Privacy Policy

Who handles your personal data

VEXIDIO SRL, a company registered in Romania and trading as RivalKite, is the controller for the personal data described here. For privacy questions or requests, use our contact form.

What we collect and why

• Website visits. Cloudflare hosts the site and processes connection information, such as your IP address and request details, to serve and protect the site. Our legitimate interest is to operate the site reliably and securely.
• Website analytics. Cloudflare Web Analytics is added by Cloudflare when it serves the site. It records page views, the referring page, country, browser and device type, and performance metrics. It sets no cookies and uses no local storage or fingerprinting. Cloudflare, Inc. processes this data. Our legitimate interest is to understand how the site is used and how it performs.
• Sample requests and other inquiries. If you use a form on the site or email us, we receive your email address and what you choose to send. A sample request typically includes your company, competitors, priority markets, and research interests. Forms are sent through Cloudflare, which delivers your submission to our inbox by email. We use it to respond, clarify scope, and prepare the sample or proposal. Where you request steps toward a contract with you, we process the relevant details to take those steps. Where you act for an organization or ask a general question, our legitimate interest is to respond and manage business inquiries. We need your email address to reply and enough information about your request to act on it.
• Client engagements. We use business contact details, correspondence, and billing information to set up and deliver work, manage the relationship, and keep transaction records. The basis is contract performance when you are personally a party to the contract, our legitimate interest in managing business relationships when you represent a client organization, and compliance with applicable recordkeeping obligations.
• Spam protection. Our forms use Cloudflare Turnstile to check that a person, not a bot, is submitting them. Turnstile processes technical information about your browser and connection for this check. Our legitimate interest is to keep the forms free of spam and abuse.
• Insights emails. If you subscribe through the site or send us a subscription request, we use your email address to send you RivalKite Insights on the basis of your consent. You can withdraw consent at any time by emailing us and asking to unsubscribe.

Please keep patient information, medical records, and confidential documents out of website inquiries. If confidential material is needed for an engagement, we agree on how to handle it first.

Who receives data

Service providers that support hosting, website analytics and email may process data as needed to deliver those services. Where required, we also disclose relevant data to authorities or other parties entitled to receive it by law.

Some providers, such as Cloudflare, may process data outside the European Economic Area. Where they do, the transfer relies on an appropriate safeguard, such as the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses. You can ask us for more information about these safeguards.

How long we keep it

We keep inquiry correspondence for as long as needed to respond and follow up. We keep client records as needed to deliver and administer the engagement, meet applicable recordkeeping obligations, and handle any related claims. We keep subscription details while you are subscribed and may retain the minimum information needed to honor an unsubscribe request.

Cloudflare keeps technical request logs for a short period to operate and secure the site.

Cookies

The site does not set cookies of its own. Cloudflare Web Analytics, described above, sets no cookies and uses no local storage or fingerprinting. The site has no advertising or other tracking tools, so there is no cookie banner. Cloudflare Turnstile, which protects our forms, loads only on pages that have a form.

Your rights

Where applicable, you can ask for access to your data, correction, deletion, restriction of processing, or a portable copy. You can object to processing based on legitimate interests and withdraw consent for processing based on consent. Withdrawal applies going forward. You can also complain to your data protection authority. In Romania, this is the National Supervisory Authority for Personal Data Processing (ANSPDCP, dataprotection.ro).

To exercise your rights, use our contact form.