Skip to content
Go to Indica7 International
Strada Paul Greceanu 26A, Sector 2, București
tia@indica7.ro

Privacy policy

Last updated: 27 October 2026

This page explains what personal data we receive through the Indica7 Romania website, what we do with it, who we share it with, how long we keep it and what rights you have.

1. Who is responsible for your data

Indica7 Romania decides what is done with the data you send us through this website. The law calls this role the data controller.

Contact Indica7 Romania: tia@indica7.ro, +40 731 772 777. Contact address: Strada Paul Greceanu 26A, Sector 2, București.

  • Legal name: TSD INDICA7 S.R.L.
  • Unique registration code (CUI): 39977273.
  • Trade Register: J2018014501400.
  • Registered office: Municipiul București, Sector 3, Bd. Unirii nr. 75, bl. H1, sc. 1, et. 5, ap. 27, camera 1.

2. What data we collect

We receive the data you send us yourself, through one of the website's two forms, and the visit statistics explained in section 10. We do not buy data lists and we do not collect data any other way.

  • The quote request for companies: name, company, email, phone (optional), industry, number of workers, message (optional) and the service, if you started from a service page.
  • The contact form: name, email, subject and message.
  • With every form: your confirmation that you have read this policy, the page you sent it from, the language and, when the infrastructure provides it, the country you are visiting from.

The required fields are the minimum we need to reply. Without them we cannot prepare a quote or reply to your message, and the form is not sent. Everything else is optional. Do not send identity documents or health information through the forms.

3. What happens when you send a form

  • The content of the form reaches the Indica7 Romania team by email.
  • You receive a confirmation email at the address you entered.
  • A copy of the form is stored on our own server, at OVH in France, in encrypted form so that only our team can read it. If the email cannot be sent, the team picks the form up from that copy.
  • Your IP address is used to limit submissions to 5 in 10 minutes, as protection against spam. It is held only in the server's memory and is not saved.

4. Purposes and legal bases

The data in a quote request is used to reply to the request and prepare a quote, and the data in the contact form is used to reply to your message.

The legal basis is your consent, given when you send the form, and the steps before a contract that you ask for when you request a quote (Article 6(1)(a) and (b) GDPR). The technical error log relies on our legitimate interest in keeping the website working and secure (point (f)). You can withdraw your consent at any time, without affecting what was done before.

We do not make automated decisions about you or create automated profiles.

5. Who we share data with

  • OVH, a European company, which hosts the website.
  • SendGrid, a service of Twilio Inc., which delivers the emails the forms generate.

The providers process the data on our behalf, only for the service they provide us. We do not sell personal data to anyone.

6. Transfers outside Europe

Twilio Inc., which runs SendGrid, is based in the United States and has joined the EU-U.S. Data Privacy Framework, the mechanism the European Commission recognised as providing protection equivalent to European law. The email the form generates passes through it.

Indica7 also recruits in countries outside the European Economic Area. When a recruitment process involves partners in those countries, we share only the data strictly needed. If you want to know which safeguards apply to a transfer that concerns you, write to us.

7. How long we keep data

  • Quote requests and contact messages are kept for one year from receipt and are then deleted automatically. You can ask for them to be deleted earlier.
  • From each form we also keep, with no time limit, information that does not identify you, namely the type of request, the page and the country it was sent from, the type of device, the options chosen from the lists and the domain of the email address.
  • The technical error log: 30 days. Email addresses and phone numbers are masked automatically before they are written.
  • Visit statistics are kept for up to 24 months.
  • The record of requests received by the server, with shortened IP addresses, is kept for 30 days.

8. Your rights

You can ask for access to your data and a copy of it, correction, deletion, restriction of processing or portability. You can object to processing and withdraw your consent at any time. Write to tia@indica7.ro; we reply within one month.

If you are not satisfied with the reply, you can lodge a complaint with the Romanian supervisory authority, the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP).

9. Security

The website works only over HTTPS, and access to the data received is limited to the people on the team working on your request. No technical measure removes every risk. If you notice a security problem, contact us without sending sensitive information in your first message.

10. Visit statistics

We measure visits to this website with Umami, open-source software that runs on our own server, at OVH in France, and is served from this website's own domain. We use it to understand how the website is used and to improve it, on the basis of our legitimate interest (Article 6(1)(f) GDPR).

Umami uses no cookies and stores nothing on your device. It records the pages viewed, the page you came from, the campaign parameters in links (UTM), the type of device, the operating system, the browser, the language, the country, region and city, the time spent on each page and how far down you scroll, clicks on buttons and links (including phone, email and WhatsApp links) and how the forms are used: when you start filling one in, which field you stopped at if you do not send it, and whether sending worked. It also measures how fast each page loads and responds on your device, the addresses that do not exist on the website, language changes, the sections of each page you actually saw, the country whose website you go on to from this one and, if your browser translates the page, the language it translates it into. For forms that are sent, it also records the options chosen from the lists, such as the country or the area. It never records the content of what you write.

Your IP address is not kept. It is used at that moment to work out the country, region and city and, together with the browser details, to calculate an anonymous session identifier. That calculation uses a value that changes periodically, so it cannot recognise you from one day to the next.

This data is not shared with third parties or used for advertising. It is viewed in aggregate and the records are kept for up to 24 months.

The server also keeps a technical record of the requests it receives, with the IP address shortened by removing its last digits. It is used for aggregate statistics and security, does not identify the person and is deleted after 30 days.

11. External links and cookies

The website does not use cookies and loads nothing from outside services, and the visit statistics described above run on our own server. There is no map on the Contact page. The office address is a link that opens Google Maps in a new tab only when you click it, and from there Google's own terms and privacy policy apply. Links to WhatsApp, social networks and external articles open those services only when you choose them. The details are in the cookie policy.

12. Updates to this policy

The date of the latest revision is shown at the top of the page. If we change anything important, we update this page before collecting data in a new way.