Legal

Privacy Policy

1. Controller

The controller of personal data processed through this website is Highmark Technologies S.R.L., Strada Armoniei, Nr. 23A, Apartment B1, Timișoara, Timiș County, Romania. Questions about this policy or about the processing described in it may be sent to [email protected].

2. Data we collect

We collect only what the site needs in order to function and to answer messages sent to us.

  • Information you submit through the contact form: name, email address, subject, and message content.
  • Information you send to our published email addresses, including the content of your correspondence.
  • Technical data recorded by our hosting infrastructure, such as IP address, user agent, requested URL, and timestamp.
  • Cookie and similar-technology data, where you have consented to non-essential categories.

3. Purposes and lawful basis

We process personal data on the following bases under the General Data Protection Regulation (EU) 2016/679:

  • Legitimate interests (Art. 6(1)(f)) — responding to enquiries, keeping the site secure and available, and preventing abuse.
  • Consent (Art. 6(1)(a)) — non-essential cookies and any analytics or measurement you have accepted.
  • Legal obligation (Art. 6(1)(c)) — where retention or disclosure is required by law.
  • Pre-contractual steps (Art. 6(1)(b)) — where correspondence concerns a prospective employment or commercial relationship.

4. Recipients and processors

Personal data may be handled by service providers acting on our instructions, including hosting, email, and infrastructure providers. Such providers are bound by data-processing agreements and may process data only for the purposes we specify. We do not sell personal data. Where a provider processes data outside the European Economic Area, we rely on an adequacy decision or on Standard Contractual Clauses together with any additional safeguards required.

5. Retention

Correspondence is retained for as long as needed to handle the matter it concerns and for a reasonable period afterwards for record-keeping. Speculative job applications are kept on file and reviewed periodically, and are deleted on request. Server logs are retained for a short operational period. Consent records are kept for as long as required to demonstrate the choice you made.

6. Your rights

Subject to the conditions in the GDPR, you have the right to request access to your personal data, rectification of inaccurate data, erasure, restriction of processing, and data portability. You may object to processing based on legitimate interests and may withdraw consent at any time, without affecting processing already carried out.

Requests should be sent to [email protected]. We reply within one month, extendable where the request is complex. If you believe your data has been handled unlawfully, you may lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) or with the supervisory authority of your place of residence.

7. Changes

We may update this policy to reflect changes in our processing or in applicable law. The current version is always published on this page.