Privacy Policy

1. Who We Are

The data controller is VERDANT MINDSET S.R.L., a company registered in Romania (VAT/CUI 49704750, Trade Registry No. J01/230/2024), headquartered at Str. Ion Creangă nr. 129, Cugir, Alba county — a digital infrastructure agency. You can contact us at office@verdantmindset.com.

2. What Data We Collect Through This Site

Through this site we collect data exclusively via the contact form:

• Full name
• Email address
• Phone number (optional)
• Message submitted via the contact form

We do not collect data through tracking cookies, do not use Google Analytics, and do not install third-party trackers on this site.

3. Why We Collect This Data

Form data is collected exclusively for:

• Processing your audit or consultation request
• Communicating a response to your submitted message

The legal basis for processing is explicit consent (Art. 6(1)(a) GDPR), expressed through completing and submitting the contact form.

4. Data From Public Sources — B2B Communications (Art. 14 GDPR Notice)

To propose our services to local companies, we process professional business contact data(business name, public email address, public phone number, website address), collected from publicly accessible sources: the business's Google Business profile, its own website, or public company directories.

• Legal basis: legitimate interest (Art. 6(1)(f) GDPR) — a single, relevant B2B communication addressed to public professional addresses. We do not send commercial communications to consumers (natural persons outside their commercial activity).
• The source of the data is stated in the very first communication you receive from us.
• Right to object (Art. 21): every message includes a simple way to refuse. A refusal permanently stops any future commercial communication from us.
• Retention: if there is no response, the data is removed from the active list within 12 months at most. If you opt out, we retain only your email address on a suppression list — precisely to guarantee we never contact you again.

5. Data Retention Period

Data submitted via the contact form is retained for as long as necessary to process the request, but no longer than 12 months, after which it is deleted. Data from public sources follows the terms in section 4.

6. Data Sharing

We do not sell or rent your data. To operate our services we use a small number of infrastructure providers that process data on our behalf as processors, under data processing agreements: web hosting, Google Workspace (storage and email), and Brevo (email delivery). Internal flows run on self-hosted n8n infrastructure under our control.

7. Your Rights

Under GDPR, you have the right to:

• Access — to know what data we hold about you
• Rectification — to correct inaccurate data
• Erasure — to request deletion of your data
• Portability — to receive your data in a structured format
• Objection — to object to processing

To exercise these rights, contact us at office@verdantmindset.com.

8. Data Security

All communication with this site is encrypted via HTTPS. The contact form transmits data through secure channels. We do not store card data or financial information.

9. Contact & Supervisory Authority

For questions or complaints regarding data processing, contact us at office@verdantmindset.com.

You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) — www.dataprotection.ro.