Privacy Policy

Last updated: June 2026

This policy explains what information we collect when you use rostartups.ro, how we use it, and your rights under the General Data Protection Regulation (GDPR). We are an EU operator and your data stays within the EU.

1. Who is responsible for your data

Information Technology Banat Computing Group SRL
CUI 34563165 · Romania
Contact: contact@rostartups.ro

2. What we collect and why

When you submit a startup to the map, we collect the following information about the company:

Data	Required	Purpose
Startup name	Yes	Displayed on the map
City	Yes	Places the startup on the correct city
Logo (image)	Yes	Displayed alongside the listing
Website URL	No	Linked from the listing
Sector / category	No	Used for filtering on the map

We do not collect your name, email address, or any other personal contact information through the submission form.

Legal basis: Legitimate interest (Article 6(1)(f) GDPR) — displaying publicly available business information on a community directory.

3. Server and access logs

Our hosting provider (Netlify) and CDN/DNS provider (Cloudflare) may automatically log technical data such as IP addresses, browser type, and pages visited. This data is used solely for security and performance purposes and is governed by their respective privacy policies. We do not access or analyse this data for marketing.

4. Cookies and tracking

We do not use analytics trackers, advertising cookies, or any third-party tracking scripts. Cloudflare may set a technical cookie (__cf_bm) for bot management — this is strictly functional and not used for profiling.

5. Where your data is stored

Submitted startup data is stored in Supabase (Frankfurt, Germany) — within the EU. Logo images are stored in Supabase Storage, also in Frankfurt. Your data does not leave the European Union.

6. Data processors

Processor	Role	Location
Supabase	Database and file storage	Frankfurt, EU
Netlify	Website hosting	US (SCCs apply)
Cloudflare	DNS, CDN, email routing	US (SCCs apply)

7. How long we keep your data

Startup listings are kept on the map indefinitely unless you request removal. To remove your listing, email contact@rostartups.ro and we will delete it within 5 business days.

8. Your rights under GDPR

As a data subject you have the right to:

Access — request a copy of the data we hold about your startup.
Rectification — ask us to correct inaccurate information.
Erasure — request deletion of your listing and associated data.
Object — object to processing based on legitimate interest.
Portability — request your data in a structured, machine-readable format.

To exercise any of these rights, contact us at contact@rostartups.ro. We will respond within 30 days.

9. Supervisory authority

If you believe we are processing your data unlawfully, you have the right to lodge a complaint with the Romanian data protection authority:

ANSPDCP — Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal
www.dataprotection.ro

10. Changes to this policy

We may update this policy as the platform evolves. Material changes will be noted with an updated date above.