Privacy Policy
Last updated: 14 November 2026
This Privacy Policy explains how MGOIT SRL collects, uses, shares and protects personal data when you visit mgoit.com, contact us, subscribe to our newsletter, apply for a role, or engage us as a client or partner.
We are certified under ISO/IEC 27001:2022 for information security management, and we apply the same standards to the personal data described here.
1. Who we are
The controller of your personal data is:
MGOIT SRL
Calea Banlocului nr. 35, CAM. 2, Deta, Timiș County, 305200, Romania
Commercial Register: J35/3091/2022
Tax identification number: RO46420355
Email: contact@mgoit.com
Website: mgoit.com
For any question or request regarding your personal data, write to contact@mgoit.com with the subject line “Data protection”.
2. What data we collect and why
2.1 When you use our contact form
Data: your name, email address, phone number, company name, and the content of your message.
Purpose: to answer your enquiry, discuss a possible project, and keep a record of our correspondence.
Legal basis: steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR), and our legitimate interest in responding to business enquiries and maintaining business records (Article 6(1)(f) GDPR).
2.2 When you subscribe to our newsletter
Data: your email address, and the date and time of your subscription.
Purpose: to send you occasional updates about our work, publications and events.
Legal basis: your consent (Article 6(1)(a) GDPR). You can withdraw it at any time using the unsubscribe link in any email, or by writing to us. Withdrawing consent does not affect the lawfulness of what we sent before.
2.3 When you apply for a role with us
Data: the information in your CV and application — name, contact details, work history, education, and anything else you choose to send us.
Purpose: to assess your application and communicate with you about it.
Legal basis: steps taken at your request prior to a possible employment relationship (Article 6(1)(b) GDPR) and, where we keep your details for future openings, your consent (Article 6(1)(a) GDPR).
2.4 When you contact us through the chat widget on our site
Data: the content of your conversation, and any contact details you provide in it.
Purpose: to answer your questions in real time.
Legal basis: our legitimate interest in offering an immediate response channel, and steps taken at your request prior to a contract (Article 6(1)(f) and 6(1)(b) GDPR).
2.5 When you are a client, supplier or partner contact
Data: your name, role, business email, business phone number, and the correspondence and documents exchanged in the course of the engagement.
Purpose: to deliver our services, manage the relationship, invoice, and meet our accounting and tax obligations.
Legal basis: performance of a contract (Article 6(1)(b) GDPR), compliance with legal obligations such as Romanian accounting and tax law (Article 6(1)(c) GDPR), and our legitimate interest in managing business relationships (Article 6(1)(f) GDPR).
2.6 Automatically, when you visit the website
Data: IP address, browser type and version, operating system, referring page, pages viewed, time and duration of the visit, and similar technical information recorded in server logs.
Purpose: to deliver the website, keep it secure, detect and prevent abuse, and diagnose technical faults.
Legal basis: our legitimate interest in operating and securing the website (Article 6(1)(f) GDPR).
3. Cookies and analytics
Our website uses cookies and similar technologies. We distinguish between two kinds.
Strictly necessary cookies are needed for the site to function — for example to remember your cookie choices or to keep a session secure. These are set on the basis of our legitimate interest and do not require your consent.
Analytics and marketing cookies — including Google Analytics 4 and the Meta pixel — are only set after you give consent through our cookie banner. They help us understand how the site is used and measure the effect of our campaigns. You can change or withdraw your choice at any time through the cookie settings link on our site.
If you decline, these services are not loaded and no data is sent to them.
4. Who we share your data with
We do not sell personal data, and we do not share it for third-party advertising.
We use carefully selected service providers who process data on our behalf, under written data processing agreements. These fall into the following categories:
- Website hosting and infrastructure — to run mgoit.com and store its data
- Email and productivity services — to receive and answer your messages
- Newsletter delivery — to send and manage our mailing list
- Website analytics and advertising measurement — Google (Google Analytics 4) and Meta (Meta pixel), subject to your cookie consent
- Chat and support tooling — to operate the chat widget on our site
- Accounting and professional advisers — to meet our legal and financial obligations
We may also disclose personal data where we are legally required to do so, for example to a court or a public authority acting within its powers.
