Privacy Policy

VT Risk SRL ("VT Risk", "we", "our", "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you visit vtrisk.tech or engage with our services.

We process personal data in accordance with Regulation (EU) 2016/679 (GDPR), Romania's Law No. 190/2018, and any other applicable data protection legislation.

The data controller responsible for your personal data is:

We may collect and process the following categories of personal data:

• Contact data: name, email address, phone number, company name, job title
• Communication data: messages you send via our contact form or chat widget
• Usage data: IP address, browser type, pages visited, time on site (via cookies)
• Newsletter / subscription data: email address and subscription preferences
• Sales lead data: industry, pain points, meeting preferences provided during consultations

We rely on the following legal bases under GDPR Art. 6:

• Consent (Art. 6(1)(a)): newsletter subscriptions, non-essential cookies
• Contract (Art. 6(1)(b)): processing necessary to respond to your enquiries or deliver services
• Legitimate interests (Art. 6(1)(f)): improving our website, fraud prevention, direct B2B marketing to professionals
• Legal obligation (Art. 6(1)(c)): compliance with Romanian and EU law

• Responding to contact form enquiries and scheduling calls
• Sending newsletters and updates (with your consent)
• Providing and improving our services
• Analysing website usage and performance
• Complying with legal obligations

We do not sell your personal data. We may share it with:

• Service providers: hosting, email delivery, CRM, analytics platforms acting as processors under data processing agreements
• Professional advisors: lawyers, accountants, auditors under confidentiality obligations
• Public authorities: when required by law

Any transfers outside the European Economic Area (EEA) are protected by Standard Contractual Clauses or an adequacy decision.

We retain your personal data only as long as necessary for the purposes described above:

• Contact & lead data: 3 years from last interaction
• Newsletter subscribers: until unsubscription + 1 year
• Cookie analytics data: up to 26 months
• Legal / contractual records: 10 years (Romanian statutory requirement)

Under GDPR you have the right to:

• Access the personal data we hold about you (Art. 15)
• Rectify inaccurate data (Art. 16)
• Erase your data ("right to be forgotten") (Art. 17)
• Restrict processing (Art. 18)
• Data portability (Art. 20)
• Object to processing based on legitimate interests (Art. 21)
• Withdraw consent at any time (Art. 7(3))

To exercise any right, contact us at office@vtrisk.tech. We will respond within 30 days. You also have the right to lodge a complaint with the Romanian supervisory authority: ANSPDCP (www.dataprotection.ro).

We use cookies and similar technologies. For full details, please read our Cookie Policy.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction, including TLS encryption, access controls, and regular security reviews.

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date above. Continued use of our website constitutes acceptance of the updated policy.

For any privacy-related questions, please contact: