Legal

Privacy policy

We process personal data exclusively within the framework of the General Data Protection Regulation (GDPR) and supplementary national provisions. This policy explains the nature, scope and purpose of processing and your rights.

Last updated: September 2026

Controller

Controller: Adeo Solutions SRL
Address: Strada Patrioților 12, Camera 3, Biroul 4, 077105 Comuna Glina, Ilfov County, Romania
Managing directors: Matthias Lesch, Tim Werner
Email: contact@adeo-solutions.io

Data protection officer

The appointment of a data protection officer is not legally required and none has been appointed. For any data protection matters, you can reach us at contact@adeo-solutions.io.

Principles and legal bases

We only process personal data where there is a legal basis. The following bases are particularly relevant:

Art. 6(1)(b) GDPR — to perform a contract or take pre-contractual steps,
Art. 6(1)(f) GDPR — to safeguard our legitimate interests (e.g. secure operation of the website, responding to enquiries),
Art. 6(1)(a) GDPR — on the basis of your consent,
Art. 6(1)(c) GDPR — to comply with legal obligations.

Data processing when visiting the website

When you access our website, the hosting provider automatically processes server log data: shortened IP address, date and time of access, page requested, volume of data transferred, referrer URL and information about your browser and operating system. The purpose is the secure and stable operation of the website; the legal basis is Art. 6(1)(f) GDPR. This data is stored only briefly and then deleted or anonymised.

Our website is provided through the Lovable service and delivered via the Cloudflare content delivery network. Data processing agreements pursuant to Art. 28 GDPR are in place with these providers; where data is transferred to the USA, the EU standard contractual clauses apply.

Reach measurement with Plausible Analytics

We use Plausible Analytics to analyse website usage statistically. Plausible works without cookies, without cross-device identifiers and without storing personal data on your device. Only aggregated, anonymous usage statistics are collected; IP addresses are not stored. Processing takes place on EU servers.

The legal basis is our legitimate interest in privacy-friendly reach measurement (Art. 6(1)(f) GDPR). As no information is accessed on your device, no consent under Section 25 TDDDG is required.

Contact form and email contact

If you contact us via the contact form or by email, we process the data you provide — in particular your name, business email address and the content of your enquiry (the roles and market you ask about) — to handle your request. The legal basis is Art. 6(1)(b) and (f) GDPR.

The form data is transmitted to us and sent via our email service provider Resend (Resend, Inc., USA; delivered through Amazon SES), with which a data processing agreement pursuant to Art. 28 GDPR and the EU standard contractual clauses are in place. We store the data until your enquiry has been fully dealt with, and beyond that only where statutory retention periods require it.

Online appointment booking

Online appointment booking (Cal.com) is in preparation. Until it is activated, no data is processed through it. Once the feature is available, we will add the specific details of the data processed and the legal basis.

Recipients and processors

To provide our services we use carefully selected service providers that process data only on our instructions:

hosting and delivery (Lovable, Cloudflare),
reach measurement (Plausible Analytics, EU),
email delivery of the contact form (Resend),
in future, online appointment booking (Cal.com).

Data processing agreements pursuant to Art. 28 GDPR are in place with all processors.

Transfers to third countries

Processing generally takes place within the EU or the EEA. Where individual service providers transfer data to a third country, this only happens on the basis of an adequacy decision or appropriate safeguards, in particular the EU standard contractual clauses.

In the course of our staffing services, processing may take place in Serbia (a non-EU country). This is governed by separate agreements with our clients (data processing agreement plus EU standard contractual clauses) and is not part of the operation of this website.

Data processing in the context of our services

When we provide staffing services to business clients, each party is an independent controller: the client for the data and instructions it provides, and Adeo for the employment relationship with the team members. Where processing on behalf occurs in an individual case, the parties conclude an agreement pursuant to Art. 28 GDPR; for processing in third countries (e.g. Serbia), the EU standard contractual clauses are agreed.

Your rights

Under the GDPR you have the following rights:

access to the data processed (Art. 15 GDPR),
rectification of inaccurate data (Art. 16 GDPR),
erasure (Art. 17 GDPR),
restriction of processing (Art. 18 GDPR),
data portability (Art. 20 GDPR),
objection to processing (Art. 21 GDPR),
withdrawal of consent with effect for the future (Art. 7(3) GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). As we are established in Romania, this is the Romanian authority ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal). Data subjects resident in Germany may also contact the data protection authority responsible for their place of residence.

Storage period

We store personal data only for as long as is necessary for the respective purposes or as required by statutory retention periods (in particular under commercial and tax law). The data is deleted thereafter.

Updates and changes

We adapt this privacy policy whenever changes to our processing or to the legal situation make it necessary. The version published on this page applies in each case.

This information has been prepared with care and is kept up to date. It does not constitute legal advice.