1. Who we are
The controller of the personal data collected through this website is MAAS TECHNOLOGY SRL-D, a company registered in Romania.
| Name | MAAS TECHNOLOGY SRL-D |
|---|---|
| Registered office | Str. Gorjului no. 5A, postal code 200368, Craiova, Dolj County, Romania |
| Tax ID (CUI) | 47786576 |
| Unique Registration No. | J2023000577167 |
| office@maastechnology.ro | |
| Phone | 0040 770 559 851 |
For any question regarding the processing of your data, you can write to us at the address above.
2. What data we collect and why
2.1 Data submitted through the contact form
When you fill in the contact form, we collect the following data:
| Data | Required | Why |
|---|---|---|
| Name | Yes | To address you correctly |
| Company name | Yes | To understand the context of the request |
| Email address | Yes | To respond to you |
| Phone | No | To contact you, if you prefer by phone |
| Number of employees | No | To estimate which services are appropriate |
| Message content | Yes | To understand what you're requesting |
Legal basis: your consent, given by ticking the checkbox in the form — Article 6(1)(a) of Regulation (EU) 2016/679 (GDPR). Subsequently, if the discussion results in a contractual relationship, processing is based on the performance of a contract or pre-contractual steps — Article 6(1)(b).
2.2 Automatically collected data
The provider hosting the website records, for technical and security reasons, data such as IP address, browser type, and access time. This data is necessary for the operation and protection of the website.
Legal basis: legitimate interest in ensuring the operation and security of the website — Article 6(1)(f) GDPR.
2.3 Traffic statistics (analytics)
We use Plausible Analytics to understand, in an aggregated and anonymous way, how the website is visited — which pages are read, where visitors come from, and what type of device they use. This tool does not use cookies, does not track individual visitors from one visit to another, and does not store IP addresses.
Legal basis: legitimate interest in understanding and improving the website's performance — Article 6(1)(f) GDPR.
2.4 Data collected through the preliminary assessment
If you use the preliminary assessment tool available on the site, we collect additional data beyond the contact form:
| Data | Required | Why |
|---|---|---|
| Description of the company's activity | Yes | To provide context for the assessment |
| Number of employees | Yes | To calibrate the recommendations |
| Answers to the assessment questions | Yes | To generate the personalized report — includes information about the company's internal processes: time spent, frequency of errors, degree of process documentation |
| Company name | Yes | To identify the generated report |
| Yes | To identify the generated report | |
| Contact person's name | No | To identify the generated report |
Legal basis: your consent — Article 6(1)(a) GDPR.
What we do with your answers: we use them exclusively to generate your report. The report is generated locally, through predefined calculation rules — your answers are not transmitted to any external artificial intelligence provider and are not used to train any model.
The generated report is made available to you directly on the page, for viewing and downloading. We keep a minimal record (company name, date, a unique identification code) so we can confirm the report's authenticity, should you or a third party request this confirmation.
Technical data collected to prevent abusive use: IP address (stored in hashed form), browser type, and completion time.
Legal basis: legitimate interest in preventing abusive use of a free tool — Article 6(1)(f) GDPR.
2.5 Data collected through course enrollment
When you complete the enrollment form for a PECB course, we collect the following data:
| Data | Required | Why |
|---|---|---|
| Course and format chosen | Yes | To process the enrollment |
| Name | Yes | To identify you as a participant or contact person |
| Company name | No | For invoicing and to understand the context of the request |
| Email address | Yes | For enrollment confirmation and course-related communication |
| Phone | No | To contact you, if you prefer the phone |
| Number of participants | No | To prepare the quote |
| Message content | No | To answer your requirements |
Legal basis: your consent, given by ticking the box on the form — Art. 6(1)(a) GDPR. Afterwards, for delivering the course, issuing the quote and invoicing, processing is based on performance of a contract or pre-contractual steps — Art. 6(1)(b), and for keeping financial and accounting records, on a legal obligation — Art. 6(1)(c).
Participants enrolled by an employer. If a company enrolls its employees, it sends us their data (name, email, possibly phone), and the company is responsible for informing them of this transfer. Under Art. 14 GDPR, any participant can learn from us the source of the data (the company that enrolled them) and everything in this policy by writing to office@maastechnology.ro.
