Privacy Policy

1. Who is the data controller

The controller is AZUVIO SRL (brand: CRMconnect), registered office at Str. Salcâmilor nr. 26, sector 2, București 020722, România, VAT 51482770, Trade Register no. J2025019930005.

• General e-mail: hello@crmconnect.ro
• Data protection contact (DPO) / GDPR requests: gdpr@crmconnect.ro
• Phone: +40 749 997 699

For data our customers upload into the platform (invoices, orders, partners, employees), CRMconnect acts as a processor and the customer is the controller. In that case the signed Data Processing Agreement (DPA) applies.

2. What data we collect

• Identification and contact data: name, job title, company, business e-mail, phone - provided voluntarily via contact, quote, demo, newsletter or ROI calculator forms.
• Commercial interaction data: your message, the pages that triggered interest, lead source, communication history with our sales team.
• Technical data: IP address (truncated by GA4), device and browser type, operating system, pages visited, visit duration, referrer - collected only with analytics consent.
• Account data (authenticated areas): e-mail, role, access logs, interface preferences.
• Billing data (customers): company name, VAT ID, address, representative, payment details.

We do not intentionally collect special categories of data (health, political opinions, biometrics) - please do not submit them through free-text fields.

3. Purposes and legal bases

4. Who we share data with

We never sell personal data. We share it only with vendors that help us run the service, under processing agreements:

• Google Ireland Ltd. - Google Analytics 4 (traffic analytics, consent only).
• Cloud infrastructure providers (AWS / Microsoft Azure) - EU hosting.
• Supabase - database, authentication and server functions for the site and platform.
• Transactional and marketing e-mail providers, to deliver requested messages.
• Public authorities, only where legally required.

Transfers outside the EEA only occur to vendors applying the European Commission's Standard Contractual Clauses plus supplementary security measures.

5. Data security

• Encryption in transit (TLS 1.2+) and encryption at rest for databases.
• Single-tenant pod isolation for platform customers.
• Role-based access control, authentication for internal areas, access logging.
• Retention policies and scheduled deletion for data no longer needed.

6. Your rights

• Right of access to your data and a copy of it.
• Right to rectification of inaccurate data.
• Right to erasure ("right to be forgotten").
• Right to restriction of processing.
• Right to data portability in a structured format.
• Right to object to processing based on legitimate interest and to direct marketing.
• Right to withdraw consent at any time, without affecting prior lawful processing.
• Right not to be subject to solely automated decisions with significant effects.

Exercise your rights by writing to gdpr@crmconnect.ro. We reply within 30 days. You may also lodge a complaint with the Romanian Data Protection Authority (ANSPDCP), 28-30 G-ral. Gheorghe Magheru Blvd., Bucharest, anspdcp.ro.

7. Changes to this policy

We may update this policy to reflect legal or product changes. The version in force is the one published on this page, with the last-updated date shown above.