Skip to content

Privacy policy

Contents

Our Privacy Policy gives you information about:

  • What information we collect and for what purpose;
  • How we use the information collected;
  • The options we offer and how the information collected can be accessed and updated.

Information about the protection of personal data

Since 25 May 2018, all Member States of the European Union (EU) have been required to apply Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, hereinafter the “Regulation” or the “GDPR”.

Collection of personal data

Certain personal data is requested when you wish to contact our team to engage the services we offer, by filling in the contact form on our website www.leadlion.ro.

Data collected and purpose of collection

We process personal data on the legal bases for processing set out in the GDPR, namely:

  • the conclusion and performance of contracts involving personal data such as first name and surname, address, telephone number, email address, identification data, etc., under Article 6(1)(b) GDPR;
  • steps taken at your request prior to entering into a contract, under Article 6(1)(b) GDPR, for requests sent through the contact form, and legitimate interest, under Article 6(1)(f) GDPR, for the form’s anti-bot check (details in the section “Contact form”);
  • applicable legal obligations, under Article 6(1)(c) GDPR, for the data needed to issue invoices;
  • consent, under Article 6(1)(a) GDPR, for data used for marketing purposes relating to visitors to the www.leadlion.ro website (e.g. newsletter subscription, marketing cookies, etc.);
  • legitimate interest, under Article 6(1)(f) GDPR, for data used for marketing purposes relating to existing clients (security of the www.leadlion.ro website, in line with Recital (49) of the GDPR) and for data used internally to optimise our website (anonymised or pseudonymised, as the case may be).

Contact form

When you send us a request through the contact form on our website, we collect the data you fill in: your name, company, email address, telephone number, the link to your online store, the platform you use and your message (on some pages, the project details). Not every form has all of these fields. Along with the request, we record the page you sent it from, the page language, the date and time it was sent and your agreement to the processing of your data.

We use this data to reply to your request and to discuss a possible collaboration, that is, for steps taken at your request prior to entering into a contract, under Article 6(1)(b) GDPR. The tick box in the form confirms that you have read this policy.

Your request reaches us by email at office@leadlion.ro, a mailbox hosted on Google Workspace. A copy of the request is kept on the website’s hosting server (Spatiul.ro, Romania), so that it is not lost if the email does not arrive. The copy does not contain your IP address and is deleted automatically after 90 days.

The form uses Cloudflare Turnstile, an anti-bot check that tells people apart from automated programs. Most of the time the check is invisible; occasionally it asks you to tick a box. Turnstile loads from Cloudflare, Inc. (USA) when you scroll to the form or start filling it in, and receives your IP address and technical information about your browser and connection (for example, the browser type and version). When you submit the form, our server checks the result with Cloudflare, together with your IP address. To protect the form, we also limit the number of requests sent from the same IP address; for this limit, the IP address is stored on the server only as a fingerprint (hash), never in plain text. The anti-bot check and the request limit are based on our legitimate interest in protecting the website and the form against abuse and automated messages (Article 6(1)(f) GDPR). Cloudflare processes this data in accordance with the Turnstile Privacy Addendum.

Who do we collect personal data from?

We collect personal data from users in three ways:

  • directly from you, when you fill in the contact form or contact us by phone;
  • traffic data, from the user’s browser;
  • through cookies.

When you visit a website, you transmit a set of information about yourself, such as your IP address, the time of your visit, the place from which you entered the site and information about your device (such as the hardware model, the operating system version, the browser used, etc.). In line with other operators, we record this information in order to improve the user experience and the quality of the services we offer.

Any statistics on our users’ traffic that are provided to partners or third-party advertising networks are supplied only as aggregated data and do not include any personally identifiable information about any individual user.

You may provide your personal data voluntarily, without seeking to enter into a collaboration, or on a mandatory basis, for the conclusion of a contract, its registration and the issue of an invoice.

Data is processed as follows:

  • when a request from a client or a potential client is registered;
  • for the conclusion of a service contract;

Purpose of processing personal data

Your personal data is processed in compliance with the GDPR, as set out in the section “Data collected and purpose of collection”.

If we need to process your data for purposes other than those mentioned above, you will be informed in writing before the processing, which will take place only with your express consent.

