Legal

This policy explains what we do with personal data when you visit onlinetools.work or get in touch with us. Simply IT SRL, trading as Online Tools Work, is the data controller, and we handle your data under Regulation (EU) 2016/679 (GDPR) and Romanian data protection law.

1. Who we are

Simply IT SRL, a company registered in Romania, CUI 18445788, VAT number RO18445788, operating the website onlinetools.work. You can reach us at [email protected] for anything in this policy. We have not appointed a Data Protection Officer, as we are not required to under Article 37 GDPR.

2. What we collect

• What you send us. If you email us, we hold your name, address, company and whatever is in your message.
• Technical records. Our hosting provider logs the IP address, browser type, page requested and time of each visit.
• Client systems. Where our work touches systems holding personal data, we act as a processor for that client under a separate written agreement, and only on their instructions.

3. Why, and on what legal basis

We use your contact details to reply to you and to prepare or perform a contract (Art. 6(1)(b) GDPR). We keep server logs because we have a legitimate interest in a secure, working website (Art. 6(1)(f)). Invoices and accounting records are kept because Romanian law requires it (Art. 6(1)(c)). We don't use your data for automated decision-making or profiling.

4. Who else sees it

Only a small number of suppliers, acting as processors under Article 28 GDPR: our website host, our email provider, and our accountants. We don't sell personal data or share it for advertising. Ask us at [email protected] and we'll tell you exactly who they are.

5. Data leaving the EU

We keep data inside the European Union wherever we can. If a supplier processes data outside the EEA, that transfer relies on an adequacy decision or on the European Commission's Standard Contractual Clauses, with additional safeguards where they're needed.

6. How long we keep it

Email correspondence: up to 24 months after we last spoke, unless it becomes part of a contract. Server logs: up to 30 days. Accounting records: for the retention period Romanian law sets, generally 10 years.

7. Your rights

Under Articles 15 to 21 GDPR you can ask us for a copy of your data, have it corrected or deleted, restrict or object to how we use it, or receive it in a portable format. Where we rely on consent, you can withdraw it at any time — that doesn't affect anything done before you withdrew it.

Write to [email protected] and we'll respond as quickly as we can — usually within a few working days. If you're not satisfied, you can complain to the Romanian supervisory authority, ANSPDCP (dataprotection.ro), or to the authority where you live.

8. Changes

If we change how we handle personal data, we'll update this page and the date at the top. Material changes affecting existing clients get an email as well.