Privacy
policy.

This policy explains which personal data TRU Solutions SRL processes through the tru.ro website and its contact channels, why we process it, how long we keep it and what rights you have.

Who we are

The data controller is TRU Solutions SRL, tax ID RO45408310, registered with the Romanian Trade Register under no. J40/22643/2021, with its registered office at 31 Emanoil Porumbaru Street, office 10, District 1, Bucharest, postcode 011422, Romania. For any question or request about your data, write to us at [email protected].

Which data we process

• The contact form and the form under the NIS2 calculator: your name, company, email address, phone number if you provide it, the interest you choose and your message. For the calculator, the message contains a summary of the result: the assurance level, the estimated score and the scores by function.
• Your answers in the NIS2 calculator stay in your browser. They reach us only if you send the form under the result.
• WhatsApp messages, calls and emails you send us directly.
• Website usage data, through Google Analytics 4 and Google Ads measurement, only if you accept them. The details are on the Traffic analytics page.
• Technical data needed to run and secure the website, such as your IP address and browser information, processed by Cloudflare to deliver the pages and for the anti-bot check on the forms.

Why, and on what legal basis

• To reply to you and prepare a quote: steps taken at your request before a contract, under Article 6(1)(b) of Regulation (EU) 2016/679 (GDPR).
• Visit statistics and advertising measurement: your consent, under Article 6(1)(a). You can withdraw it at any time from “Cookie preferences” at the bottom of the page.
• Website security and protecting the forms against abuse: our legitimate interest.
• Legal obligations, such as accounting, if you become a client.

We do not make automated decisions with legal effects on you and we do not sell personal data.

Who receives the data

We work with providers that process data on our behalf:

• Proton AG, Switzerland: email, including messages sent from the forms;
• Cloudflare: website hosting and the anti-bot check on the forms;
• Google: Google Analytics 4 and Google Ads, only with your consent;
• Meta Platforms, through WhatsApp Business, if you write to us on WhatsApp.

Switzerland benefits from an adequacy decision of the European Commission. For providers in the United States, transfers rely on the EU–US Data Privacy Framework or on standard contractual clauses. DNSC-certified auditors who are TRU partners receive your data only if you ask us to put you in touch with them.

How long we keep the data

• Data from forms, emails and conversations: 24 months from the last contact, after which we delete it.
• Analytics data: according to the retention setting in Google Analytics, at most 14 months.
• Accounting documents, if you become a client: as long as the law requires.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw your consent. Write to us at [email protected] and we will reply within one month.

You can lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing, dataprotection.ro.

Changes

When this policy changes, we update the date at the top of the page.