Legal
Privacy policy
Last updated: 20 August 2026
This policy explains how Prodigy collects, uses and protects personal data when you visit this website or contact us, and the rights you hold under the EU General Data Protection Regulation (GDPR).
1. Who we are
The data controller is Prodigy IT Solutions SRL, a company registered in Romania with its registered office at Str. Fabricii nr. 105, Birou 37, et. 2, Cluj-Napoca, Cluj, 400632, Romania. Trade register number J12/5334/2018, fiscal identification code RO39060890.
Full company identification is set out on the company information page.
The contact point for data protection enquiries is office@prodigy-it-solutions.com. Write to that address to ask what personal data we hold about you, to have it corrected or erased, or with any question about this policy.
2. What data we collect
We collect only what is necessary. Specifically:
- Contact form enquiries - the name, email address, and any organisation, country, area of interest and message content you choose to provide. The form on this site transmits nothing itself: it composes the enquiry in your own email application, so we receive it only if you choose to send it, and it reaches us as ordinary email.
- Direct correspondence - the content of emails or calls you initiate, and the contact details they contain.
- Technical server logs - our hosting provider records IP addresses, request times, requested pages and user-agent strings for security and reliability purposes.
We do not use advertising trackers, behavioural profiling, or third-party analytics that build a profile of you across websites. This site loads no third-party scripts, fonts or stylesheets: every asset is served from our own domain.
3. Why we process it, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Responding to your enquiry and any follow-up correspondence | Consent, and steps taken at your request prior to entering a contract (Art. 6(1)(a) and 6(1)(b) GDPR) |
| Maintaining a record of business enquiries and commercial relationships | Legitimate interests in operating and documenting our business (Art. 6(1)(f) GDPR) |
| Securing the website and preventing abuse | Legitimate interests in the security of our systems (Art. 6(1)(f) GDPR) |
| Meeting accounting, tax and other statutory obligations | Legal obligation (Art. 6(1)(c) GDPR) |
4. How long we keep it
Enquiries that do not lead to a commercial relationship are retained for up to 24 months and then deleted. Where an enquiry leads to a contract, the related records are kept for the duration of the relationship and for the statutory retention period afterwards. Server logs are retained for a short period by our hosting provider, in line with its own retention schedule.
5. Who else sees it
We do not sell personal data and we do not share it for marketing purposes. Data is disclosed only to:
- Our hosting provider, which serves this website and keeps the server logs described above. No form submissions pass through it, because the form does not submit to this site. [To be confirmed before launch: the provider's name and the location of its processing.]
- Our email provider, which carries the correspondence.
- Professional advisers and authorities, where we are legally required to disclose.
Where a provider processes data outside the European Economic Area, that transfer is covered by the European Commission's Standard Contractual Clauses or an equivalent safeguard.
6. Your rights
Under the GDPR you may ask us to:
- confirm whether we hold data about you, and give you a copy (access);
- correct data that is inaccurate or incomplete (rectification);
- delete data we no longer have grounds to keep (erasure);
- restrict how we use it, or object to processing based on legitimate interests;
- receive the data you gave us in a portable, machine-readable format;
- withdraw consent at any time, without affecting processing already carried out.
To exercise any of these, write to office@prodigy-it-solutions.com. We respond within one month.
If you believe we have handled your data improperly, you may complain to the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), at dataprotection.ro, or to the authority in your country of residence.
7. Security
The site is served exclusively over HTTPS. Access to enquiry data is limited to the people who need it to respond. We apply a strict content security policy that blocks third-party code from executing on these pages.
8. Children
This is a business-to-business website. It is not directed at children, and we do not knowingly collect data from anyone under 16.
9. Changes
If this policy changes materially, we will update the date at the top of this page and, where the change affects how we use data you have already given us, contact you directly.