Privacy Policy

1. Who we are

BackupFirma.com is the backup and disaster recovery service of VAULTFORGE S.R.L., a Romanian company with its registered office at Str. Gheorghe Mihuță nr. 110U, Lisaura village, Ipotești commune, Suceava county, Romania, registered with the Trade Register under no. J2026042297008, company ID 55078449. The company is the controller of your personal data.

2. The data we collect

The contact form

Data: company name, contact person, email address, phone number (optional) and the content of the message.

Purpose: to answer your request and, where relevant, to prepare an assessment or a quote.

Legal basis: art. 6(1)(b) GDPR — steps taken at your request before entering into a contract; and art. 6(1)(f) — our legitimate interest in answering requests we receive.

Retention: 24 months from the last communication. If a contract is concluded, data is kept in line with legal obligations, including tax obligations (10 years).

Technical access data

Data: IP address, browser and device type, approximate country and city, pages visited.

Purpose and legal basis: website security and abuse prevention — art. 6(1)(f) GDPR, legitimate interest.

Retention: according to Cloudflare's policy, generally under 30 days.

3. Who we share data with

We do not sell or rent your data. We share it only with the providers that help us operate the website, acting as processors:

To the extent these providers process data outside the European Economic Area, transfers are based on the Standard Contractual Clauses approved by the European Commission or on an adequacy decision.

We may disclose data to public authorities when required by law.

4. Automated decisions and security

We do not make automated decisions with legal effect on you and we do not carry out profiling.

Traffic to the website is encrypted with TLS. We apply technical and organisational measures to protect data against unauthorised access, loss or alteration.

5. Your GDPR rights

Under Regulation (EU) 2016/679, you have the right:

• to access your data;
• to have inaccurate data corrected;
• to have your data erased ("the right to be forgotten");
• to restrict processing;
• to data portability;
• to object to processing based on legitimate interest;
• to withdraw your consent at any time, without affecting the lawfulness of prior processing.

You can exercise these rights by writing to [email protected]. We reply within 30 days at most.

If you are not satisfied with our answer, you can contact the supervisory authority: ANSPDCP — dataprotection.ro, B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, Bucharest, or the data protection authority in your EU country.

6. Minors

Our services are aimed at companies. We do not knowingly collect data from people under 16.