Privacy Policy

The data controller responsible for this website is:

NAURAACT — Adina Popescu

Location: Romania

Email: office@nauraact.ro

We collect and process only the personal data that is necessary for the specific purposes outlined below:

• Contact form data: Name, email address, subject, and message content — submitted voluntarily when you contact us. This data is used solely to respond to your enquiry and is not stored in any database.
• Theme preference: Your light/dark mode preference is stored in your browser's localStorage. This is not personal data and is used purely for display preferences.
• Cookie consent preference: Your cookie category choices are stored in your browser's localStorage to remember your consent settings.
• Technical data: When you visit our website, your browser automatically transmits technical data (IP address, browser type, operating system, referrer URL) to our server and to the third-party CDNs that deliver our content. This data is used to display the website correctly and is not stored or analysed by us.

We process your personal data based on the following legal grounds under GDPR:

• Article 6(1)(b) — Contractual necessity: Processing contact form data to respond to your enquiry and provide the services you request.
• Article 6(1)(f) — Legitimate interests: Ensuring the security and functionality of our website, and communicating with you about our services.
• Article 6(1)(a) — Consent: Where you have given explicit consent (e.g., cookie preferences).

Your personal data is used exclusively for the following purposes:

• To respond to enquiries submitted through the contact form
• To provide executive search, recruitment, and career advisory services
• To maintain the security and functionality of the website
• To comply with legal obligations

We do not use your data for automated decision-making, profiling, or marketing purposes. We do not sell or share your personal data with third parties for commercial purposes.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Contact form submissions: Retained for up to 12 months from the last communication, after which they are deleted. If an engagement is formed, data is retained for the duration of the engagement plus any legally required period.
• Technical logs: Not retained by NAURAACT. Our hosting provider may retain server logs in accordance with their own policies.
• Browser preferences (localStorage): Retained until you clear your browser data.

We use the following third-party services to deliver content and functionality:

• Google Fonts — loads web fonts. Google's privacy policy applies: policies.google.com/privacy
• jsDelivr / cdnjs (Cloudflare) — deliver JavaScript libraries (Tailwind CSS, Alpine.js, anime.js). Cloudflare's privacy policy applies.

These services may process your IP address and technical browser data for the purpose of delivering content. We do not control this processing.

We implement appropriate technical and organisational measures to protect your personal data:

• Contact form submissions are protected by CSRF tokens to prevent cross-site request forgery
• All data transmissions use HTTPS encryption
• Access to personal data is restricted to the data controller only
• No databases are used; data is not stored on shared servers

You have the following rights regarding your personal data:

• Right of access — Request a copy of the personal data we hold about you
• Right to rectification — Request correction of inaccurate or incomplete data
• Right to erasure ('right to be forgotten') — Request deletion of your personal data
• Right to restrict processing — Request limitation of how we use your data
• Right to data portability — Receive your data in a structured, commonly used format
• Right to object — Object to processing based on legitimate interests
• Right to withdraw consent — Withdraw consent at any time (does not affect lawfulness of processing before withdrawal)

To exercise any of these rights, please contact us at office@nauraact.ro.

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the supervisory authority:

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

Email: office@nauraact.ro