1. Data controller

The controller of the personal data processed through the site is IT YCM, a Romanian legal entity, fiscal code RO43417835, with its registered office at Strada Mihail Strajan, nr. 3, Craiova, Dolj, hereinafter "YCM Team". For any matter regarding data protection you may contact us at ycmteam@yahoo.ro. Processing is carried out in accordance with Regulation (EU) 2016/679 (GDPR) and Romanian Law no. 190/2018.

2. What data we process

Depending on how you interact with the site, we process:

• account data: first name, last name, email address, phone (optional), preferences (language), role;
• contact form data: name, email, phone, message;
• authentication and security data: password (stored securely, hashed), session tokens, access logs (IP, user-agent) for security purposes;
• technical and usage data: IP address, browser/device type, pages visited — collected via cookies (see the Cookies section).

3. Purposes and legal bases

We process your data to:

• create and manage your account, authenticate you — performance of a contract, art. 6(1)(b);
• respond to your contact requests — legitimate interest / pre-contractual steps;
• send account and service notifications (email/SMS/push) — performance of a contract / consent, as applicable;
• ensure the security of the site and prevent fraud/abuse — legitimate interest, art. 6(1)(f);
• produce anonymous usage statistics (Google Analytics) — consent, art. 6(1)(a);
• comply with legal obligations — legal obligation, art. 6(1)(c).

4. Cookies

The site uses:

• strictly necessary cookies (session, authentication, your consent preference) — these do not require consent;
• statistics cookies (Google Analytics), enabled only with your consent, given through the banner shown on your first visit. You can change your choice at any time from "Cookie settings" (in the footer). If you refuse, statistics cookies are not set / are deleted;
• reCAPTCHA (Google) — used to protect forms against spam; it may set Google cookies for security purposes.

You can also control cookies from your browser settings.

5. Recipients and processors

We do not sell your data. We may disclose it only to:

• providers that help us operate the service (processors), to the extent necessary: hosting, email service (SMTP), SMS, push notifications (Google Firebase), analytics (Google Analytics), reCAPTCHA;
• public authorities, where required by law.

6. Storage period

We keep your data for as long as necessary for the purposes above: account data — for the lifetime of the account; security/audit logs — for limited periods, according to our internal policies; contact form data — as long as needed to handle your request. Once the periods expire, the data is deleted or anonymised.

7. Your rights

Under the GDPR you have the right to: access, rectification, erasure ("right to be forgotten"), restriction of processing, objection, data portability, to withdraw your consent at any time (without affecting the lawfulness of processing before withdrawal), and not to be subject to a decision based solely on automated processing.

8. Exercising your rights and complaints

You can exercise your rights by sending a request to ycmteam@yahoo.ro. We will respond within the legal deadlines. If you consider that your rights have been infringed, you may lodge a complaint with the Romanian supervisory authority (ANSPDCP) — www.dataprotection.ro.