Privacy Policy

ITIS-Secure ("we", "us", or "our"), operated by Information Security Consulting SRL, collects personal data to provide our consulting and audit-preparation services. This includes:

• Identity Data: Name, company role, and professional credentials.
• Contact Data: Business email address, phone number, and office location.
• Technical Data: IP address, browser type, and usage patterns on our website.
• Project Data: Compliance objectives (e.g., TISAX® AL3 readiness) and organizational security posture information shared during consultations.

We process your data under the following legal bases defined by the General Data Protection Regulation (GDPR):

• Contractual Necessity: To fulfill our service agreements.
• Legitimate Interest: To improve our security methodologies and respond to project inquiries.
• Compliance: To meet legal and regulatory obligations within the EU.
• Consent: For specific marketing communications where explicitly granted.

We implement industry-leading technical and organizational measures to protect your information. Personal data is retained only for as long as necessary to fulfill the purposes outlined or as required by Romanian statutory retention periods (typically 10 years for financial/contractual records).

Under GDPR, you have the right to access, rectify, or erase your personal data. You also have the right to object to processing and the right to data portability.

To exercise these rights, or if you have any concerns, please contact our Data Protection lead at office@itis-secure.com.

If you believe we have infringed your rights, you have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP).

ANSPDCP Contact: www.dataprotection.ro

For any privacy-related inquiries:

Information Security Consulting SRL
Str. Liliacului nr 2, Cisnadie, Sibiu, Romania
Email: office@itis-secure.com