Your data.
Clearly explained.

1. Data controller

The controller for enquiries addressed to CISKO Digital is Sereka Investments SRL, tax ID RO28120970, Trade Register J2011000543235, registered office at Str. I.C. Brătianu 229a, Brănești, Ilfov, Romania.

For questions about personal data or to exercise your rights, email us at contact@cisko.digital or call us on +40 788 999 899.

2. What data we use and why

When you contact us: we may receive your name, email, phone number, company, role and information you include in your message or attachments. We use it to respond, clarify the project and prepare a quote.

The legal basis is taking pre-contractual steps at your request if you may become a contracting party [GDPR Article 6(1)(b)], or our legitimate interest in handling business communications and enquiries made for an organisation [Article 6(1)(f)].

If we start working together: data needed to provide services is processed to perform the contract; tax and accounting data is processed to meet legal obligations [Article 6(1)(c)]. Project-specific details are set out in the collaboration documents.

When you visit the website: the quote form requires a name, email, project type, description and acknowledgement of this notice. Phone, company, reference project, budget and timing provide context. Currently, the form prepares an email which you send from your own email app; preparing it does not send the entered data to our server. When direct submission is enabled, the “Send enquiry” button sends the request securely to Cisko Flow, our enquiry management app. There are no visitor accounts, payments, newsletters, analytics tools or advertising pixels. Email and phone links open apps on your device.

This website is hosted on Cloudflare Workers and delivered through Cloudflare. To serve pages and prevent abuse, the infrastructure may process IP addresses, browser and device details, requested URLs, dates, times and request outcomes. The basis is our legitimate interest in providing and securing the website [GDPR Article 6(1)(f)]. This is separate from advertising and behavioural analytics, which we have not installed.

Submitting an enquiry is voluntary. Without enough information to understand it and contact you, we may be unable to respond or quote. Share only relevant information initially; we do not need passwords, identity documents or medical records.

3. Retention and access

Retention depends on the purpose. Correspondence is kept as needed to resolve an enquiry and continue discussions. Contract documents are retained for performance, statutory archiving and establishing, exercising or defending legal claims. Criteria include relevance, an ongoing relationship, legal duties and disputes.

Recipients may include authorised staff, Cloudflare and its hosting infrastructure providers, email delivery providers, accounting or legal advisers and authorities where legally required. Incoming email for cisko.ro uses ROMARG services. Access is limited to what each role requires.

Hosting may involve processing outside the European Economic Area, including the United States. Cloudflare’s data processing agreement provides safeguards such as standard contractual clauses or applicable adequacy decisions. Provider documents and subprocessor information are available through the links below. Contact us for more information about safeguards for your data.

Infrastructure logs follow provider retention rules and operational, incident investigation and legal needs. Email enquiries remain in company correspondence. Once direct submission is connected, confirmed enquiries will be stored in Cisko Flow for review and follow-up. Form data stays temporarily in the open page, including after a failed submission, without persistent browser storage. An enquiry identifier prevents duplicate registration on retry.

The address contact@cisko.digital forwards messages through Cloudflare Email Routing to contact@cisko.ro. Email providers process the message and routing data for delivery.

• Cloudflare Data Processing Addendum
• Cloudflare Privacy Policy
• ROMARG data protection information

4. Your rights

Under the GDPR, you may request access, rectification, erasure, restriction or portability. You may object to processing based on legitimate interests for reasons relating to your situation. If future processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing.

Send your request to contact@cisko.digital. We normally respond within one month. Where the GDPR permits an extension, we will inform you. We may request only additional information necessary to verify your identity.

You may lodge a complaint with Romanian National Supervisory Authority for Personal Data Processing or apply to the competent courts. Some rights have statutory limits, for example where retention is mandatory.

5. Portfolio apps, AI and updates

This website does not make solely automated decisions with legal or similarly significant effects on you, and has no AI assistant processing visitor messages. Once connected to Cisko Flow, enquiry content may be analysed using OpenAI to organise information and prepare a record. Our team reviews the result; quotes and engagements are agreed through discussion, not automatically. Portfolio AI services describe our development offering.

Using a portfolio application is a separate interaction. Its data processing follows its own privacy notice, access conditions and product roles.

See the cookie policy for details about device storage. This policy is updated when functionality or data processing changes.

Reference: Regulation (EU) 2016/679.