Privacy Policy
This policy explains what personal data is processed when you use qapp.ro and QAPP forms, why we use it and what rights you have. It is intended for visitors, contact persons and company representatives who request information or a demonstration.
1. Who is the controller
The controller of data relating to qapp.ro is the entity that manages and provides QAPP services. To exercise your rights or make any request concerning personal data, the operational contact is contact@qapp.ro.
If a Data Protection Officer (DPO) is appointed, their contact details will be published here. At present, personal-data requests can be sent to the address above.
2. What data we may collect
| Category | Examples | When collected |
|---|---|---|
| Identification and contact data | Name, e-mail address, company, phone number, role | When you submit a form or request, or create a QAPP account |
| Account data | Password stored only as a hash, account status, role, licence, confirmation date and failed sign-in attempts | When you create, confirm and use your QAPP account |
| Request data | The described process, current form, selected options and recommended package | When you complete a QAPP form or configurator |
| Demo access data | Date and time of the request, request number, return to the download page and number of actual downloads | When you request, access or download the QAPP Demo application |
| Strictly necessary technical data | Information from server logs required for security and operation | When accessing the site through the hosting infrastructure |
Please do not submit sensitive personal data, passwords, confidential documents or other people’s personal data through public forms unless necessary and a method has been agreed in advance.
3. Why we use the data and the legal basis
| Purpose | Legal basis used | What this means in practice |
|---|---|---|
| Responding to enquiries, demonstrations and proposals | Steps requested by the person before entering into a contract and, where applicable, legitimate interest | We review the request, respond by e-mail or phone and may prepare a proposal. |
| Confirmation of form submission | Steps requested by the person | We send a confirmation to the e-mail address provided. |
| Creating and managing a QAPP account | Performance of the accepted terms and steps requested by the person | We create the profile, confirm the e-mail address, assign Demo access and control access based on role and licence. |
| Providing and evaluating the demo | Consent expressed in the form and steps requested by the person | We generate a personal link and record whether it is accessed and how many downloads are made, in order to provide the demo and follow up commercial interest. |
| A single follow-up e-mail about the demo | Separate, optional consent | Only if you select the separate option, we schedule one message after approximately 3 days. The message includes evaluation recommendations and an immediate opt-out option. |
| Security and abuse prevention | Legitimate interest | We protect forms and infrastructure against automated submissions, errors and unauthorised access. |
We do not use data submitted through forms for newsletters or marketing communications without a separate, clear option. Not selecting the optional follow-up does not limit access to the demo. Module recommendations are informational, based on the selected interest, and do not have legal effects. We do not make decisions with legal effects concerning you solely by automated means.
4. Who may receive the data
Data is accessible only to persons authorised to handle the request. For website and e-mail operation, data may be processed by technical hosting and e-mail providers, including Hostico, within the contracted services. We may disclose data when required by law or to defend a legitimate right.
We do not sell or rent your personal data. We do not intend transfers outside the European Economic Area for the current forms; if a future configuration requires them, we will apply the safeguards required by applicable law and update this policy.
5. How long we keep the data
Commercial enquiries and demo-download records are kept for no more than 12 months from the last interaction so that we can provide access, follow up the request and avoid duplicate records. The individual download link expires after 7 days, and the account-confirmation link after 24 hours. Account data is kept while the account is active and, after closure, only for as long as necessary for security, legal obligations or defence of rights. Follow-up consent, acceptance of legal documents, submission status and any withdrawal are retained as evidence of the choice made. If a contractual relationship begins, relevant documents are kept for the duration of the contract and afterwards for as long as required by legal obligations or necessary to defend rights.
Technical logs are kept for a limited period proportionate to the security purpose. At the end of the applicable period, data is deleted or anonymised except where retention is required by law.
6. Your rights
Subject to applicable law, you may request access to your data, correction, deletion, restriction of processing, data portability, or object to processing based on legitimate interest.
- Send your request to contact@qapp.ro, with a clear description of the request.
- We may request reasonable information to confirm your identity where necessary to protect the data.
- We respond without undue delay and normally within one month.
- You may lodge a complaint with the competent Romanian supervisory authority, ANSPDCP.
7. Cookies
In the current configuration, the website does not use advertising, profiling or behavioural analytics cookies. QAPP forms and the account use a technical session cookie that is strictly necessary to protect submissions and maintain authentication. It is not used for advertising and expires at the end of the session or according to the technical security configuration.
If we introduce analytics, advertising, external chat or other non-essential technologies that use cookies, we will update this policy and request consent where required.
8. Security and updates
We use technical and organisational measures proportionate to the risks: HTTPS connections, limited access to required inboxes and infrastructure, and checks against abusive form use. No internet transmission can be guaranteed to be completely risk-free; therefore, do not send confidential information through public forms.
We may update this policy if forms, providers or processing methods change. The last-updated date indicates the applicable version.
Questions about your data?
For access, correction, deletion or any question about this policy, contact us directly.
contact@qapp.ro →