Privacy Policy
1. Data Controller Identity
Name: DEV AI FLOW S.R.L.
Tax ID: RO55260172
Trade Register: J20/260455/56009
Registered office: Municipiul Craiova, Str. Țărăncuței, Nr. 28, Județ Dolj, Romania
Email: info@devaiflow.com
Phone: +40 770 051 251
DEV AI FLOW S.R.L. is the controller of personal data collected through this site, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).
2. What Data We Collect
2.1 Data you provide directly
When you contact us via the form on the site, by email or by phone, we may collect:
- Name and surname — to address you personally
- Email address — for correspondence and responding to enquiries
- Phone number — if you provide it voluntarily
- Message / enquiry content — to assist you effectively
2.2 Automatically collected data
When you access the site, our systems may automatically collect:
- IP address — for security and statistical analysis
- Browser type and operating system
- Pages visited and session duration — via Google Analytics (if you have given consent)
- Technical cookies necessary for site operation
3. Purpose and Legal Basis of Processing
| Purpose | Legal basis (GDPR Article) | Retention period |
|---|---|---|
| Responding to contact enquiries | Art. 6(1)(b) – performance of a contract / pre-contractual measures | 3 years from last interaction |
| Sending commercial offers and information (newsletter) | Art. 6(1)(a) – consent of the data subject | Until withdrawal of consent |
| Statistical traffic analysis (Google Analytics) | Art. 6(1)(a) – consent of the data subject | Per Google Analytics settings (max. 26 months) |
| Platform security (technical logs) | Art. 6(1)(f) – legitimate interest | 90 days |
| Fulfilment of legal obligations (invoicing, accounting) | Art. 6(1)(c) – legal obligation | 10 years (per tax legislation) |
4. Recipients of Data
Your personal data may be accessed by:
- Authorised staff of DEV AI FLOW S.R.L. with responsibilities in client relations, IT or marketing
- Technical service providers (hosting, email, CRM) acting as processors, exclusively under data processing agreements (DPA)
- Public authorities (tax authorities, courts, etc.) — exclusively upon an express legal request
We do not sell, rent or transfer your data to third parties for marketing purposes without your explicit consent.
5. International Data Transfers
Some technical services we use (e.g. Google Analytics, cloud services) may involve transferring data outside the European Economic Area (EEA). Such transfers are carried out exclusively on the basis of Standard Contractual Clauses approved by the European Commission or adequacy decisions pursuant to Art. 45 GDPR.
6. Your Rights
Under GDPR, you have the following rights, which you may exercise free of charge:
- Right of access (Art. 15) — to request a copy of the data we hold about you
- Right to rectification (Art. 16) — to correct inaccurate or incomplete data
- Right to erasure (Art. 17) — the "right to be forgotten", under the conditions provided by law
- Right to restriction of processing (Art. 18) — to request temporary suspension of processing
- Right to data portability (Art. 20) — to receive the data you provided in a structured format
- Right to object (Art. 21) — to object to processing based on legitimate interest or for direct marketing
- Right to withdraw consent — at any time, without affecting the lawfulness of prior processing
How to exercise your rights
Send a written request to: info@devaiflow.com with the subject "GDPR Request". You will receive a response within a maximum of 30 calendar days.
If you believe your rights have been violated, you may lodge a complaint with your national supervisory authority. In Romania: ANSPDCP:
- Website: www.dataprotection.ro
- Address: B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest, Romania
- Email: anspdcp@dataprotection.ro
7. Data Security
We implement appropriate technical and organisational measures to protect your data, including:
- Data transmission via encrypted connections (HTTPS / TLS)
- Access to data restricted on a need-to-know basis
- Regular monitoring of systems and audit of access logs
- Security incident response procedures
8. Cookies
We use cookies in accordance with our Cookie Policy. You can manage your cookie preferences via the consent banner displayed on your first visit to the site.
See our Cookie Policy for full details.
9. Changes to This Policy
We reserve the right to update this policy to reflect legislative or operational changes. The date of the last update is shown in the header of this page. We recommend checking this page periodically.