REGULATORY FRAMEWORK

1. Data Controller Identification

The data controller responsible for processing personal data under this Privacy Protocol is TaveriqHub, registered at 137255 | Str. Sub Coasta nr. 8 | Sat Gura Ocnitei, Jud. Dambovita | Romania. For all data-related inquiries, contact our designated officer at [email protected].

2. Categories of Personal Data Collected

We collect and process the following categories of personal data through our operational interfaces:

• Identification Data: Full name, professional designation, organizational affiliation provided through contact forms.
• Communication Data: Email address, telephone number, and message content transmitted through our contact interfaces.
• Technical Data: IP address, browser type and version, operating system, device identifiers, and access timestamps automatically collected during site navigation.
• Navigation Data: Pages visited, time spent on pages, navigation patterns, and interaction metrics collected through essential operational cookies.

3. Legal Basis for Processing

Personal data processing is conducted under the following legal bases as defined in Article 6 of the EU General Data Protection Regulation (GDPR):

• Consent (Art. 6(1)(a)): Where you have provided explicit consent for specific processing activities, such as marketing communications.
• Contract Performance (Art. 6(1)(b)): Processing necessary for the performance of a contract or pre-contractual measures taken at your request.
• Legitimate Interest (Art. 6(1)(f)): Processing necessary for our legitimate interests in maintaining service quality, security, and operational efficiency, provided such interests are not overridden by your fundamental rights.
• Legal Obligation (Art. 6(1)(c)): Processing required to comply with legal obligations under Romanian and EU law.

4. Data Retention Periods

Personal data is retained only for the duration necessary to fulfill the purposes for which it was collected:

• Contact form submissions: 24 months from date of receipt
• Contract-related data: Duration of contractual relationship plus 5 years ( Romanian fiscal retention requirements)
• Technical/Analytics data: 13 months from collection
• Cookie data: As specified in our Cookie Protocol (see Section 2)

5. Data Recipients and Transfers

Your personal data may be shared with the following categories of recipients:

• Infrastructure Providers: Cloud hosting services (EU-based processors) for secure data storage.
• Communication Platforms: Email transmission services for operational correspondence.
• Analytics Services: Privacy-compliant analytics providers operating under EU adequacy decisions or Standard Contractual Clauses.
• Legal Authorities: When required by court order, regulatory mandate, or legal obligation.

We do not sell, rent, or trade personal data to third parties for their marketing purposes.

6. Your Rights Under GDPR

As a data subject, you possess the following rights which you may exercise by contacting [email protected]:

• Right of Access (Art. 15): Obtain confirmation of processing and access to your personal data.
• Right to Rectification (Art. 16): Request correction of inaccurate personal data.
• Right to Erasure (Art. 17): Request deletion of your personal data under specified circumstances.
• Right to Restriction (Art. 18): Request limitation of processing in certain scenarios.
• Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format.
• Right to Object (Art. 21): Object to processing based on legitimate interests or direct marketing.

We will respond to all legitimate requests within 30 calendar days. You also have the right to lodge a complaint with the Romanian Supervisory Authority (ANSPDCP) if you believe your data protection rights have been infringed.

7. Data Security Measures

TaveriqHub implements appropriate technical and organizational measures to protect personal data, including:

• SSL/TLS encryption for all data in transit
• AES-256 encryption for data at rest
• Regular security audits and penetration testing
• Access controls with principle of least privilege
• Incident response procedures and breach notification protocols

1. What Are Cookies

Cookies are small text files deposited on your device when you access our digital infrastructure. They enable our systems to recognize your browser session and maintain operational state across navigation sequences.

2. Categories of Cookies Deployed

TaveriqHub utilizes the following cookie classifications:

• Essential Cookies (Strictly Necessary): Required for core site functionality including session management, security tokens, and cookie consent state. These cannot be disabled as they are fundamental to site operation.
• Functional Cookies: Enable enhanced functionality such as language preferences, region selection, and interface customization. These improve user experience but are not strictly required.
• Analytics Cookies: Collect anonymized data about site usage patterns including page views, navigation flows, and technical performance metrics. All analytics data is aggregated and cannot be used to identify individual users.

