Privacy Policy

Version: 1.0
Effective date: 19 June 2025
Controller: SYNC IT SRL

1. Controller Identity

Your personal data is processed by:

Company name: SYNC IT SRL
Tax ID (CUI): 48269233
Trade Register No.: J2023010320401
EUID: ROONRC.J2023010320401
Registered address: Str. Jean Louis Calderon 70, 4th Floor, Sector 2, Bucharest, Romania
Date of incorporation: 6 June 2023

We will be referred to as "Sync", "we", or "the controller" throughout this document.

2. Data We Collect and Purposes of Processing

2.1. Contact Form (Lead Generation)

When you complete the contact form on our website, we collect:

First and last name
Email address
Phone number (optional)
Company name (optional)
Your message

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures at the data subject's request) and/or Art. 6(1)(f) GDPR (our legitimate interest in responding to business inquiries).

Data is retained for a maximum of 3 years from the last interaction, after which it is deleted or anonymized.

2.2. Job Application Form

When you apply for an open position, we collect:

First and last name
Email address
Phone number
CV and cover letter (if provided)
Any other data you choose to include in your application

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and, where applicable, Art. 6(1)(a) GDPR (your consent).

Data of unsuccessful candidates is retained for a maximum of 6 months from the close of the recruitment process, unless you have given explicit consent for us to retain it longer for future opportunities.

2.3. Team Photos

The website includes photographs of Sync team members. These are published with the explicit consent of the individuals concerned. If you are a team member and wish to have your image removed, please contact us at the address provided in Section 8.

2.4. Technical Data Collected Automatically

When you visit the website, our systems may automatically collect:

IP address
Browser type and version
Pages visited and time spent
Traffic source

This data is used solely for statistical purposes and to improve site performance, on the basis of our legitimate interest (Art. 6(1)(f) GDPR).

3. Recipients of Data

Your data may be accessed by:

Sync employees and collaborators involved in communications and recruitment
Technical service providers (hosting, email, CRM) bound by data processing agreements under Art. 28 GDPR
Public authorities, where required by law

We do not sell, rent, or trade your data to third parties for marketing purposes.

4. International Transfers

Where our technical providers process data outside the European Economic Area, we ensure transfers take place with appropriate safeguards under GDPR, including Standard Contractual Clauses approved by the European Commission.

5. Your Rights

Under GDPR, you have the following rights:

Right of access: you may request a copy of the data we hold about you.
Right to rectification: you may request correction of inaccurate or incomplete data.
Right to erasure ("right to be forgotten"): you may request deletion of your data, except where processing is legally required.
Right to restriction: you may request that processing be limited in certain circumstances.
Right to data portability: you may request your data in a structured, machine-readable format.
Right to object: you may object to processing based on our legitimate interest.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us using the details in Section 8. We will respond within 30 days.

You also have the right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP): www.dataprotection.ro.

6. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or destruction, including HTTPS connections and internal access controls.

7. Cookies

The website may use technically necessary cookies. Any analytical or marketing cookies will only be used with your prior consent, collected via a cookie banner. You can manage cookie preferences through your browser settings.

8. Contact

For any questions or requests regarding the processing of your personal data:

SYNC IT SRL
Address: Str. Jean Louis Calderon 70, 4th Floor, Sector 2, Bucharest
Email: [Sync contact email]

9. Changes to This Policy

We reserve the right to update this Privacy Policy. The updated version will be published on the website with the effective date noted. We encourage you to check this page periodically.