Cookies

Cookies can be defined as small pieces of information that a website sends to users for record-keeping purposes. While you browse a website, cookies save your preferences, which makes browsing more pleasant and easier for you.

LEADLION uses cookies to properly analyse the behaviour of users who access our website, so that we can provide our services correctly and users can benefit from all the features our website has.

Cookies can be disabled through your browser preferences. This way, you can choose to have your browser refuse cookies or indicate when they are being sent. Please note that disabling cookies may make it impossible to use certain features of the site, make it impossible to use the site at all, or result in very slow loading times.

Disclosure of personal data

Your personal data is not disclosed to third parties, except to the providers that help us run the website and the contact form:

  • Spatiul.ro (Space Ro SRL, Romania): hosting of the website and of the copies of requests sent through the form;
  • Cloudflare, Inc. (USA): delivery of the website’s pages and the Cloudflare Turnstile anti-bot check;
  • Google (Google Workspace): the email service through which we receive requests at office@leadlion.ro.

Spatiul.ro and Google process the data on our behalf. Cloudflare processes the Turnstile data on our behalf and, to improve its bot detection, on its own behalf.

If the situation requires it, you will be informed promptly and asked to give your consent, where applicable.

Personal data storage period

In accordance with the GDPR, your personal data is stored for a limited period of time, namely for the entire duration of the contract for our services, until the contract term expires. Billing data will be deleted in accordance with the existing legal obligations.

Requests sent through the contact form are kept in the office@leadlion.ro mailbox while we discuss a collaboration: if we enter into a contract, for the duration of the contract; if not, for no more than 12 months after the last message exchanged. The copy on the hosting server is deleted automatically after 90 days.

Transfer of personal data outside the EU or EEA

The website’s hosting server (Spatiul.ro) is located in Romania. Cloudflare, Inc. (USA) and Google may also process data outside the EU or EEA, including in the USA; you can find information about these transfers in their privacy policies: Cloudflare and Google. Apart from these providers, LEADLION will not transfer personal data to countries outside the EU or EEA.

Security of personal data

The security of personal data is a priority for S.C. LeadLion S.R.L., which is why we have implemented a number of security measures, such as: recovery of personal data, detection of security breaches and limitation of security breaches.

If we find that the security of your personal data has been breached, we will act to mitigate the risk of harm. If a high risk to the rights and freedoms of the data subject is established, ANSPDCP (the Romanian data protection authority) will be notified as soon as possible.

Rights of the user as a data subject

Under the GDPR, the user, as a data subject, has the following rights:

  • The right to be informed: the right to be informed about all the aspects set out above;
  • The right of access: the right to obtain confirmation from us as to whether or not we process personal data concerning you and, if so, access to that data and to information about how it is processed;
  • The right to object: the possibility to object to the processing of your personal data if the processing is necessary for the performance of a task carried out in the public interest. In addition, if your personal data is processed for direct marketing purposes, you have the right to object to the processing at any time;
  • The right to data portability: you have the right to receive your personal data in a machine-readable format that allows the data to be transmitted directly to another controller.
  • The right to erasure (“the right to be forgotten”): you can request that your data be erased without undue delay. This right applies if: the data is no longer necessary for the purposes for which it was collected or processed; you withdraw your consent and there is no other legal ground for the processing; you object to the processing and there are no overriding legitimate grounds; the personal data has been processed unlawfully;
  • The right to restriction of processing: you have the right to request that the processing of your data be restricted for a period of time;
  • The right to rectification: you can request the rectification of certain personal data if it is incomplete or inaccurate;
  • The right to lodge a complaint with the Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal (ANSPDCP), if you find that your rights regarding the processing of personal data have been infringed.

Changes

We reserve the right to amend our Privacy Policy. The rights you have under this Privacy Policy will not be reduced without your express consent. Any changes to the Privacy Policy will be posted on www.leadlion.ro and, if the changes are significant, we will provide a more prominent notice.

Last updated: 23 October 2026.

How can you contact us?

For any information or questions about the protection of personal data, you can contact us:

Email: office@leadlion.ro

Address: Emanoil Porumbaru 80, 2nd floor, apt. 6, Sector 1