Privacy Policy

Innen Support S.R.L. (“Innen Support”, “we”, “us”, “our”) respects privacy and is committed to protecting personal data. This Privacy Policy explains how personal data is collected and processed through our informational corporate website and through communications connected with our B2B activities.

Important: This website is not an online shop. It does not provide online ordering, payment, delivery or consumer purchasing functionality. Where Innen Support processes personal data strictly on behalf of a client, Innen Support may act as a data processor under the client’s documented instructions and a separate Data Processing Agreement (DPA).

1. Data controller

INNEN SUPPORT S.R.L.
Registered office: Strada Brândușelor nr. 18, Sat Berceni, Comuna Berceni, Județul Ilfov, România
CUI: 49292293
Trade Register No.: J2023008461235
Email: contact@innensupport.ro
Telephone: +40 757 655 857
Website: innensupport.ro

For privacy questions or data-subject requests, please use the email address above. If a Data Protection Officer is required by applicable law, relevant details will be published here.

2. Who this policy applies to

• Website visitors and users.
• People who contact us by email, telephone or website forms.
• Representatives of current or potential clients, suppliers and business partners.
• People who request information, proposals or meetings.
• Candidates who submit CVs or recruitment information, where recruitment functionality is offered.
• People whose professional contact information is processed in connection with legitimate B2B prospecting, where permitted by applicable law.

3. Personal data we may process

• Identification and professional information: name, job title, company, department and country.
• Business contact details: business email, business telephone number and business address.
• Business enquiry information: requirements, correspondence, requested services and information included in proposals or enquiries.
• Recruitment information: CV, experience, qualifications, certifications, languages and information provided during recruitment.
• Technical information: IP address, browser, device, operating system, language, approximate location, referring URL, pages visited, access times, logs and cookie preferences, depending on the technologies used.

4. Sources of personal data

We may receive personal data directly from you, through our website, by email or telephone, during meetings, from clients or business partners where necessary, from recruitment platforms, and from publicly available professional sources such as company websites, professional networking platforms and business directories, where lawful and proportionate.

5. Purposes and legal bases

Purpose	Typical legal basis
Responding to enquiries, arranging meetings and preparing proposals	Art. 6(1)(b) GDPR and/or Art. 6(1)(f) GDPR
Managing client, supplier and partner relationships	Contract, legal obligation and/or legitimate interests
Providing services to clients	Contract and, where applicable, processing on behalf of the client under Art. 28 GDPR
Website security and technical operation	Art. 6(1)(f) GDPR and applicable legal obligations
Recruitment	Pre-contractual steps, legitimate interests, legal obligations and/or consent where required
Direct marketing / business communications	Consent where required and/or legitimate interests where lawful
Legal claims, compliance and record keeping	Legal obligation and/or legitimate interests

6. Legitimate interests

Where we rely on legitimate interests, these may include operating and improving our business, communicating with professional contacts, managing B2B relationships, securing systems, preventing fraud and abuse, protecting legal rights and conducting proportionate B2B prospecting.

7. Recipients and service providers

• Authorised Innen Support personnel.
• Website hosting, cloud, IT, cybersecurity and communication providers.
• CRM, email and business management providers, where used.
• Analytics and consent-management providers, where used and lawfully activated.
• Professional advisers, accountants, auditors and lawyers.
• Authorities or other recipients where disclosure is required by law.

8. International transfers

Because Innen Support operates internationally and may use global technology providers, data may in certain circumstances be processed outside Romania or the EEA. Where GDPR applies, we will use an appropriate transfer mechanism, such as an adequacy decision or Standard Contractual Clauses, where required.

9. Data retention

Personal data is retained only for as long as reasonably necessary for the relevant purpose, taking account of contractual, accounting, tax, legal and limitation-period requirements. When no longer required, data is securely deleted, anonymised or otherwise disposed of.

10. Your rights

• Access your personal data.
• Request correction or completion of inaccurate or incomplete data.
• Request deletion, subject to legal exceptions.
• Request restriction of processing.
• Object to processing based on legitimate interests.
• Object to direct marketing at any time.
• Request portability where applicable.
• Withdraw consent where consent is the legal basis.
• Lodge a complaint with a competent supervisory authority.

Requests may be sent to contact@innensupport.ro. We may need to verify identity before responding to certain requests. See also Privacy Requests & Data Subject Rights.

11. Automated decision-making

We do not intend to make decisions producing legal or similarly significant effects about website visitors solely through automated processing. If this changes, appropriate information will be provided as required by law.

12. Children

The website is intended primarily for businesses, professionals and organisations. We do not knowingly seek to collect children’s personal data for business or marketing purposes.

13. Security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss and destruction. No internet transmission or storage system can be guaranteed completely secure.

14. Personal data breaches

Where required by law, Innen Support will assess and manage personal data breaches and make notifications to authorities and/or affected individuals within the applicable legal timeframes. Where Innen Support acts as a processor, it will notify the relevant client in accordance with the applicable DPA and law.

15. Third-party websites

Our website may contain links to third-party websites. We are not responsible for their privacy practices, security or content.

16. Cookies

Cookies and similar technologies are described in our separate Cookie Policy. Non-essential technologies will be activated only where the required consent has been obtained.

17. Supervisory authority

In Romania, the competent supervisory authority is the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP). Individuals may also have rights to contact another competent EU supervisory authority where permitted by applicable law.

18. Changes to this policy

We may update this Privacy Policy to reflect changes in our business, website, technologies or applicable law. The latest version will be published on the website.

19. Contact

INNEN SUPPORT S.R.L.
Registered office: Strada Brândușelor nr. 18, Sat Berceni, Comuna Berceni, Județul Ilfov, România
CUI: 49292293
Trade Register No.: J2023008461235
Email: contact@innensupport.ro
Telephone: +40 757 655 857
Website: innensupport.ro