Privacy policy

This website is operated by ENKI Medical Tech SRL, a company based in Romania ("ENKI", "we"). ENKI is the controller of the personal data described in this policy.

For any question or request about your personal data, write to us through the contact form on this website.

Contact form: your name, email address, organisation (optional), the topic you choose and your message. To protect the form from abuse we also store a hashed (irreversible) form of your IP address and your browser's identification string.

Technical data: like any website, our hosting provider keeps short-lived server logs (IP address, request time, requested page) for security and reliability.

We do not use analytics, advertising or tracking technologies, and the public website sets no cookies. The private administration area used by ENKI staff uses strictly necessary session cookies only.

We use contact-form data to answer your enquiry and, where relevant, to prepare a business relationship you have asked about. The legal basis is our legitimate interest in responding to enquiries and, where applicable, steps taken at your request prior to a contract.

We use technical data and the hashed IP address to keep the website and the form secure. The legal basis is our legitimate interest in protecting our services.

Contact messages are kept for as long as needed to handle your enquiry and for up to 24 months after our last exchange, unless a longer period is required by law. Server logs are kept by our hosting provider for a limited period only.

Contact messages are stored with Supabase on infrastructure located in the European Union (Ireland). The website is delivered by Vercel through a global content delivery network; where technical data is processed outside the European Union, it is protected by the European Commission's Standard Contractual Clauses.

We do not sell personal data and we do not share it with third parties for their own purposes.

Under the General Data Protection Regulation you can ask for access to your data, its correction or deletion, the restriction of its processing, its portability, and you can object to processing based on legitimate interest. To exercise these rights, contact us through the form on this website.

You also have the right to lodge a complaint with the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP, dataprotection.ro).

We may update this policy as the website evolves. The date at the top shows the latest version.