Privacy Policy
Privacy and Cookie Policy
Full information on the processing of personal data in accordance with Article 13 of Regulation (EU) 2016/679 (GDPR) and Law no. 506/2004.
The controller processing your personal data through the website www.mobiussoftware.ro is:
MOBIUS SOFTWARE S.R.L., a Romanian legal entity, with its registered office in Bucharest, Sector 5, 24 Mihail Sebastian St., Postal code 050784, registered with the Trade Register Office under no. J40/5272/2004 (EUID: ROONRC.J2004005272400), with Tax Identification Number (CUI/CIF) 16296426.
Contact details for data protection (GDPR): Email: office@mobiussoftware.ro · Phone: +40 722 377 877.
2. What categories of personal data we collect
We collect only the data strictly necessary for professional communication with our customers, partners and visitors, and for the secure operation of the site:
- Data provided directly by you through the contact form or by email/phone: first and last name, email address, phone number (optional), the name of the organization/institution you represent, the subject and content of the message sent.
- Technical connection and security data collected automatically by the web server when pages are accessed: IP address, date and time of access, browser type and operating system, URL of the requested page and technical session / anti-CSRF protection identifiers.
3. Purposes and legal bases of processing (Art. 6 GDPR)
| Purpose of processing | Data categories | Legal basis (Art. 6(1) GDPR) | Storage period (retention) |
|---|---|---|---|
| Receiving and handling requests for information, demo presentations or commercial offers sent through the contact form or email | Name, email, phone, organization, message | Art. 6(1)(b) (steps taken at the request of the data subject prior to entering into a contract) and (a) (consent given when submitting the form) | Maximum 24 months from the last correspondence, if no contract is concluded |
| Performance of licensing, implementation, maintenance and technical support contracts (including through the portal tichete.egdpr.ro) | Data of the legal representatives and contact persons designated by the customer | Art. 6(1)(b) (performance of a contract) and (c) (legal financial and accounting obligations) | For the duration of the contract + statutory archiving periods (5–10 years under tax legislation) |
| Ensuring the cybersecurity of the site, preventing abuse, CSRF / brute-force attacks and technical diagnostics | IP address, server logs, technical security cookies | Art. 6(1)(f) (the Controller's legitimate interest in protecting its IT infrastructure) | Cookies: for the duration of the session; Server security logs: maximum 90 days |
4. Data recipients and international transfers
MOBIUS SOFTWARE S.R.L. does not sell, rent or assign your personal data to third parties for marketing purposes.
- The data is processed internally by the authorized staff of Mobius Software S.R.L., who are bound by strict confidentiality obligations.
- To the extent strictly necessary, the data may be accessed by IT and hosting service providers acting as processors under Article 28 GDPR, exclusively within Romania / the European Economic Area (EEA), or by competent public authorities on the basis of a legal obligation.
- The site does not load advertising tracking scripts and does not transfer personal data outside the European Economic Area.
5. Policy on the use of Cookie modules
The site www.mobiussoftware.ro uses only technical, strictly necessary cookie modules for the correct and secure operation of the web platform (Oqtane / ASP.NET Core). These cookies do not collect information for advertising profiling and are not shared with third-party advertising networks.
| Cookie Name | Provider | Type / Category | Technical purpose | Lifetime |
|---|---|---|---|---|
X-XSRF-TOKEN-COOKIE |
www.mobiussoftware.ro (First-party) | Strictly necessary (Security) | Protects forms and the session against Cross-Site Request Forgery (CSRF) attacks. Marked HttpOnly and Secure. |
Session (deleted when the browser is closed) |
.AspNetCore.Culture |
www.mobiussoftware.ro (First-party) | Strictly necessary (Functional) | Stores the display culture and language of the interface (English). | Session / up to 1 year |
APP_VISITOR_1 |
www.mobiussoftware.ro (First-party) | Strictly necessary (Technical) | An internal technical identifier of the Oqtane platform for correctly handling page requests, without tracking on other sites. Marked HttpOnly and Secure. |
Up to 30 days |
.AspNetCore.Identity.Application |
www.mobiussoftware.ro (First-party) | Strictly necessary (Authentication) | Set only for administrators logged in to the site's administration panel. | Session |
Note: Since only technical cookie modules strictly necessary for providing the service requested by the user are used (under the exception provided by Article 4(5) of Law no. 506/2004 and the ePrivacy Directive), placing them does not require prior consent, but you can always block or delete them in your browser settings.
6. Your rights under the GDPR (Art. 15–22)
As a data subject, you benefit from the following rights guaranteed by Regulation (EU) 2016/679:
- Right of access (Art. 15 GDPR): the right to obtain confirmation of the processing of data and a copy of it.
- Right to rectification (Art. 16 GDPR): the right to request correction of inaccurate data or completion of incomplete data.
- Right to erasure – “the right to be forgotten” (Art. 17 GDPR): the right to request erasure of data when it is no longer necessary or when you have withdrawn your consent.
- Right to restriction of processing (Art. 18 GDPR) and right to data portability (Art. 20 GDPR).
- Right to object (Art. 21 GDPR): the right to object at any time to processing based on the Controller's legitimate interest.
- The right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
To exercise these rights, you can send us a request to the email address office@mobiussoftware.ro or to our office in Bucharest, Sector 5, 24 Mihail Sebastian St. We will respond to your request within a maximum of 30 calendar days.
You also have the right to lodge a complaint with the competent supervisory authority in Romania:
National Supervisory Authority for Personal Data Processing (ANSPDCP)
Address: 28–30 Gheorghe Magheru Blvd., Sector 1, postal code 010336, Bucharest · Phone: +40.318.059.211 · Web: www.dataprotection.ro.