Privacy Policy

Protecting your personal data is our priority

Last updated: February 20, 2025

1. Data Controller

The data is processed by S.C. CYREX GROUP S.R.L., having its headquarters at Str. Stefan Octavian Iosif, Bl. 1C, Sc. 1, Ap. 1, 332021, Petroșani, Hunedoara, România. The company can be contacted at email: contact@cyrexgrp.com.

2. Ce date colectăm

We collect data through three main methods: Contact Form, Email, and Phone Call.

  1. Data provided directly by you:
    • Identification data: Surname, first name.
    • Contact data: Email address, phone number.
    • Professional/Business data: Name of the restaurant/company, your position in the company, Fiscal Code/CUI (if provided), location details.
    • Content of communication: Details of the request submitted via form or email.
  2. Data collected during the Demonstration (Demo):
    • Video/Audio Recordings: Video call demo sessions may be recorded. Your explicit consent will be requested verbally or in writing before recording begins.
    • Usage Data (Logs): If you receive access to a test account, we save activity logs (time spent, actions performed in the platform) for security and product improvement purposes.
  3. Data collected automatically (Google Analytics):
    • IP address (usually anonymized), browser type, device used, pages visited on our site, time spent on the site.

3. Purposes and Legal Basis for Processing

We process your data exclusively for the following purposes and based on the following legal grounds:

  1. Handling offer requests and initial contact:
    • Legal Basis: Taking steps at the request of the data subject prior to entering into a contract (Art. 6.1.b Romania GDPR).
  2. Sending personalized offers and reminders:
    • We send specific offers or reminders strictly related to your initial request.
    • Legal Basis: The Legitimate Interest of the company to respond completely and efficiently to potential client requests.
  3. Product improvement and training (Demo Recordings):
    • Recording video presentation calls for quality analysis and staff training.
    • Legal Basis: Your explicit Consent (Art. 6.1.a Romania GDPR), requested before recording begins.
  4. Traffic analysis and site security (Google Analytics):
    • Monitoring site performance and detecting potential technical issues.
    • Legal Basis: Legitimate Interest (for security) and Consent (for analysis/statistics cookies).

4. Data Storage and Transfer

Data is stored on servers within the European Union. We use third-party processors for email (Zoho) and analysis (Google), ensuring they comply with Romanian GDPR standards.

5. Retention Period

We retain your personal data (for potential clients who do not finalize a contract) for a period of 3 years from the last interaction. This term is necessary to maintain the history of discussions in case of returning to the offer and for defending our rights in court. After the expiration of the term or upon withdrawal of consent, the data will be deleted or irreversibly anonymized, being subsequently used only for statistical purposes.

6. Your Rights

In accordance with GDPR, you have the following rights:

  • Right of access: To request a copy of the data we hold.
  • Right to rectification: To correct incorrect data.
  • Right to erasure ("Right to be forgotten"): You can request the deletion of data if there is no longer a legal reason to keep it.
  • Right to object: You can object to processing for marketing purposes at any time.

To exercise these rights, you can contact us at: dpo@cyrexgrp.com. Requests will be resolved within 30 days.

You also have the right to file a complaint with the data protection supervisory authority: The National Supervisory Authority for Personal Data Processing (ANSPDCP) - www.dataprotection.ro, if you consider that the data processing violates the legislation in force.

For questions regarding this document, please contact us at contact@cyrexgrp.com