Last updated: 29 July 2026. This English version is a translation provided for convenience; in case of any discrepancy, the Romanian version prevails.
1. Data controller
The controller of your personal data is VAULTFORGE S.R.L., a Romanian limited liability company with its registered office at Str. Gheorghe Mihuță nr. 110U, Lisaura village, Ipotești commune, Suceava county, postcode 727326, Romania, registered with the Trade Register Office attached to the Suceava Court under no. J2026042297008, unique registration code 55078449, EUID ROONRC.J2026042297008, email office@vaultforge.ro, phone +40 773 964 377 (hereinafter "VaultForge", "we" or "the Company").
We have not appointed a data protection officer (DPO), as it is not mandatory in our case. For any request regarding your data, write to office@vaultforge.ro.
2. What data we collect and why
2.1 The contact form
Data: name, email address, phone number (optional) and the content of your message.
Purpose: to answer your request and, where relevant, to prepare a quote.
Legal basis: art. 6(1)(b) GDPR — steps taken at your request prior to entering into a contract; and art. 6(1)(f) — our legitimate interest in answering requests we receive.
Retention: 24 months from the last communication, after which we delete the message. If a contract is concluded, data is kept in line with legal obligations (including tax obligations, 10 years).
2.2 Newsletter subscription
Data: email address.
Purpose: sending news and technical analysis.
Legal basis: art. 6(1)(a) GDPR — your consent, given by subscribing.
Retention: until you unsubscribe. You can unsubscribe at any time via the link in every message or by writing to office@vaultforge.ro.
2.3 Technical access data
Data: IP address, browser and device type, approximate country and city, pages visited, time of access.
Purpose: website security, preventing abuse and attacks, correct operation of the service.
Legal basis: art. 6(1)(f) GDPR — our legitimate interest in keeping the website working and secure.
Retention: according to the policy of our infrastructure provider (Cloudflare), generally under 30 days.
3. Who we share data with
We do not sell or rent your data. We share it only with the providers that help us operate the website, acting as processors:
- Cloudflare, Inc. — hosting, CDN and attack protection.
- Resend (Plus Five Five, Inc.) — delivery of emails generated by the contact form.
These providers may process data outside the European Economic Area. Transfers are based on the Standard Contractual Clauses approved by the European Commission or on an adequacy decision (EU–US Data Privacy Framework).
We may disclose data to public authorities when required by law.
4. Automated decisions and profiling
We do not make automated decisions with legal effect on you and we do not carry out profiling.
5. Data security
Traffic to the website is encrypted with TLS. We apply reasonable technical and organisational measures to protect data against unauthorised access, loss or alteration, including restricted access, regular updates and internal security policies.
6. Your rights
Under the GDPR, you have the right:
- to access your data;
- to have inaccurate data corrected;
- to have your data erased ("the right to be forgotten");
- to restrict processing;
- to data portability;
- to object to processing based on legitimate interest;
- to withdraw your consent at any time, without affecting the lawfulness of prior processing.
You can exercise these rights by writing to office@vaultforge.ro. We reply within 30 days at most.
If you are not satisfied with our answer, you can contact the Romanian National Supervisory Authority for Personal Data Processing — dataprotection.ro, B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, Bucharest, or the data protection authority in your EU country.
7. Minors
Our services are aimed at companies. We do not knowingly collect data from people under 16.
8. Changes
We may update this policy. The version in force is the one published on this page, with the date of the last update shown above.