Codeprint / Legal information
Privacy policy
We use the data needed to answer enquiries and deliver Codeprint services. We do not sell personal data or automatically subscribe people who contact us to marketing.
Last updated:
Who is responsible
CODEPRINT SOLUTIONS S.R.L., tax identification number 52459090, company registration J2025067649005, registered at Strada Tineretului no. 17, Chiajna, Romania, operates this website and is the controller for enquiries, account administration and its own security. Contact: office@codeprint.ro.
When you contact us
We process your email address, message and project information you choose to share. Name and company, where requested, are optional. We do not need national identification numbers, identity documents, bank details, medical information or other sensitive data in the form. Please leave these out of your message.
For a quotation requested in your own name, processing may be necessary for steps before a contract at your request under GDPR Article 6(1)(b). For correspondence with company representatives and other enquiries, we use our legitimate interest in answering and managing the professional relationship under Article 6(1)(f), subject to an assessment of your rights. Marketing agreement is not a condition for receiving a reply.
Client account and portal
We use the business email address, organisation membership, role, authentication information and organisation link details to provide access and administration. Destination changes have a history identifying the actor, time, previous and new destination for accountability and security. Clients cannot access another client's data.
We rely on legitimate interests to manage relationships with client representatives and protect accounts, and on Article 6(1)(c) where a legal obligation applies. Do not put passwords, access tokens, medical information or unnecessary information about individuals into link destinations.
NFC and QR link requests
A Codeprint link redirects to the destination configured by the client. The service counter stores a total per link and day. It does not store IP addresses, visitor identifiers, referrers, location, devices or a log of each request's time. We do not install tracking tools on client websites.
A request is not a unique person, lead or order. Repeat requests and some automated requests can affect totals. Infrastructure receives technical data needed for communication and security, including IP addresses; their absence from the counter does not mean that no technical processing takes place.
Where the service involves personal data handled on a client's instructions, the client is the controller for that activity and Codeprint acts as its processor under the applicable agreement. Codeprint remains a controller for its own security and contract administration. Roles follow the actual purposes and operation, rather than the service's name alone.
Optional website statistics
With your agreement, we use Vercel Web Analytics only on approved public presentation pages. We do not load it in the portal, administration, authentication or redirect routes. We remove URL query parameters and fragments from events and do not send form contents or account information. We do not enable advertising events, personalised ads or session recordings.
Vercel describes aggregated statistics and temporary identification using a request hash. Data may include the page, event time, approximate country or region, browser and device type. We block analytics loading when the incoming referrer contains a detailed path or parameters. You can withdraw agreement at any time through Privacy preferences without losing access to the website.
Providers and transfers
We use Vercel for hosting and, if you agree, website statistics; Neon for the portal database; and our email infrastructure for correspondence. Access is limited to people and providers that need the information for these purposes.
A European hosting region does not rule out every international transfer. Where providers process personal data outside the European Economic Area, we use the applicable safeguards, such as adequacy decisions or standard contractual clauses, under the relevant processing agreements. Ask office@codeprint.ro for information about the safeguards that apply.
Retention
Enquiries that do not result in a collaboration are removed from contact records within six months of the last interaction. Contracts, invoices, complaints and evidence needed for legal purposes follow the relevant legal and necessary retention periods, separately from ordinary enquiry messages.
When access ends, we revoke the relevant permissions and active sessions. When the account is no longer needed for an active collaboration, its data is deleted or restricted within 30 days, except where legal obligations or ongoing disputes require retention. The operational audit log is retained for 90 days and daily portal counters for 12 months. Destination version history is retained for the duration of the service and removed within 90 days after it ends, except for a legal obligation or ongoing dispute. We do not retain an individual visitor history. Abuse-limiting keys use an HMAC digest rather than a plain IP address; they expire logically within 15 minutes and are physically removed by daily cleanup within 24 hours and 15 minutes. Backups expire through their normal lifecycle and are not repurposed for marketing.
The statistics preference remains in your browser for six months. Optional statistics are available within the reporting window of the active Vercel plan; that window is not a guarantee that the provider deletes every record at its end. Providers' technical retention is checked through their agreements and settings.
Your rights
Under the GDPR, you may request access, correction, erasure, restriction and, where applicable, portability. You may object to processing based on legitimate interests and withdraw consent without affecting the lawfulness of earlier processing. We do not make solely automated decisions producing legal effects about you.
Write to office@codeprint.ro. We may request only information necessary to verify your request and generally reply within one month. You may complain to the Romanian National Supervisory Authority for Personal Data Processing at www.dataprotection.ro.
Questions about this information: office@codeprint.ro.