Exam and certification. The courses are official PECB courses, and MAAS Technology is an Official PECB Partner. To enroll you in the course, the exam and the certification, we send PECB Group Pte. Ltd. (Singapore) the data strictly necessary: name, email address, the course chosen and, where applicable, the company name. PECB processes this data as a controller, for examination and certification, under its privacy statement.
We do not take online payments through the site. We request invoicing details separately, after the enrollment is confirmed.
3. Who we share data with
We don't sell or rent your data to anyone. We share it with service providers who help us operate, acting as data processors, based on data processing agreements, and — for course enrollments only — with PECB, for examination and certification:
| Provider | Role | Location |
|---|---|---|
| Netlify, Inc. | Website hosting and contact form processing | United States |
| Zoho Corporation B.V. | Email service | European Union (Netherlands) |
| Google Ireland Limited | Web font delivery (Google Fonts), loaded directly by your browser | European Union / United States |
| Plausible Insights OÜ | Anonymized website traffic statistics, cookie-free | European Union (Estonia) |
| Render Services, Inc. | Hosting for the preliminary assessment tool | United States (Oregon) |
| PECB Group Pte. Ltd. | Exam and certification enrollment, for PECB courses (independent controller) | Singapore |
Transfers to the United States are carried out based on the standard contractual clauses (SCCs) adopted by the European Commission, automatically included in each provider's data processing agreement — for example, in Render Services, Inc.'s Data Processing Addendum.
The transfer to PECB (Singapore, a country without a European Commission adequacy decision) is necessary for your enrollment in the exam and certification, that is, for performing a contract concluded with you or in your interest — Art. 49(1)(b) and (c) GDPR. In its statement, PECB indicates that it applies, where the law requires it, appropriate safeguards, including standard contractual clauses.
We may also disclose data to public authorities, when required by law.
4. How long we keep data
- Requests that don't lead to a collaboration: a maximum of 12 months from the last communication, after which they are deleted.
- Requests that lead to a collaboration: for the duration of the contractual relationship and afterward in accordance with the legal archiving periods applicable to financial and accounting documents.
- Technical access data: according to the hosting provider's retention policy.
- Assessment answers and related contact data: 12 months from report generation, then automatically deleted.
- Assessment anti-abuse technical log (hashed IP, browser, duration): 90 days, then automatically deleted.
- Course enrollments that are not completed: a maximum of 12 months from the last communication, after which they are deleted.
- Completed enrollments: for the duration of the contractual relationship and afterwards according to the legal retention periods applicable to financial and accounting records. Data processed by PECB is kept under PECB's policy.
5. Your rights
Under GDPR, you have the following rights:
- Right of access — to find out what data we hold about you
- Right to rectification — to have inaccurate data corrected
- Right to erasure — to have your data deleted, under the conditions provided by law
- Right to restriction of processing
- Right to data portability
- Right to object — to object to processing based on legitimate interest
- Right to withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand
How to exercise your rights: write to us at office@maastechnology.ro. We respond within one month of receiving the request. Exercising these rights is free of charge.
If you are unhappy with how we process your data, you have the right to lodge a complaint with Romania's National Supervisory Authority for Personal Data Processing (ANSPDCP) — B-dul G-ral. Gheorghe Magheru no. 28-30, sector 1, Bucharest, www.dataprotection.ro.
6. Cookies
This website does not use tracking or advertising cookies. Strictly necessary cookies required for the site to function may be used, which do not require prior consent.
7. Data security
We apply reasonable technical and organizational measures to protect your data: encrypted connection (HTTPS), restricted access to received messages, and providers that meet recognized security standards.
8. Use of artificial intelligence tools
In our work, we use tools based on artificial intelligence. Your personal data is not entered into such tools without a legal basis and appropriate contractual safeguards, and confidential information received from clients is not used to train models.
9. Changes to this policy
We may update this policy whenever the way we process data or the applicable legal framework changes. The version in force is always the one published on this page, with the last update date noted at the top.