Controller and contact
TRALIS CONSULTING S.R.L., CUI 47199172, registered at Strada Victor Tordosan nr. 12, Municipiul Sibiu, Jud. Sibiu, Romania, is the controller for its own business-contact processing. For privacy enquiries or to exercise your rights, email a.heltmann@tralis.eu.
Information and sources
An enquiry may contain your name, business contact details, company, role, message and subsequent correspondence. Please do not send sensitive personal information unless specifically necessary and agreed.
Business-contact information may also be provided by your organisation, an introduction or a relevant professional source. Where information is obtained indirectly, the applicable GDPR Article 14 notice must also be provided; publication here alone does not replace that duty.
Website delivery involves technical information such as IP addresses and request metadata. Hosting logs, recipients and optional analytics settings still require verification; a visit with no cookies does not mean no personal data is processed.
Purposes and legal bases
Enquiries are handled to understand a business request and communicate about a possible engagement. Steps requested by an individual before entering into their own contract may rely on GDPR Article 6(1)(b); communications with company representatives and relevant business relationship management may rely on legitimate interests under Article 6(1)(f), subject to necessity and a balancing assessment.
Applicable legal record-keeping obligations may rely on Article 6(1)(c). Optional consent-based processing must be explained at the point of collection and may be withdrawn. This draft does not authorise unsolicited marketing or undisclosed tracking.
Recipients and external channels
Email, communications, hosting and professional-adviser services may receive information where needed for the relevant purpose. The actual providers, their roles and applicable disclosures must be verified before this notice is final; no provider list is assumed here.
WhatsApp is an external link, not an embedded widget. Following it opens a service operated under its own privacy terms. It may receive technical information on opening and information you send. Ordinary email and telephone links open your chosen communication application.
Retention and transfers
Retention must be limited to what is needed for the relevant enquiry or business relationship, followed only by applicable record-keeping duties or a justified period for legal claims. Concrete periods or meaningful criteria for each record category remain to be confirmed; this is not a statement that a particular deletion schedule is already in place.
International transfers depend on the providers actually used. Where GDPR requires it, an appropriate adequacy decision or other lawful safeguard must apply. Providers, destinations and safeguards have not yet been verified and must be specified before publication.
Your rights
Subject to the GDPR’s conditions, you may request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests. You may withdraw consent without affecting prior lawful processing. Verification of identity may be needed to handle a request securely.
Send requests to a.heltmann@tralis.eu. The GDPR generally requires a response within one month, subject to its permitted extensions. You may complain to Romania’s supervisory authority, ANSPDCP (https://www.dataprotection.ro/), or another competent supervisory authority.
Review status
This is a draft notice, not a representation of completed compliance. Operational providers, retention, hosting settings and any transfers must be confirmed. Additional notices may be needed when collecting information through other channels.