Privacy Policy
Last updated: June 17, 2026
1. Who we are
This Privacy Policy explains how REDVECTOR S.R.L. (“Redvector”, “we”, “us”, “our”) collects, uses and protects your personal data when you visit the website governancedesk.com or get in touch with us. Governance Desk is a brand of Redvector.
Registered office: Piscul Răchitei nr. 11, Corp A, Sc. 1, Et. 1, Sector 3, Bucharest, Romania
CIF: RO15066119 · EUID: ROONRC.J2002012558403
Contact for data protection matters: gdpr@redvector.ro
We are the data controller for the personal data described in this policy.
2. What data we collect
We only collect data you choose to provide or that is necessary for the website to function:
- When you contact us (demo request or contact form): your name, email address, phone number, company name, and any information you include in your message.
- When you subscribe to our newsletter: your name and email address.
- When you use the AI project assistant: the messages you send during the conversation, used to prepare a project brief. Please avoid sharing sensitive personal data or confidential information in the chat.
- Automatically, when you browse: technical data such as IP address, browser type, device information and pages visited, collected through cookies and similar technologies (see Section 8).
We do not intentionally collect special categories of personal data (such as health, religious or political data). Please do not submit such information through our forms or chat.
3. Why we use your data and our legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Responding to your enquiries and project requests | Steps taken at your request prior to a contract / our legitimate interest in answering you |
| Sending newsletter emails | Your consent |
| Generating a project brief via the AI assistant | Steps taken at your request / our legitimate interest |
| Operating and securing the website | Our legitimate interest |
| Complying with legal obligations | Legal obligation |
You can withdraw consent (for example, for the newsletter) at any time, without affecting processing carried out before withdrawal.
4. The AI assistant
Our website may offer an optional AI assistant that helps you describe a potential project. The conversation is processed to generate a structured brief that you may then choose to send to our team.
The assistant is powered by Anthropic (Claude), which processes the conversation content on our behalf in order to generate responses, under a data processing agreement. We instruct Anthropic to process this data solely for the purpose of delivering this service.
The AI assistant is provided for convenience and informational purposes only. It does not make automated decisions that produce legal or similarly significant effects about you, and it does not provide binding quotes or commitments. Please do not enter passwords, financial details or other sensitive information into the chat.
5. How long we keep your data
We keep personal data only as long as necessary for the purposes described above:
- Enquiry and project data: for the duration of our discussions and, where a working relationship begins, for as long as required to manage it and to comply with our legal obligations.
- Newsletter data: until you unsubscribe.
- Technical and analytics data: for the retention period configured in Google Analytics and described in our cookie settings.
When data is no longer needed, we delete or anonymise it.
6. Who we share data with
We do not sell your personal data. We may share it with the following categories of recipients, who act as our processors under contract:
- Hosting: Hetzner Online GmbH (dedicated servers), which hosts our website and stores data on our behalf within the European Union.
- Analytics: Google (Google Analytics), which helps us understand how the website is used.
- AI provider: Anthropic, which processes AI assistant conversations in order to generate responses.
- Authorities or third parties, where required by law.
Our newsletter is operated in-house through our own systems; we do not share newsletter data with external email-marketing providers.
Some providers (such as Google and Anthropic) may process data outside the European Economic Area. Where this happens, we ensure appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses.
7. Your rights
Under the GDPR, you have the right to:
- access the personal data we hold about you;
- request correction of inaccurate data;
- request deletion of your data;
- restrict or object to processing;
- request data portability;
- withdraw consent at any time.
You also have the right to lodge a complaint with the Romanian supervisory authority, ANSPDCP — Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (www.dataprotection.ro).
To exercise any of these rights, contact us at gdpr@redvector.ro. We will respond within the timeframes required by law.
8. Cookies
We use cookies and similar technologies to make the website work and to understand how it is used, including Google Analytics. Analytics and other non-essential cookies are only used with your consent, which you can give or withdraw through our cookie banner or at any time via Cookie settings. You can also manage cookies through your browser settings.
9. Data security
We take reasonable technical and organisational measures to protect your data against unauthorised access, loss or misuse. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
10. Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page, with the “last updated” date revised accordingly.
11. Contact
For any questions about this policy or your personal data, please contact us:
REDVECTOR S.R.L.
Piscul Răchitei nr. 11, Corp A, Sc. 1, Et. 1, Sector 3, Bucharest, Romania
Email: gdpr@redvector.ro