Privacy Policy

1. Who we are

Isahar Systems, headquartered in Târgu Neamț, Romania, is the controller of the personal data collected through this site. You can reach us any time at salut@isahar.io with any question about your data.

2. What data we collect

We collect strictly what's needed to respond to requests and to understand how the site is used. We don't buy data lists and we don't build behavioral profiles.

3. Why we use it

To respond to your request and prepare a proposal; to issue tax documents and meet our legal obligations; to keep the site secure and running; to understand, in aggregate, which sections are useful. We don't send newsletters and we don't use your data for advertising.

4. Legal basis

We process data under Art. 6 of Regulation (EU) 2016/679:

5. How long we keep it

6. Who we share it with

We don't sell or rent personal data. We process it with the help of providers acting as processors, under contract and with confidentiality obligations:

When a provider processes data outside the European Economic Area, the transfer relies on the standard contractual clauses approved by the European Commission. We may also disclose data to authorities when the law requires it.

7. Cookies

We use strictly necessary cookies — the ones that remember your chosen language and protect the form against automated submissions — and, optionally, Google Analytics (Google Ireland Limited), so we can understand how the site is used. Google Analytics only starts if you accept the banner shown on your first visit; you can grant or withdraw consent at any time from the "Cookie settings" link in the page footer.

Data may be transferred to and processed by Google outside the European Economic Area, subject to the safeguards described in Google's privacy policy. We don't use advertising cookies and we don't embed social network pixels.

8. Your rights

Under GDPR, you have the right to access your data, to rectify it, to have it erased, to restrict its processing, to portability, to object, and to withdraw consent at any time.

9. Security

Traffic is fully encrypted, access to systems is limited to those who need it and protected with two-factor authentication, and backups are encrypted. These are the same practices we recommend to our own clients. If an incident occurs that could affect your rights, we'll inform you within 72 hours of discovering it.

10. Changes

When we update this document, we change the date at the top. If a change is material and affects you directly, we'll email you. Previous versions are available on request.