Legal information
Privacy policy (GDPR)
1. The data controller
SUCCES SEO SRL (a Romanian limited liability company), with registered office at Bulevardul Chișinău Nr. 1, Complex Delfinului, Et. 1, Sector 2, București, postal code 022141, Romania, registered with the Trade Register Office under no. J2025045908009, CUI (Romanian tax identification number) 52037053, EUID ROONRC.J2025045908009 (hereinafter “Succes SEO”, “we” or the “Company”).
Contact details: email [email protected], phone 0771 430 955.
The Company processes personal data as a controller, in accordance with Regulation (EU) 2016/679 (“GDPR”) and the applicable national legislation (Law no. 190/2018).
2. What data we process and where it comes from
- Contact details you provide voluntarily — name, email address, phone number, company name, website address — when you email us, call us or use the quote request tool on the contact page. The tool only prepares a message in your email application: it sends nothing to our servers, and the data reaches us only if you press “Send” in your email client;
- Contractual and invoicing data — for clients with whom we conclude contracts: identification details of the company and its representative, bank details, in line with legal obligations;
- Minimal technical data — standard logs of the web server and the content delivery network (IP address, date/time, page accessed, browser type), generated automatically whenever any website is accessed and used exclusively for security, abuse prevention and operation;
- Preferences saved in your browser (light/dark theme, values entered in the tools, latest results, the draft quote request). They remain on your device, do not reach us, and you can delete them at any time — details in the Cookie Policy;
- The address entered in the speed test — only if you use the “Speed test” tool: your browser sends the address of the page you are testing directly to Google PageSpeed Insights (together with your IP address, as with any web request). We do not receive or store this address. The other tools in the SEO Lab run entirely in your browser; the only possible network request is loading a preview image from the address you enter yourself in the SERP Simulator.
The Website has no user accounts, does not store data in databases, and does not use advertising tracking or behavioral analytics tools — see the Cookie Policy.
3. Purposes and legal bases of processing
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Replying to inquiries and sending the quotes you request | Steps taken at the request of the data subject prior to entering into a contract — Art. 6(1)(b) |
| Performance of service contracts | Performance of a contract — Art. 6(1)(b) |
| Invoicing, accounting and tax records | Legal obligation — Art. 6(1)(c) |
| Security of the Website and systems | Legitimate interests — Art. 6(1)(f) |
| Subsequent commercial communications (only with your consent) | Consent — Art. 6(1)(a) |
Providing contact details (for example, your email address) is voluntary: if you do not provide them, we cannot reply to your request. There is no legal or contractual obligation to send us data through this Website.
4. Recipients of the data
The data may be accessed, strictly to the extent necessary, by: the web hosting and email service provider, the provider of the Website’s content delivery and security network (Cloudflare), the Company’s accountant or tax advisor, and public authorities, where required by law. Google (PageSpeed Insights) receives data only if you use the speed test. Hosting, email and network providers (including Cloudflare) act, as the case may be, as processors of the Company (Art. 28 GDPR) or as independent controllers of their own technical data. We do not sell or rent personal data to third parties.
5. Transfers outside the EU/EEA
The Company does not directly transfer personal data outside the European Economic Area. However, providers such as Cloudflare (content delivery and security network) or Google (only for the speed test, at your initiative) may process technical data, such as the IP address, outside the EEA as well. These transfers are based on the European Commission’s adequacy decision (the EU–US Data Privacy Framework) or on standard contractual clauses, in accordance with Chapter V of the GDPR.
6. Retention period
- Correspondence related to quotes: up to 2 years from the last contact;
- Contractual and invoicing data: for the period required by Romanian tax and accounting legislation (generally 5–10 years);
- Technical server and network logs: short periods, in line with the practices of the hosting and security providers;
- Browser preferences: until you delete them (browser settings) or until the site data is cleared.
7. Your rights
Under the GDPR, you have the right of access to your data, the right to rectification, the right to erasure (“right to be forgotten”), the right to restriction of processing, the right to data portability, the right to object, and the right to withdraw your consent at any time (without affecting the lawfulness of processing carried out before the withdrawal). To exercise these rights, write to us at [email protected]; we reply within one month at the latest.
You also have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP), Romania’s data protection authority — dataprotection.ro.
8. Data security
We apply appropriate technical and organizational measures: encrypted HTTPS connection, restricted access to correspondence and data, strong passwords and keeping the systems we use up to date.
9. Automated decision-making
We do not use solely automated decision-making and do not carry out profiling that produces legal effects concerning data subjects.
10. Updates
This policy may be updated; the version in force, with the date of the last update, is permanently published on this page.