Privacy Policy

1. Introduction

DanubeData ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cloud infrastructure services.

We comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, company name, billing address
• Payment Information: Credit card details (processed by our payment provider)
• Communications: Support tickets, emails, and other correspondence
• Service Configuration: VPS settings, database configurations, SSH keys

2.2 Automatically Collected Information

• Usage Data: Service usage metrics, API calls, resource consumption
• Log Data: IP addresses, browser type, access times, pages viewed
• Device Information: Device type, operating system, unique device identifiers
• Performance Data: Error logs, response times, system metrics

3. How We Use Your Information

We use your information for:

• Providing and maintaining our services
• Processing payments and billing
• Communicating with you about services, updates, and security
• Improving our services and developing new features
• Detecting and preventing fraud and abuse
• Complying with legal obligations
• Resolving technical issues and providing support

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

4.1 Service Providers

• Payment processors (Stripe)
• Infrastructure providers (data center partners)
• Email service providers
• Analytics and monitoring tools

4.2 Legal Requirements

We may disclose your information if required by law, court order, or to protect our rights and safety.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity.

5. Data Storage and Security

Data Location: Your data is stored in secure data centers within the European Union.

Security Measures: We implement industry-standard security measures including:

• Encryption in transit (TLS/SSL)
• Encryption at rest for sensitive data
• Regular security audits and penetration testing
• Access controls and authentication
• Continuous monitoring and logging

6. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services
• Comply with legal obligations (typically 7 years for financial records)
• Resolve disputes
• Enforce our agreements

After account deletion, your data is retained for 30 days before permanent deletion, except where longer retention is required by law.

7. Your Rights Under GDPR

If you are located in the EU, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request limitation of processing
• Portability: Receive your data in a structured format
• Objection: Object to processing of your data
• Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at privacy@danubedata.ro

8. Cookies and Tracking

We use cookies and similar technologies for:

• Authentication and security
• Preferences and settings
• Analytics and performance monitoring
• Marketing and advertising (with your consent)

See our Cookie Policy for detailed information.

9. Third-Party Links

Our services may contain links to third-party websites. We are not responsible for the privacy practices of these external sites.

10. Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect personal information from children.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through our service.

13. Data Controller

The data controller responsible for your personal information is:

IFAS Consult SRL
Registration Number (CUI): RO46614360
Trade Register: J30/870/2022
Registered Office: Cluj-Napoca, Cluj County, Romania
Email: contact@danubedata.ro

14. Contact Information

For privacy-related questions or to exercise your rights:

Data Protection Inquiries: privacy@danubedata.ro
Data Protection Officer: dpo@danubedata.ro
General Support: support@danubedata.ro

15. Supervisory Authority

You have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) or your local data protection authority if you believe your privacy rights have been violated.

ANSPDCP Contact:
Website: www.dataprotection.ro
Email: anspdcp@dataprotection.ro