Privacy Policy | RoIntelliA®

This policy explains what personal data RoIntelliA collects through rointellia.com, why, on what legal basis, who we share it with, and the rights you have — under the EU GDPR, the UK GDPR & Data Protection Act 2018, and the Swiss Federal Act on Data Protection (nFADP).

1. Who we are (data controller)

Operator: RoIntelliA SRL
Fiscal code (RO): CUI 52454425
EU / VIES ID: RO54069817 — intra-community operator; not VAT-registered (special regime, Art. 317 Romanian Fiscal Code)
Trademark: RoIntelliA® — registered at EUIPO, valid across all EU member states
Country: Romania (EU)
Contact: office@rointellia.ro

For any question about your personal data or to exercise your rights, contact us at office@rointellia.ro.

2. What data we collect and why

We only collect what we need. Depending on how you use the site:

Context	Data	Purpose	Legal basis
Contact form / quote requests	Name, email, company (optional), message	To reply and prepare a proposal	Pre-contractual steps at your request — GDPR Art. 6(1)(b)
RIA assistant	The text you type, plus any name, phone, email you choose to share	To help shape your project and route your request to our team	Consent & pre-contractual steps — Art. 6(1)(a)/(b)
Contract & billing (clients)	Contact and company/fiscal details	To deliver services and meet legal/accounting duties	Contract & legal obligation — Art. 6(1)(b)/(c)
Analytics (only if you consent)	Usage statistics, approximate location, device/browser	To understand usage and improve the site	Consent — Art. 6(1)(a)
Technical / security	IP address, server logs	Security, abuse prevention, delivering the page	Legitimate interest — Art. 6(1)(f)

3. The RIA AI assistant — important

Our on-site assistant "RIA" uses a third-party AI provider, Anthropic PBC (the Claude API), to generate replies. When you chat with RIA, the text of your conversation is transmitted to Anthropic solely to produce a response.

In this processing, RoIntelliA is the controller and Anthropic acts as a processor on our behalf, under a data-processing agreement.
Anthropic processes data in the United States. This is an international transfer, safeguarded by the European Commission's Standard Contractual Clauses and Anthropic's DPA. Anthropic states it does not train its models on API-submitted data by default.
Please do not enter sensitive personal data (health, political, religious, financial account numbers, etc.) into the assistant. Share only what's needed to describe your project.

4. Cookies and similar technologies

We set strictly necessary cookies (including your consent choice) without asking. Analytics or marketing cookies are set only with your consent, which you can give, refuse or withdraw at any time via the cookie banner or the "Cookie settings" link in the footer. Full details in our Cookie Policy.

Fonts are self-hosted on our own server — we do not load fonts from Google, so your IP address is not shared with Google for fonts.

5. Who we share data with (recipients & processors)

Anthropic PBC (USA) — AI processing for the RIA assistant (see §3).
Our hosting provider (EU) — stores the site and receives form submissions and email.
Google (Analytics) — only if you consent to analytics cookies; involves a transfer to the USA under the EU-U.S. Data Privacy Framework / SCCs.
Authorities — only where legally required.

We never sell your personal data.

6. International transfers

Where data leaves the EU/EEA, UK or Switzerland (e.g. to Anthropic or Google in the USA), we rely on adequacy decisions where available and on the European Commission's Standard Contractual Clauses (with the UK Addendum and the Swiss adaptations) as appropriate.

7. How long we keep data

Enquiries and RIA conversations: kept as long as needed to handle your request and for reasonable business follow-up, then deleted. Contract and accounting records: kept for the periods required by Romanian law. Consent logs: kept as proof for as long as the consent is relevant.

8. Your rights

Under the GDPR (and equivalently under UK GDPR and the Swiss nFADP), you have the right to: access your data; rectify it; erase it; restrict or object to processing; data portability; and to withdraw consent at any time without affecting prior processing. To exercise any of these, email office@rointellia.ro.

Supervisory authorities — where to complain

EU / Romania: National Supervisory Authority for Personal Data Processing (ANSPDCP) — dataprotection.ro, or your local EU authority.
United Kingdom: Information Commissioner's Office (ICO) — ico.org.uk.
Switzerland: Federal Data Protection and Information Commissioner (FDPIC) — edoeb.admin.ch.

9. Children

This site targets businesses and is not directed at children. We do not knowingly collect data from minors.

10. Changes

We may update this policy; the version and date at the top always reflect the current text. Material changes will be signalled on the site.