This Privacy Policy was last updated on 30 March 2026. We reserve the right to modify it periodically.
1. Introduction
This Privacy Policy applies to customers and users of our online services at https://cittago.com (hereinafter: “the website”). Each time you use this website you will be subject to the Privacy Policy that is in force at that time, so we encourage you to review this page periodically.
We believe you should feel both informed and empowered when it comes to the way we handle your personal information. This notice explains what data we collect, why we collect it, how we use it, and what rights you have over it.
2. Who Are We?
This website is managed by, and is the property of, Cittago s.r.l. (referred to as “Cittago”, “we”, “us” or “our”).
Cittago s.r.l. is registered and located at:
Str. Muncitorilor 18, Ap. 15
Cluj-Napoca, 400424, Cluj
Romania
Registration number: J12/421/2011 | CUI: 28098325
Phone: +40 734 190 106
Email: [email protected]
Cittago s.r.l. operates in accordance with Romanian legislation and, where applicable, the European General Data Protection Regulation (GDPR – EU 679/2016).
3. What Personal Data Do We Collect?
With the aim of processing orders, providing our advertising platform services, and communicating with you, we collect a minimal set of personal data. This may include:
- First and last name
- Email address
- Phone number
- Billing and company information (where applicable)
- IP address and browser/device information (collected automatically)
- Usage data and behavioural data collected via cookies and similar technologies (see our Cookie Policy)
Please do not provide us with personal data that is not required for the purposes strictly defined in this Privacy Policy.
4. How We Collect Your Data
We collect personal data in the following ways:
- Directly from you – when you register on the website, submit a contact form, place an order, or subscribe to our communications.
- Automatically – when you browse our website, we may automatically collect technical data such as your IP address, browser type, and pages visited, via cookies and similar tracking technologies.
- From third parties – analytics and advertising partners may share aggregated or pseudonymised data with us about how users interact with our platform.
5. Purpose and Legal Basis for Processing
We process your personal data only where we have a lawful basis to do so. The purposes and corresponding legal bases are as follows:
5.1 Order and Service Fulfilment
To create, process, and manage your account and any orders placed through the platform. Legal basis: performance of a contract.
5.2 Marketing Communications
To send you information about products under development, offers, and other relevant updates. Legal basis: your consent, which you may withdraw at any time.
5.3 Website Improvement and Analytics
To analyse how our website is used in order to improve our services, content, and user experience. Legal basis: legitimate interests.
5.4 Legal Compliance
To comply with applicable legal obligations and to defend our legal rights where necessary. Legal basis: legal obligation / legitimate interests.
5.5 Security and Fraud Prevention
To monitor account activity and prevent fraudulent transactions or unauthorised access. Legal basis: legitimate interests.
6. Data Storage and International Transfers
Your personal data is processed within the European Union and will not be transferred to third countries outside the EU without appropriate safeguards in place. Where we use third-party service providers (such as analytics or advertising tools), we ensure they adhere to GDPR requirements and offer adequate levels of data protection.
Personal data will not be sold or communicated to any third parties for their own marketing purposes.
7. How Long Is Your Data Retained?
We retain your personal data for as long as is necessary to fulfil the purposes set out in this Privacy Policy, including for the duration of any contractual relationship and any applicable legal retention periods. For example:
- Accounting and financial records are kept for 10 years in accordance with Romanian legislation.
- Marketing consent records are kept until you withdraw your consent.
- Support and communication records are kept for as long as reasonably necessary for customer service purposes.
8. Who Has Access to Your Data?
Your personal data is processed primarily by Cittago s.r.l. staff. In limited circumstances, access may be granted to:
- External professional consultants (e.g. legal, accounting) who are bound by confidentiality obligations.
- Competent public authorities, where required by law.
- Trusted third-party service providers who support the operation of our website and platform (e.g. hosting, analytics), under appropriate data processing agreements.
We do not share your personal data with third parties for their own commercial purposes.
9. Security Measures
We use the SSL/HTTPS protocol across our website, which encrypts communications between your browser and our servers. In the event of a data breach, we will take immediate steps to ensure system integrity, notify affected individuals where required, and report to the relevant supervisory authority in accordance with GDPR obligations.