5. International transfers
Some of our service providers are established outside the European Economic Area, principally in the United States.
Where personal data is transferred outside the EEA, we rely on one of the safeguards permitted by Chapter V of the GDPR — an adequacy decision of the European Commission, or the European Commission’s Standard Contractual Clauses together with additional technical and organisational measures where needed.
You can ask us for details of the safeguards applied to a specific transfer by writing to contact@mgoit.com.
6. How long we keep your data
| Category | Retention period |
|---|---|
| Contact form messages and related correspondence | Up to 24 months after our last exchange |
| Newsletter subscriptions | Until you unsubscribe, plus a short record of the unsubscribe itself |
| Job applications | Up to 12 months after the recruitment process closes, unless you agree to a longer period |
| Chat conversations | Up to 12 months |
| Client and supplier records, contracts and invoices | As required by Romanian accounting and tax law, generally 10 years |
| Server and security logs | Up to 12 months |
| Analytics data | According to the retention settings of the analytics service, generally up to 14 months |
When a retention period ends, we delete the data or irreversibly anonymise it.
7. How we protect your data
MGOIT SRL holds an ISO/IEC 27001:2022 certification for its information security management system. In practice this means we maintain documented policies on access control, encryption, secure development, supplier management, incident response and business continuity, and that these are independently audited.
Concretely, data in transit is encrypted over HTTPS, access to systems holding personal data is restricted on a need-to-know basis, and we keep backups and logs of significant access events.
No system is perfectly secure, but if a personal data breach is likely to result in a risk to your rights and freedoms, we will notify the supervisory authority within 72 hours, and you directly where the law requires it.
8. Your rights
Under the GDPR you have the right to:
- Access — obtain confirmation of whether we process your data, and a copy of it
- Rectification — have inaccurate or incomplete data corrected
- Erasure — have your data deleted, where one of the grounds in Article 17 applies
- Restriction — have processing limited in the circumstances set out in Article 18
- Portability — receive data you provided to us in a structured, machine-readable format, and have it sent to another controller where technically feasible
- Object — object at any time to processing based on our legitimate interests, and at any time to direct marketing
- Withdraw consent — where processing is based on consent, withdraw it at any time
To exercise any of these, write to contact@mgoit.com. We answer within one month. If a request is complex, we may extend that by two further months and will tell you why within the first month.
Exercising your rights is free. We may charge a reasonable fee, or refuse to act, only where a request is manifestly unfounded or excessive, and we will explain our reasoning if that happens.
9. Your right to complain
If you believe we have handled your data unlawfully, we would like the chance to put it right — please contact us first.
You also have the right to lodge a complaint with a supervisory authority. Ours is:
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, 010336 Bucharest, Romania
Email: anspdcp@dataprotection.ro
Website: www.dataprotection.ro
You may also complain to the supervisory authority of the EU Member State where you live or work.
10. Visitors from Switzerland
If you are in Switzerland, the Swiss Federal Act on Data Protection (FADP) may also apply to our processing of your data. The rights described in section 8 are available to you on an equivalent basis, and you may contact the Swiss Federal Data Protection and Information Commissioner (FDPIC) at edoeb.admin.ch.
11. Automated decision-making
We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.
Where we use artificial intelligence in delivering services to our clients, it operates on project data under the instructions of that client, and is subject to the contract and data processing agreement in place with them.
12. Children
Our website and services are directed at businesses and professionals. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.
13. Links to other websites
Our site contains links to third-party websites, including LinkedIn and our clients’ sites. This policy does not cover them, and we are not responsible for their privacy practices. We recommend reading the privacy policy of any site you visit.
14. Changes to this policy
We may update this policy to reflect changes in our practices or in the law. The current version is always published on this page, with the date of the last update at the top. Where a change is significant, we will take reasonable steps to tell you, for example by a notice on our website or by email.
15. Contact
For any question about this policy or about how we handle personal data:
MGOIT SRL
Calea Banlocului nr. 35, CAM. 2, Deta, Timiș County, 305200, Romania
Email: contact@mgoit.com