where possible, two-factor authentication (2FA).
3. Secure hosting environment – The website is hosted on servers that apply modern security standards, including firewalls, malware scanning, intrusion prevention systems, and regular backups.
4. Encryption – All data transmitted through our website, including contact form submissions, is encrypted in transit using HTTPS/TLS.
5. Security updates – WordPress core, plugins, and themes are kept up to date to reduce vulnerabilities. Security patches are applied promptly.
6. Confidentiality agreements – All employees, collaborators, and service providers who handle personal data are bound by confidentiality obligations and, where applicable, Data Processing Agreements (DPAs).
7. Minimal data access – We collect and process only the minimum amount of personal data necessary, and it is stored only for as long as needed for the purposes described in this Privacy Policy.

We regularly review and update our security practices to reflect technological developments, changes in risks, and best practices for WordPress website security.

Sharing your personal data

We do not sell or rent your personal data. However, where necessary, we may share or provide access to certain personal data with trusted third parties in order to operate readytechconsulting.com, deliver our services, and meet legal or contractual obligations.

This may include:

1. Website platform and theme providers – Our website is built on WordPress and uses the Avada theme. Limited technical data may be processed by these providers or their authorised resellers only when necessary for maintenance, troubleshooting, or updates.
2. Website hosting and storage providers – We use secure hosting services that may process personal data (such as contact form submissions) in order to store it securely, manage backups, and ensure site availability.
3. Service providers and collaborators – This may include IT support, security monitoring, and email service providers that help us respond to your inquiries.
4. Business partners – With your explicit consent, personal data submitted via the contact form (such as your name, email address, and expressed interests) may be shared with our trusted partners if doing so is necessary to fulfil your request, provide you with relevant services, or facilitate business cooperation.
5. Legal and regulatory authorities – Where required by law or court order, we may be obliged to disclose certain personal data to competent authorities.

All third parties that process personal data on our behalf are bound by Data Processing Agreements or equivalent contractual obligations to ensure they handle your information in compliance with the GDPR and maintain strict confidentiality and security standards.

Data protection principles

We are committed to processing your personal data in line with our responsibilities under the General Data Protection Regulation (GDPR) and other applicable data protection laws.

In accordance with Article 5 GDPR, we ensure that your personal data is:

1. Processed lawfully, fairly, and transparently – We handle your data in a way that is clear, honest, and consistent with your rights.
2. Collected for specific, explicit, and legitimate purposes – We only collect data for clearly defined purposes and do not use it in ways that are incompatible with those purposes.
3. Adequate, relevant, and limited to what is necessary – We collect only the minimum personal data required to fulfil the intended purpose.
4. Accurate and kept up to date – We take reasonable steps to ensure your personal data is correct and make prompt corrections or deletions when necessary.
5. Stored only for as long as necessary – We keep personal data in an identifiable form only for as long as needed to fulfil the purpose for which it was collected, unless longer retention is required by law.
6. Processed securely – We use appropriate technical and organisational measures to protect your data from unauthorised access, unlawful processing, accidental loss, destruction, or damage.

We apply these principles in our daily operations, including the design and maintenance of readytechconsulting.com, and regularly review our processes to reflect technological developments and changes in data protection laws.

We do not use your personal data for automated decision-making, including profiling, as defined under Article 22 GDPR.

Your rights under data protection law

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

1. Right of access – You can request confirmation as to whether we process your personal data and, if so, obtain a copy along with relevant information about how it is used.
2. Right to rectification – You can request that we correct any inaccurate personal data and complete any incomplete information.
3. Right to erasure (“right to be forgotten”) – You can request that we delete your personal data, provided that no legal or contractual obligation requires us to retain it.
4. Right to restrict processing – You can request that we temporarily or permanently restrict the processing of your personal data under certain circumstances.
5. Right to object to processing – You can object to our processing of your personal data when it is based on our legitimate interests or for direct marketing purposes.
6. Right to data portability – You can request that we provide you with your personal data in a structured, commonly used, and machine-readable format, or transfer it to another controller where technically feasible.

We have implemented organisational and technical measures to ensure that these rights can be exercised quickly and securely.

We will respond to your request within 30 days of receipt, in accordance with GDPR requirements.

If you believe that your rights have been infringed, you also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP):

• Website: https://www.dataprotection.ro
• Email: anspdcp@dataprotection.ro
• Address: B-dul G-ral Gheorghe Magheru 28-30, Sector 1, 010336 Bucharest, Romania

International data transfers

ReadyTech Consulting stores and processes all personal data on secure servers located within the European Union (EU). We do not currently transfer personal data to countries outside the EU/EEA.

If, in the future, an international transfer of personal data becomes necessary (for example, to work with a trusted service provider located outside the EU/EEA), we will ensure that such transfers comply with the requirements of the General Data Protection Regulation (GDPR). This includes implementing appropriate safeguards such as:

• The European Commission’s Standard Contractual Clauses (SCCs)
• Adequacy decisions issued by the European Commission
• Other lawful transfer mechanisms permitted under applicable data protection laws

Any such change will be reflected in an updated version of this Privacy Policy, and we will take steps to inform you where required by law.

Updates to this Privacy Policy

We are closely monitoring changes in privacy regulations across the European Union, as well as in any other market we interact with. Therefore, we are constantly reviewing and updating our privacy practices, in order to offer our customers and partners the best possible services.

Any change, update, or modification will be effective immediately upon posting on our website. We will notify you of any material change to this Privacy Policy by posting a notice on our website’s homepage for a reasonable period of time following such update, and by changing the effective date (located at the top of this page). Be sure to return to this page periodically to ensure familiarity with the most current version of this Privacy Policy.

Contact

We are always open to learn more about your thoughts and views to provide you with any additional information you may need regarding the processing of your data. If you have any questions or concerns, feel free to contact us at contact@readytechconsulting.com.