Last updated: 21 October 2026
1. Who we are
This website is operated by Nextbit Global Solutions SRL (CUI 43586915, Trade Register no. J35/186/2021), registered office Calea Stan Vidrighin 18, Timișoara, Romania (“Nextbit”, “we”). We are the controller of the personal data described in this policy. Questions or requests: privacy@nextbit.ro or +40 371 719 999.
This policy covers visitors to www.nextbit.ro, people who contact us through the website and newsletter subscribers. Data we process on behalf of our clients while delivering managed IT services is governed by the data-processing agreements we sign with those clients, not by this policy.
2. What we collect, why, and on which legal basis
| Situation | Data | Purpose | Legal basis (GDPR) | Kept for |
|---|---|---|---|---|
| You use the contact form | name, e-mail, phone, subject, message | answer your enquiry and, if requested, prepare an offer | Art. 6(1)(b) – steps prior to a contract; Art. 6(1)(f) – our legitimate interest in answering business enquiries | 24 months after our last exchange, unless a contract follows (then according to the contract and legal retention rules) |
| You subscribe to our newsletter | e-mail address and consent record (date, time, IP address, confirmation) | send news about our services, offers and events | Art. 6(1)(a) – consent, given by ticking the consent box and confirming the e-mail we send you (double opt-in) | until you unsubscribe; the consent record is kept up to 3 years after you unsubscribe, as proof of consent |
| You give us a testimonial | name, job title, company, the approved text; logo or photo only if you agree; your written approval | publish it on our website and, where you agreed, on LinkedIn and in our proposals | Art. 6(1)(a) – consent, given separately for each place it appears | while it is published. We remove it within 5 working days of a request to privacy@nextbit.ro. The approval record is kept up to 3 years afterwards as proof of consent, as for the newsletter |
| You visit the website | IP address, browser and device data, pages requested, date and time (server access logs) | operate, secure and troubleshoot the website | Art. 6(1)(f) – our legitimate interest in a secure, working website | up to approximately two months |
| Spam and bot protection (Cloudflare Turnstile) | technical signals checked by Cloudflare Turnstile – IP address, browser (user-agent) and connection characteristics. The Turnstile script is loaded on every page of the site, so Cloudflare receives these signals each time you open a page, not only when you send a form (see section 4) | block automated abuse of our forms | Art. 6(1)(f) – our legitimate interest in protecting our forms | according to Cloudflare; not stored by us |
| Analytics (only with your consent) | cookie identifiers (_ga, _ga_<ID>), pages viewed, device and browser data, approximate location derived by Google |
understand how the site is used and improve it | Art. 6(1)(a) – consent, given in the cookie banner and withdrawable at any time | cookies up to 2 years; Google Analytics data 14 months after your last visit |
| Your cookie choice | a random consent ID, date and time, the categories you chose, banner version and language – no IP address | remember your choice and be able to prove consent | Art. 6(1)(c) – our legal obligation to demonstrate consent (Art. 7(1) GDPR) | cookie 6 months; record 24 months |
Website backups, which may contain the data above, are kept for up to 6 months. We do not sell personal data and do not make automated decisions with legal effects about you.
3. Newsletter
Subscribing requires ticking an unticked consent box and confirming the link we e-mail you. Every newsletter contains an unsubscribe link; you can also write to privacy@nextbit.ro. Our newsletter service is Mailchimp (The Rocket Science Group LLC, an Intuit company, USA), acting as our processor; transfers to the USA rely on the EU-U.S. Data Privacy Framework.
4. Services from third parties used on this site
- Hosting: Romarg SRL, Romania – processor.
- E-mail: Microsoft 365 (Microsoft Ireland Operations Ltd.) – receives contact-form messages; processor.
- Cloudflare Turnstile (Cloudflare, Inc.): checks that form submissions come from humans. Its script is loaded on every page, so Cloudflare receives your IP address and technical browser and connection signals whenever you open a page of this site; Cloudflare uses them only to detect bots and abuse – not for profiling or advertising.
- Google Fonts (Google): fonts are loaded from Google’s servers, which receive your IP address.
- Google Maps (contact page): loaded only when you click “Load map” or allow maps in the cookie settings; Google then receives your IP address and may set its own cookies.
- YouTube: we only link to it; nothing is loaded from YouTube until you open a link.
- Google Analytics 4 (Google Ireland Limited): only after your consent in the cookie banner (see section 5). Google Ads is not used.
5. Cookies
When you first visit, a banner lets you accept or reject optional cookies. “Reject all” is as easy as “Accept all”, and nothing optional is loaded before you choose. You can change or withdraw your choice at any time through “Cookie settings” at the bottom of every page or here: Change your cookie settings.
Strictly necessary (always on)
cc_cookie(nextbit.ro) – stores your cookie choices – 6 months.- WordPress login cookies – only for site administrators who sign in.
- Cloudflare Turnstile – loaded on every page to protect our forms; processes technical browser signals to tell people from bots (see section 4); it does not set tracking cookies.
Analytics (only with your consent)
- Google Analytics 4 (Google Ireland Limited):
_gaand_ga_<ID>– distinguish visitors and sessions – up to 2 years. Google keeps the analytics data for 14 months after your last visit (our setting).
External content (only when you choose)
- Google Maps on the contact page – see section 4.
Proof of your choice
We record each choice with a random ID, the date and time, the categories chosen, the banner version and the language – no IP address – so that we can prove consent. These records are kept for 24 months. We ask again after 6 months, or earlier if we change this notice materially.
If we add other tools (for example advertising measurement), they will be listed here and stay off until you consent.
6. International transfers
Where a provider transfers data outside the European Economic Area (Google LLC, Cloudflare, Inc., Mailchimp), we rely on the EU-U.S. Data Privacy Framework adequacy decision or on Standard Contractual Clauses.
7. Your rights
You have the right to access, rectify, erase, restrict or object to the processing of your data, to data portability, and to withdraw consent at any time (without affecting processing carried out before). Write to privacy@nextbit.ro; we answer within one month. You may also lodge a complaint with the Romanian data-protection authority, ANSPDCP – www.dataprotection.ro.
8. Security
We protect the website and the data it collects with encrypted connections (HTTPS), restricted administrative access with two-factor authentication, regular updates and monitoring. No system is risk-free; we reduce and manage risk, and we will notify you and the authority where the law requires.
9. Changes
We update this policy when our processing changes; the date at the top shows the current version.