This document applies exclusively to heyvalue.ro and the security services presented here. It does not apply to heyvalue.com, or to applications and products hosted there, which have their own documents and data flows.
01 · Scope and operator
For data collected through heyvalue.ro, the controller is Hey Value Tech SRL, tax ID RO40568221, operating from Cluj-Napoca, Romania. This policy is limited to this presentation website and assessment requests submitted through it.
The site does not create accounts, process payments, or host files, messages or operational data belonging to heyvalue.com products.
02 · Data collected
When you submit the assessment form, we collect the request type, name, email address, organization and phone if supplied, the context you enter, page language, page path and the CTA used to open the form.
Hosting and security infrastructure may process technical data needed to deliver and protect the site, such as IP address, timestamps, requested URL, user agent and security events. The form must not be used for passwords, sensitive logs, classified data or incident evidence.
03 · Purpose and basis
We use form data only to review and answer the request, establish a secure channel and, where relevant, prepare a discussion or proposal. The basis is the consent given in the form and, once dialogue begins, pre-contractual steps and our legitimate interest in securing communications and the website.
We do not sell this data, use it for behavioural advertising or automatically enroll the person in a marketing sequence.
04 · Providers
The form uses an endpoint dedicated to this website, supplied by FormSubmit, to deliver the request to the contact inbox. Hosting and edge protection may be supplied by Cloudflare. These providers process only the data needed for their function and under their own terms.
05 · Retention and security
We retain requests only as long as needed to respond, evaluate the opportunity and meet legal duties linked to any resulting contract. Requests that do not lead to an engagement are normally deleted or anonymized within 24 months. Technical logs are retained for shorter periods proportionate to security and troubleshooting needs.
We use TLS, access controls and channel separation to protect data. After initial contact, sensitive information is moved to a separately agreed channel.
06 · Your rights
You may request access, correction, deletion, restriction or portability of your data and may withdraw consent. You may object to processing based on legitimate interests and lodge a complaint with the Romanian ANSPDCP or your competent supervisory authority.
07 · Contact
For questions or to exercise rights concerning heyvalue.ro, email contact@heyvalue.ro. Use “heyvalue.ro — privacy” in the subject for separate routing.