Privacy Policy

VLADROM INTERNATIONAL SRL, headquartered in Buzău, România, is the controller of your personal data. We are responsible for how your data is collected and processed. Registered office: Buzău, România Email: office@vladrom.ro Phone: +40 728 886 935

We collect the following types of personal data: • Identification data: name, email address, phone number • Professional data: CVs, cover letters, work experience • Technical data: IP address, browser type, browsing data • Consent data: records of consents given • Communication data: messages sent via the contact form • Cookie preferences: your cookie consent choices

We process your data based on the following legal grounds: • Your explicit consent (Art. 6(1)(a) GDPR) • Performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR) • Compliance with legal obligations (Art. 6(1)(c) GDPR) • Our legitimate interests in conducting business (Art. 6(1)(f) GDPR)

We retain your personal data for the following periods: • Contact form messages: 2 years, then anonymized • Newsletter subscriptions: until unsubscription + 30 days • Job applications and CVs: 1 year after submission, then deleted • Admin sessions: deleted on expiry (24 hours) • Chat conversations: not stored (processed in-memory only) • GDPR requests: 5 years for compliance records • Cookie consent records: 5 years for audit purposes After the retention period, data is either securely deleted or anonymized.

We do not sell or rent your personal data. We may share data with: • Service providers who help us operate the platform • Competent authorities when required by law • Business partners, only with your consent

Some of your data may be transferred outside the European Economic Area (EEA): • OpenAI (United States) — for the AI chat assistant and blog content translation. Safeguard: Standard Contractual Clauses (SCCs) and EU-US Data Privacy Framework. • Google Cloud Storage (United States/EU) — for file uploads (CVs, documents). Safeguard: Adequacy decision and Standard Contractual Clauses. We ensure that all international transfers are carried out with appropriate safeguards in accordance with GDPR Chapter V.

Our website uses an AI-powered chat assistant (based on OpenAI technology) that processes your messages to provide information about our services. This automated processing: • Does not make decisions with legal or significant effects on you • Is used solely for informational assistance • Does not profile users or create automated decision-making processes • Chat messages are not stored after your session ends You have the right to request human review of any automated interaction by contacting us directly.

We implement appropriate technical and organizational measures to protect your data: • Encryption in transit (TLS/SSL) and at rest • Access limited to authorized personnel with role-based controls • Regular security monitoring and audits • Backup and recovery procedures • Rate limiting to prevent abuse • Secure session management with cryptographic tokens

Under GDPR, you have the following rights: • Right of access (Art. 15): to request a copy of your data • Right to rectification (Art. 16): to correct inaccurate data • Right to erasure (Art. 17): to request deletion of your data • Right to restriction (Art. 18): to limit processing • Right to portability (Art. 20): to receive data in a structured format • Right to object (Art. 21): to object to processing • Right to withdraw consent: at any time, without affecting prior processing To exercise any of these rights, contact us at office@vladrom.ro or use the GDPR request form on our website.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Romanian supervisory authority: ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal) Address: B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 București, România Website: www.dataprotection.ro Email: anspdcp@dataprotection.ro