Privacy Policy
Last updated: 29 June 2026
This Privacy Policy explains how TOGAETHER SRL (Trade Register no. J2025020831007, CUI 51500736, Str. Cluj no. 7, 1st Floor, Timișoara, Timiș County, Romania — “Company“, “we“, “us“) collects, uses, and protects personal data when you visit our website or contact us.
We act as a data controller for the personal data described in this policy. We process personal data in accordance with Regulation (EU) 2016/679 (GDPR), Law no. 190/2018 implementing the GDPR in Romania, and Law no. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector.
I. What Data We Collect and Why
1.1 Contact form
When you submit our contact form, we collect:
| Data | Purpose | Legal basis |
|---|---|---|
| Name | To address you correctly in our response | Art. 6(1)(f) GDPR — legitimate interest in responding to business inquiries |
| Email address | To reply to your inquiry | Art. 6(1)(f) GDPR |
| Company name | To understand the business context of your inquiry | Art. 6(1)(f) GDPR |
| Message content | To understand and respond to your request | Art. 6(1)(f) GDPR |
We retain contact form submissions for 2 years from the date of receipt, after which they are deleted. If your inquiry leads to a contractual relationship, relevant data is retained for the duration of the contract and for 5 years thereafter, in accordance with Romanian accounting and fiscal law.
1.2 Website analytics — Google Analytics 4
With your consent, we use Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). GA4 collects:
- pages visited, time spent, and navigation paths
- approximate geographic location (country/city level, derived from anonymised IP)
- device type, browser, and operating system
- referral source (how you arrived at our site)
GA4 does not collect your name, email address, or any directly identifying information. IP addresses are anonymised before being processed by Google.
Legal basis: your consent, given via our cookie consent banner (Art. 6(1)(a) GDPR and Law no. 506/2004).
You may withdraw consent at any time by adjusting your cookie preferences via the cookie settings link in our website footer. You may also opt out of GA4 tracking globally by installing the .
Data is retained in GA4 for 14 months, after which it is automatically deleted.
1.3 Meta Pixel (Facebook / Instagram)
With your consent, we use the Meta Pixel, a tracking tool provided by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland (“Meta”). The Pixel collects:
- pages visited on our website
- actions taken (e.g. form submission)
- browser and device information
- a hashed identifier if you are logged into a Meta product in the same browser session
This data is used to measure the effectiveness of any advertising we may run on Meta platforms and to allow Meta to show our ads to relevant audiences.
Legal basis: your consent, given via our cookie consent banner (Art. 6(1)(a) GDPR and Law no. 506/2004).
You may withdraw consent at any time via our cookie settings. You can also manage your ad preferences directly through or opt out of interest-based advertising via .
II. Cookies
We use the following cookies on our website:
| Cookie | Provider | Type | Purpose | Duration |
|---|---|---|---|---|
_ga |
Analytics | Distinguishes unique users | 2 years | |
_ga_* |
Analytics | Maintains session state for GA4 | 2 years | |
_fbp |
Meta | Marketing | Identifies browsers for Meta ad measurement | 3 months |
_fbc |
Meta | Marketing | Stores click identifier from Meta ads | 3 months |
| Cookie consent preference | Us | Functional | Remembers your cookie consent choice | 12 months |
Analytics and marketing cookies are only placed after you give consent via our cookie banner. Functional cookies are strictly necessary and do not require consent.
You can manage or withdraw your cookie preferences at any time using the cookie settings link in the footer of our website. You may also control cookies through your browser settings; note that disabling all cookies may affect website functionality.
III. Data Transfers Outside the European Union
Our website is hosted by Netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany — within the European Union. No personal data collected via the contact form is transferred outside the EU in connection with hosting.
However, both Google and Meta may transfer data to the United States and other countries. These transfers are conducted under the EU–US Data Privacy Framework and, where applicable, Standard Contractual Clauses (SCCs) approved by the European Commission, providing appropriate safeguards for your personal data.
For further detail on these transfers:
- Google:
- Meta:
IV. Data Sharing and Third Parties
We do not sell, rent, or trade your personal data. We share data only with:
- Google Ireland Ltd — analytics data, as described in Section I.2
- Meta Platforms Ireland Ltd — pixel data, as described in Section I.3
- Public authorities — where required by law, court order, or regulatory obligation
We have no subcontractors or freelancers who process personal data on our behalf.
V. Future Email Marketing
We do not currently send marketing emails. If we introduce email marketing in the future, we will update this Privacy Policy and obtain your explicit consent before adding you to any mailing list, in accordance with Art. 6(1)(a) GDPR. You will always be able to unsubscribe.
VI. Your Rights
Under GDPR, you have the following rights regarding your personal data:
| Right | What it means |
|---|---|
| Access (Art. 15) | Request a copy of the personal data we hold about you |
| Rectification (Art. 16) | Ask us to correct inaccurate or incomplete data |
| Erasure (Art. 17) | Request deletion of your data where no legal basis for retention remains |
| Restriction (Art. 18) | Ask us to limit processing in certain circumstances |
| Objection (Art. 21) | Object to processing based on legitimate interest |
| Data portability (Art. 20) | Receive your data in a structured, machine-readable format |
| Withdraw consent (Art. 7(3)) | Withdraw consent at any time without affecting prior processing |
To exercise any of these rights, contact us at . We will respond within 30 calendar days. We may ask you to verify your identity before processing the request.
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Romanian supervisory authority:
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
B-dul G-ral Gheorghe Magheru 28–30, sector 1, București
VII. Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These include encrypted connections (HTTPS/TLS), access controls, and regular security reviews. Our website is hosted on infrastructure provided by Netcup GmbH in Germany, which operates to EU security standards.
No method of transmission over the internet is 100% secure. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the ANSPDCP within 72 hours and, where required, inform affected individuals without undue delay.
VIII. Children
Our website and services are directed exclusively at business clients. We do not knowingly collect personal data from individuals under the age of 16. If you believe a minor has submitted data to us, please contact us at and we will delete it promptly.
IX. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. When we do, we will update the “Last updated” date at the top. We encourage you to review this page periodically. Material changes will be communicated via a notice on our website.
X. Contact
For any questions, requests, or concerns regarding this Privacy Policy or the processing of your personal data:
TOGAETHER SRL
Str. Cluj nr. 7, Et. 1, Timișoara, jud. Timiș, 300576, România
