1. Data Controller
The data controller is ECOMPLEX.RO SRL, registered in Romania under CUI 47757945, Trade Register no. J2023000287154. You can contact us at [email protected].
2. What Data We Collect
We only collect data you provide directly to us. This includes:
- Contact form: name, email address, company name, project description.
- Purchase/checkout: name, email address, billing country. Payment card data is not processed or stored by us — it is handled exclusively by EuPlatesc, a licensed payment institution authorized by the National Bank of Romania.
- Client portal registration: name, email address, and a hashed password. We never store plain-text passwords.
- License activation: domain name linked to a purchased license, for authentication purposes only.
3. Payment Processing — EuPlatesc
All online card payments on IDH.ro are processed by EuPlatesc S.A., a third-party payment gateway. When you proceed to checkout, you are redirected to EuPlatesc's secure environment. We do not receive, store, or transmit card numbers, CVV codes, or banking credentials.
EuPlatesc's relevant legal documents:
4. Cookies & Analytics
This site may use third-party services (such as Google Analytics) that place cookies on your device for statistical analysis of website traffic. These are optional cookies and require your consent. You can manage your cookie preferences at any time via the cookie consent banner or our Cookie Policy.
5. Legal Basis for Processing
- Contract execution — processing your order and delivering the purchased license.
- Legitimate interest — responding to inquiries and preventing fraud.
- Consent — optional analytics cookies (only when you accept).
- Legal obligation — invoicing and accounting records as required by Romanian law.
6. Data Retention
- Contact form submissions: deleted after 12 months if no active engagement.
- Purchase records and invoices: retained for 10 years as required by Romanian tax law.
- License activation data: retained for the duration of the license.
- Client portal accounts: retained until deletion is requested.
7. Your Rights (GDPR)
As a data subject under GDPR, you have the right to:
- Access your personal data held by us.
- Request correction of inaccurate data.
- Request erasure ("right to be forgotten") where no legal obligation requires retention.
- Object to processing or request restriction.
- Data portability — receive your data in a machine-readable format.
- Lodge a complaint with the Romanian national data protection authority (ANSPDCP) at www.dataprotection.ro.
8. Data Transfers
Data is stored on servers located in the European Union. If any third-party service (e.g., Google Analytics) transfers data outside the EU, such transfer is governed by Standard Contractual Clauses as approved by the European Commission.
9. Contact
For any privacy-related requests, write to us at [email protected]. We will respond within 30 days.