00Privacy
Privacy policy
Updated:
The Romanian version prevails.
1. Who we are (the data controller)
RealTime Development S.R.L., CUI 45223983, J2021019953400.
Address: Str. Cpt. Gheorghe Preotescu nr. 6, Corp 1, Parter, Camera 1, Sector 4, Bucharest, Romania.
Contact: contact@
The controller operates without a designated Data Protection Officer (DPO).
2. The channel through which we receive data
Email is the only channel through which you can send us data: contact@
3. What data we process
We process personal data when you write to us or attend a meeting with us: your name, email address, company and the information about your business that you choose to share with us.
When you visit the website, the hosting provider (Vercel Inc.) may record technical data in its server logs, such as your IP address and browser type, for the operation and security of the website.
4. Providing your data
You provide your data voluntarily. No law requires you to provide it.
To reply to you and arrange a meeting, we need your email address and the name you write to us under. Without them, we cannot reply to you. Any other information is yours to choose.
If we enter into a contract, the identification details required for the contract and for invoicing are necessary to conclude it.
5. Cookies and analytics
The website operates without cookies and without analytics or tracking scripts. Fonts are hosted on the same domain, and the website loads only its own resources. Details in the Cookie policy.
6. Purpose and legal basis
Steps taken at your request before entering into a contract (Article 6(1)(b) GDPR): to reply to messages sent by email and to schedule and hold meetings.
Performance of a contract (Article 6(1)(b) GDPR) and compliance with legal obligations, such as accounting obligations (Article 6(1)(c) GDPR): if we enter into a contract.
Legitimate interest (Article 6(1)(f) GDPR): for the operation and security of the website and for the establishment, exercise or defence of our legal claims. Our legitimate interest is to keep the website secure and to be able to defend our rights.
We write to you only in reply to your requests. We send messages about our services (direct marketing) only with your prior consent (Article 6(1)(a) GDPR and Romanian Law No 506/2004). You may withdraw your consent at any time. Details in sections 11 and 12.
7. Automated decisions and profiling
Every decision that concerns you is made by a person on our team. We process your data without decisions based solely on automated processing and without profiling, within the meaning of Article 22 GDPR.
8. Retention period
We keep emails and the data they contain for no more than 3 years from the last message exchanged with you, the length of the general limitation period. We then delete or anonymise them.
If we enter into a contract, we keep the related correspondence for the term of the contract and for a further 3 years after it ends, to defend our rights. We keep the contract, invoices and other documents underlying our accounting records for 10 years from the end of the financial year in which they were drawn up, as required by Romanian Accounting Law No 82/1991.
Server logs are kept by Vercel for the period it sets, under its own privacy policy.
Where data is needed for ongoing proceedings, such as an audit or a dispute, we keep it until those proceedings end.
9. Recipients of your data
We work with two providers who have access to data strictly for the services they provide to us:
Google (Google Workspace): the email service through which we receive and send messages. Google processes the data on our behalf, under a data processing agreement.
Vercel Inc. (website hosting): the operation and security of the website. For server logs, Vercel also acts as a controller, under its own privacy policy.
Transfers of this data outside the European Economic Area are described in section 10.
10. Transfers outside the European Economic Area
Google and Vercel may process data in the United States and in other countries where they operate data centres.
For transfers to the United States, both providers are certified under the EU-U.S. Data Privacy Framework, which the European Commission recognises through an adequacy decision (Decision (EU) 2023/1795). You can check the certification at dataprivacyframework.gov.
In addition, our contracts with them include the standard contractual clauses adopted by the European Commission. These apply to transfers to other countries and serve as a fallback safeguard.
Reference documents: Google’s data processing addendum and Vercel’s data processing addendum. You may ask us for a copy of the safeguards at any time, at contact@
11. Your rights
Under the GDPR, you have the following rights regarding your personal data:
Right of access: you may request information about the data we process and a copy of it.
Right to rectification: you may request the correction of inaccurate or incomplete data.
Right to erasure (‘right to be forgotten’): you may request the deletion of your data, under certain conditions.
Right to data portability: you may request the transfer of your data to another controller.
Right to object: you may object to processing based on our legitimate interest, and to direct marketing at any time and without giving reasons. Details in section 12.
Right to restriction of processing: you may request that we limit the way we process your data.
Right to withdraw consent: at any time, without affecting the lawfulness of processing carried out before its withdrawal.
Right to a decision made by a person, not based solely on automated processing (Article 22 GDPR). See section 7.
12. Right to object
Direct marketing: you may object at any time, free of charge and without giving reasons. Write to us at contact@
Processing based on our legitimate interest: you may object at any time, on grounds relating to your particular situation. We then stop the processing, unless we have compelling legitimate grounds that override your interests or the data is needed to establish, exercise or defend legal claims (Article 21(1) GDPR).
13. How to exercise your rights
Write to us at contact@
14. Right to lodge a complaint
If you consider that the processing of your data breaches applicable law, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) or with the supervisory authority in the EU Member State where you live or work.
ANSPDCP: B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, 010336 Bucharest, Romania. Telephone: +40 318 059 211 or +40 318 059 212. Email: anspdcp@
You may also bring proceedings before the competent court.