Privacy policy

Protecting personal data is a real responsibility for us, not a formality. This page explains what data we may process when you interact with Innovativa, why we process it, the legal basis we rely on, and the rights you have.

1. Data controller

The data controller is Innovativa, the administrator of innovativa.ro. For any request related to personal data protection, you can contact us at [email protected] or by phone at 0724 504 161.

2. What data we may collect

  • identification and contact data: name, surname, email address, phone number;
  • information you voluntarily send through forms, email, phone, or WhatsApp;
  • project details: company, objectives, indicative budget, requested services, files, or materials sent to us;
  • technical and usage data: IP address, browser, device, accessed pages, traffic source, cookies, and analytics events;
  • data required for quotes, contracts, invoicing, or support.

3. Why we use the data

  • to respond to requests sent through the website, email, phone, or WhatsApp;
  • to prepare quotes, commercial proposals, and contractual documents;
  • to deliver contracted services and post-launch support;
  • to administer the website, maintain security, and prevent abuse;
  • to measure, analyze, and improve the website experience;
  • to send commercial communications only when we have an appropriate legal basis.

4. Legal basis for processing

  • performance of a contract or pre-contractual steps, when you request a quote or we work on your project;
  • legitimate interest, for website administration, security, analytics, and service improvement;
  • consent, where required, especially for non-essential cookies and certain marketing communications;
  • legal obligation, when we must keep certain documents or provide information to competent authorities.

5. Google Ads service processing

For clients who authorize us to manage or optimize Google Ads campaigns, we may process data associated with the relevant accounts and campaigns, including through the Google Ads API.

Data processed in this context

  • performance metrics: impressions, clicks, cost, conversions, conversion value;
  • account and campaign identifiers;
  • operational settings: budgets, bids, negative keyword lists, and technical recommendations.

We do not collect personal data about our clients' end users through the Google Ads API. We do not store Google passwords; account access is handled through secure mechanisms such as OAuth. We use this data for reporting, monitoring, alerts, and optimization proposals. Sensitive changes are made only with the client's agreement or within the contractual mandate.

Aggregated performance data may generally be kept for up to 24 months, unless legislation or the contractual relationship requires another retention period.

6. Who may receive the data

Depending on the nature of the project, we may share data with hosting, email, maintenance, security, and analytics providers; advertising and analytics platforms such as Google or Meta, when the contracted services require them; partners and processors directly involved in service delivery; accounting, payment processors, and consultants; or public authorities when we have a legal obligation.

7. International transfers

Certain digital services used by us or by our clients may involve transfers of data outside the European Economic Area. In such cases, where necessary, we use appropriate safeguards such as standard contractual clauses or other mechanisms recognized by applicable law.

8. How long we keep the data

We keep data only for as long as necessary for the purpose for which it was collected. The period may vary depending on the request, the commercial relationship, accounting obligations, or the need to defend a legitimate right.

9. Your GDPR rights

Under the conditions provided by GDPR, you may request access to your processed data, rectification or completion of inaccurate data, deletion where there is a legal basis, restriction of processing, data portability, objection to processing including direct marketing, withdrawal of consent when processing is based on consent, and the right to lodge a complaint with ANSPDCP.

10. Cookies and similar technologies

For complete information about the cookies used by the website and how they can be managed, see our Cookie policy.

11. Security measures

We apply reasonable technical and organizational measures to protect data against unauthorized access, loss, destruction, or misuse. However, no transmission over the internet can be guaranteed as completely risk-free.

12. Contact and supervisory authority

For any request related to your data, write to us at [email protected]. If you believe your rights have been violated, you may lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP).