Privacy policy

Draft · to be reviewed by a lawyer before publication

1. Who we are

ARKdata (Data Analysis & Recovery Center) is operated by Vissia Software SRL, registered in Romania under [Trade Register no.], CUI [CUI], with its address at [Address], [City] ("we"). We are the controller of the personal data described below. Contact for data protection matters: [Email].

2. What we process, and why

Data	Purpose	Legal basis
Name, email, phone, the details of your request	Answering your request and scheduling a consultation	Steps at your request before a contract (Art. 6(1)(b))
Identity document details, proof of ownership or authority	Confirming that you may have the device examined	Contract (Art. 6(1)(b)); our legitimate interest in preventing unauthorised access (Art. 6(1)(f))
Signed consent and custody log	Documenting what was agreed and the custody of the device	Contract (Art. 6(1)(b)); legal claims (Art. 6(1)(f))
Content of the device (photos, messages, locations and other data)	Carrying out the analysis you asked for	Contract (Art. 6(1)(b)) and your explicit consent where special categories of data may be involved (Art. 9(2)(a))
Billing details	Invoicing and accounting	Legal obligation (Art. 6(1)(c))

A device may also contain data about other people, such as the people you message. We look at it only as far as the analysis you asked for requires, never use it for any other purpose, and erase it together with all other working copies.

3. How long we keep it

• Content of the device: only for the duration of the analysis. All working copies are erased at handover, and we confirm the erasure in writing, unless you ask us in writing to keep them for a set period.
• Consent, custody log and identity check: [How long consent forms are kept], to document the engagement and defend legal claims.
• Invoices: as long as Romanian accounting law requires.
• Requests that don't lead to an appointment: deleted within [How long unanswered requests are kept].

4. Who receives it

We don't sell or share personal data. Device content never leaves our laboratory and is never uploaded to any cloud service. Billing data is shared with our accountant and, where you pay by card, with our payment provider. We disclose data to authorities only where the law requires it.

5. Security

Analyses run on dedicated workstations that are never connected to the internet. Working copies are stored encrypted, only the analyst assigned to your case has access to them, and they are erased at handover.

6. Your rights

You can ask to access, correct or erase your personal data, to restrict or object to its processing, and to receive it in a portable format. You can withdraw your consent at any time; this doesn't affect processing already carried out. To exercise any of these rights, write to [Email].

You also have the right to complain to the Romanian data protection authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), www.dataprotection.ro.

7. This website

This website uses no tracking, analytics or advertising cookies. The request form doesn't store anything: it opens an email in your own mail app, which you choose whether to send.

8. Changes

We will publish any change to this policy on this page. Last updated: [Effective date].