Data Protection & Privacy Policy

Last updated: February 20, 2026

1. Introduction

NECULA Agency SRL is committed to protecting the privacy and personal data of all individuals who interact with our website and services, in accordance with the GDPR (EU) 2016/679 and Romanian Law No. 190/2018.

2. Data Controller

NECULA Agency SRL, Bucharest, Romania. Email: tedy@necula.agency. Phone: +40 733 74 75 88.

3. Personal Data We Collect

3.1 Contact & Pre-Qualification Form Data

Full name, email address, company name, job title, project budget range, campaign type of interest, and any additional information you provide.

3.2 Automatically Collected Data

IP address, browser type, device type, pages visited, referring website, cookies.

3.3 Publicly Available Professional Data

When you submit a contact form, we may supplement your information with publicly available professional data from platforms such as LinkedIn.

4. Legal Basis for Processing

Consent (Art. 6(1)(a)): By submitting your data through our forms, you consent to processing for the described purposes.

Legitimate Interest (Art. 6(1)(f)): Following up with individuals who initiated contact by partially or fully completing our pre-qualification form, including via email and LinkedIn.

Pre-contractual Measures (Art. 6(1)(b)): Processing necessary to take steps at your request prior to entering into a contract.

5. How We Use Your Data

• To respond to inquiries and contact form submissions
• To follow up if you partially completed a form but did not finalize a booking, via email or LinkedIn
• To schedule and conduct strategy calls
• To provide relevant service information
• To improve our website and user experience

6. Follow-Up Communication Policy

If you begin filling out our contact form but do not complete the booking, we may send a maximum of 3 follow-up emails and/or reach out via LinkedIn. Every communication includes a clear opt-out option.

7. Data Retention

Contact form submissions: max 24 months. Incomplete form submissions: max 6 months. Anonymized analytics: indefinitely.

8. Data Sharing

We share data only with service providers (Google Analytics, TidyCal, email providers) bound by data processing agreements. We never sell your data.

9. International Data Transfers

Where data is processed outside the EEA, we ensure safeguards via EU-U.S. Data Privacy Framework, Standard Contractual Clauses, or Binding Corporate Rules.

10. Your Rights Under GDPR

• Right of Access (Art. 15)
• Right to Rectification (Art. 16)
• Right to Erasure (Art. 17)
• Right to Restriction (Art. 18)
• Right to Data Portability (Art. 20)
• Right to Object (Art. 21)
• Right to Withdraw Consent (Art. 7(3))

Contact tedy@necula.agency to exercise your rights. We respond within 30 days.

11. Right to Lodge a Complaint

Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest, Romania. Website: www.dataprotection.ro

12. Data Security

SSL/TLS encryption, secure database storage, access controls, regular security assessments, staff training on data protection.

13. Children's Privacy

Our services are for business professionals. We do not knowingly collect data from individuals under 16.

14. Changes to This Policy

We may update this policy. Changes will be posted on this page with an updated date.

15. Contact Us

NECULA Agency SRL, Data Protection Contact. Email: tedy@necula.agency. Phone: +40 733 74 75 88.