3. Cookie Duration

• Session Cookies: Automatically terminated when you close your browser. These maintain state during active navigation sessions.
• Persistent Cookies: Remain on your device for a predetermined period or until manually deleted. Maximum retention period is 13 months from deployment.

4. Managing Cookie Preferences

You may exercise control over non-essential cookies through:

• Our Cookie Consent Banner (displayed upon initial visit)
• Browser configuration settings to block or delete cookies
• Opt-out mechanisms provided by analytics services

Disabling essential cookies may impair site functionality. Disabling non-essential cookies will not affect core operations but may reduce personalization capabilities.

5. Third-Party Cookies

Some cookies are deployed by third-party services integrated into our platform:

• Google Maps: When you interact with our embedded map, Google may deploy cookies according to their privacy policy.
• Analytics Providers: Anonymized usage data collection for service optimization.

We do not permit advertising or tracking cookies from third parties on our infrastructure.

1. Eligibility Criteria

Refund requests are evaluated based on the following criteria:

• Service Non-Delivery: Full refund applicable if contracted services are not initiated within 14 calendar days of payment without mutual agreement on alternative timelines.
• Material Deficiency: Partial or full refund where delivered work materially deviates from agreed specifications and cannot be remediated within reasonable timeframes.
• Early Termination: Client-initiated termination subject to work-completion assessment and proportional billing for services rendered up to termination date.

2. Milestone-Based Payment Structure

Projects exceeding 2,000€ are structured using milestone-based payment schedules:

• Initial Deposit: 30% due upon contract execution. Refundable if project is cancelled before work initiation.
• Development Milestones: Payments released upon verified completion of defined deliverables. Refund for incomplete milestones assessed proportionally.
• Final Release: Remaining balance due upon successful deployment and client acceptance testing.

3. Refund Processing

Approved refunds are processed within 14 business days to the original payment method. International wire transfers may require additional processing time. Refund amount calculation considers:

• Services completed and accepted at time of request
• Third-party costs incurred (licenses, infrastructure provisioning)
• Administrative processing fees (maximum 5% of refunded amount)

4. Non-Refundable Items

• Completed and accepted deliverables
• Third-party license fees already procured
• Consultation sessions already conducted
• Domain registration and SSL certificate fees

1. Service Scope and Acceptance

Engagement with TaveriqHub services constitutes acceptance of these directives. Service scope is defined in individual project proposals and statements of work. Any modifications to agreed scope require written amendment signed by both parties.

2. Intellectual Property Transfer

Upon final payment receipt, all intellectual property rights for custom-developed deliverables transfer to the client. This includes:

• Source Code: Complete ownership of custom codebases developed for the project.
• Design Assets: All visual designs, mockups, and creative assets produced for the engagement.
• Documentation: Technical documentation, user guides, and API specifications.

Reserved Rights: TaveriqHub retains rights to general methodologies, frameworks, and reusable components developed independently or refined during engagements.

3. Client Obligations

Successful project execution requires client commitment to:

• Timely provision of project requirements, feedback, and approvals
• Designated decision-maker authority for project milestones
• Access to necessary systems, credentials, and infrastructure
• Content delivery according to agreed schedules
• Testing and acceptance within defined review periods

4. Limitation of Liability

TaveriqHub liability is limited to the total fees paid for the specific service giving rise to the claim. We shall not be liable for:

• Indirect, consequential, or incidental damages
• Loss of profits, data, or business opportunities
• Third-party claims arising from client's use of deliverables
• Damages resulting from force majeure events

5. Confidentiality

Both parties agree to maintain confidentiality of proprietary information shared during the engagement. This obligation survives contract termination for a period of 3 years. Exclusions apply to information that:

• Was publicly available at time of disclosure
• Becomes publicly available through no fault of the receiving party
• Is independently developed without use of confidential information
• Must be disclosed by law or regulatory requirement

6. Governing Law and Jurisdiction

These directives are governed by Romanian law and EU regulatory frameworks. Any disputes shall be submitted to the jurisdiction of competent courts in Targoviste, Dambovita County, Romania. Prior to litigation, parties agree to engage in good-faith mediation for a minimum period of 30 days.