10. Cookies and Tracking Technologies
Our website uses cookies and related technologies (scripts, web beacons/pixel tags) to ensure proper functionality, gather statistics, and support advertising activities. Cookies are small files stored on your browser or device when you visit our site.
We use the following categories of cookies:
10.1 Functional / Technical Cookies
These are necessary for the website to function correctly and to remember your preferences. They can be placed without your prior consent.
10.2 Statistics Cookies
We use anonymised statistics cookies (e.g. via Elementor analytics) to understand how visitors interact with our website so we can improve their experience. Your consent is required before these are placed.
10.3 Advertising Cookies
These cookies help us gain insights into campaign performance. They link website visitors to a unique ID but do not profile your interests or serve personalised ads.
10.4 Marketing / Tracking Cookies
These cookies may be used to create user profiles for marketing purposes or to track user behaviour across websites. Because these are classified as tracking cookies, your explicit consent is required before they are placed.
10.5 Social Media
Our website may include content or sharing buttons from social media platforms including Instagram, Facebook, X (formerly Twitter), LinkedIn, WhatsApp, TikTok, Pinterest, Disqus and Snapchat. These integrations may place their own cookies and process data according to their own privacy policies. We recommend reviewing each platform’s privacy policy for more information.
For full details on the cookies we use — including a complete overview of all cookies, their purposes, and how to manage your consent — please visit our Cookie Policy.
You can manage or withdraw your cookie consent at any time using our cookie consent tool (the banner shown on your first visit), or by adjusting your browser settings. Please note that disabling certain cookies may affect the functionality of our website.
11. Your Rights Under GDPR
As a data subject under the General Data Protection Regulation (EU 679/2016), you have the following rights:
11.1 Right to Access (Art. 15 GDPR)
You have the right to obtain confirmation of whether we process your personal data, and to access a copy of that data.
11.2 Right to Rectification (Art. 16 GDPR)
You have the right to correct inaccurate personal data we hold about you, or to have incomplete data completed.
11.3 Right to Erasure (Art. 17 GDPR)
You may request the deletion of your personal data without undue delay where: (i) it is no longer necessary for the purpose it was collected; (ii) you withdraw consent and there is no other legal basis for processing; (iii) you object to processing and there are no overriding legitimate grounds; (iv) the data has been unlawfully processed; or (v) deletion is required by Union or Romanian law.
11.4 Right to Restrict Processing (Art. 18 GDPR)
You may ask us to restrict the processing of your personal data in certain circumstances.
11.5 Right to Data Portability (Art. 20 GDPR)
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to request that we transmit it to another data controller where technically feasible.
11.6 Right to Object (Art. 21 GDPR)
You may object to processing based on legitimate interests, including profiling. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
11.7 Right Not to Be Subject to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing (including profiling) that produce significant effects concerning you.
11.8 Right to Withdraw Consent
Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
11.9 Right to Lodge a Complaint (Art. 77 GDPR)
If you believe we are processing your personal data in violation of the GDPR, you have the right to lodge a complaint with the Romanian National Authority for the Supervision of Personal Data Processing (ANSPDCP): www.dataprotection.ro.
12. Third-Party Websites
Our website may contain links to third-party websites. These sites have their own privacy policies, and we are not responsible for their content or practices. We encourage you to review the privacy policy of any third-party site you visit.
13. Disclosure for Legal Purposes
We may disclose your personal data to public authorities or other parties where we are required to do so by law, or where we believe in good faith that disclosure is necessary for legal compliance, civil proceedings, or criminal investigations. Any such disclosure will be made in compliance with applicable Romanian and EU law.
14. Contact Details
For any questions, requests, or concerns regarding this Privacy Policy or the processing of your personal data — including to exercise any of the rights listed above — please contact us:
Cittago s.r.l.
Str. Muncitorilor 18, Ap. 15
Cluj-Napoca, 400424, Cluj
Romania
Website: https://cittago.com
Email: [email protected]
Phone: +40 734 190 106
This Privacy Policy was last updated on 30 March 2026.
