Privacy policy

1. The data controller

The controller of personal data collected through this website is BEST WEB SYSTEMS S.R.L., with its registered office at Drumul Gura Făgetului 76-80, bl. B, ground floor, ap. 2, Sector 3, Bucharest, Romania, registration code (CUI) 52784580, registered with the Trade Register under number J2025082412000.

For any request regarding your data, write to contact@ngx.ro.

2. What data we collect

• Contact details submitted through forms: name, company name, email address, phone number, type of workshop
• The content of the messages you send us
• Your IP address and minimal technical data, needed to limit abuse of the forms
• The tax identification code, if you enter it in a form so that company details are filled in automatically

3. Why we use it (legal basis)

• To answer your requests and create a demo account for you — performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR)
• To prevent abuse of the forms — legitimate interest (Art. 6(1)(f) GDPR)
• For visit statistics, if they are enabled — consent (Art. 6(1)(a) GDPR)
• To comply with legal obligations, where they exist — legal obligation (Art. 6(1)(c) GDPR)

4. How long we keep it

We keep data for as long as it is needed for the purpose it was collected for. Data submitted through forms is kept while the request is being handled and, afterwards, for the duration of the commercial relationship.

Documents of accounting or tax relevance are kept for the periods required by applicable law, even after the commercial relationship has ended.

5. Who we share it with

We do not sell or rent your data. Data submitted through the forms is stored on the controller's own infrastructure.

We share it only with the providers needed to operate the service, acting as processors under data processing agreements:

• Resend, Inc. (United States) — email delivery of the messages sent through the site's forms
• The Romanian National Agency for Fiscal Administration (ANAF) — a query against the public register, only if you enter a tax code in a form

6. Transfers outside the European Economic Area

Some of the providers above are established outside the European Economic Area. Such transfers take place under the safeguards provided by the GDPR, primarily the standard contractual clauses adopted by the European Commission.

7. Your customers' data

For the data you enter into the application about your own customers, you are the controller and we are the processor. That relationship is governed by a data processing agreement concluded with your company.

8. Your rights

• The right of access to your data
• The right to rectification of inaccurate data
• The right to erasure (“the right to be forgotten”)
• The right to restriction of processing
• The right to data portability
• The right to object to processing based on legitimate interest
• The right to withdraw your consent at any time
• The right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP)

9. Automated decisions

We do not take automated decisions producing legal effects concerning you, and we do not carry out profiling.

10. Security

We apply technical and organisational measures to protect data: individual accounts with roles and permissions, optional two-factor authentication, account lockout after repeated sign-in attempts, an audit log for important actions, and database backups.

11. Changes

We may update this document. The version in force is the one published on this page, with the date of the last update shown at the top.