Privacy notice

Who we are

MD QMS S.R.L. is the controller of personal data collected through this website. Registered office: Str. Ecaterina Teodoroiu nr. 21, Voluntari, Ilfov 077190, Romania. Fiscal code (CUI): 54809966. Contact: contact@mdqms.org.

What we collect and why

Enquiries: when you contact us or book a call, we collect your name, work email, company and the information you share about your devices. We use it to respond and, if you ask, to prepare a quote. Legal basis: our legitimate interest in responding to business enquiries, or steps taken at your request before entering into a contract (GDPR Art. 6(1)(f) and (b)).

Clients: if you become a client, we process business contact details needed to perform our role and meet our legal obligations, including those under the MDR.

Website operation: our hosting provider processes technical data such as IP addresses in server logs to deliver and secure the site.

Who we share it with

We use service providers who process data on our behalf: our CRM (HubSpot, EU data centre), which receives the details you send through our booking and message forms; Microsoft 365, which holds our calendars and sends meeting invitations; Cloudflare Turnstile, which checks that form submissions come from a person and processes your IP address and browser information for that purpose; our website and booking-service host (Vercel); Google Fonts (which receives your IP address when fonts load); and, only with your consent, Google Analytics. We don’t sell personal data. Where data is transferred outside the EEA, we rely on appropriate safeguards such as the EU Standard Contractual Clauses or an adequacy decision. We share data with competent authorities where the law requires it.

Cookies and analytics

If you click Accept in the cookie banner, we use Google Analytics (Google Ireland Limited) to see which pages are visited and which lead to a booking or message. It sets first-party cookies (_ga and _ga_…) that last up to two years. We also note in your browser tab (session storage, cleared when the tab closes) how you reached the site: campaign tags, the referring site and your first page. That is sent to us only if you book a call or send a message, so we know which channels work. Legal basis: your consent (GDPR Art. 6(1)(a)).

If you decline, or don’t choose, no analytics script loads and none of this is stored. You can change your choice at any time with “Cookie settings” at the bottom of every page. We don’t use advertising cookies. Embedded forms may set cookies that are necessary for them to work.

How long we keep it

We keep personal data only as long as needed for the purpose it was collected for. Records we must keep under the MDR or tax law are kept for the periods those laws require.

Your rights

You have the right to access, rectify or erase your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time. To exercise these rights, email contact@mdqms.org. You can also complain to the Romanian data protection authority, ANSPDCP (dataprotection.ro).