GDPR / DPO
GDPR data request form.
Exercise your rights under Regulation (EU) 2016/679. Requests are processed by the Data Protection Officer within 30 calendar days.
Identity verification
To prevent abusive requests, please confirm that your email address is valid. You will receive a 6-digit code.
Data Controller
NOIDEEA S.R.L.
CUI: RO48069626
Calea Vitan 242, Corp C2 Parter Birou 17, Sector 3, București
Legal basis
Regulation (EU) 2016/679 (GDPR): Chapter III: Rights of the data subject.
Response deadline
Maximum 30 calendar days from receiving the complete request (Art. 12 GDPR). In complex cases, the deadline may be extended by an additional 60 days, with prior notice.
Supervisory authority
If you believe your rights are not respected, you may lodge a complaint with ANSPDCP (National Authority for Personal Data Processing Supervision).
Your rights under GDPR
GDPR grants you eight fundamental rights regarding your personal data. You can exercise any of these rights at any time, free of charge, using the form above.
Art. 15 GDPR
Right of access
You can request confirmation of whether we process your data and receive a full copy. We will also detail the purposes, categories, recipients and retention period.
Art. 16 GDPR
Right to rectification
If your personal data is inaccurate or incomplete, you can request immediate correction. We will rectify the data without undue delay and notify you when done.
Art. 17 GDPR
Right to erasure
Request erasure when data is no longer needed, you withdraw consent, or it was unlawfully processed. Some data may be retained for legal obligations.
Art. 18 GDPR
Right to restriction
You can restrict processing when you contest data accuracy, processing is unlawful, or you need data for legal claims while awaiting verification.
Art. 20 GDPR
Right to data portability
Receive your data in a structured, machine-readable format and transfer it to another controller. Applies when processing is based on consent or a contract.
Art. 21 GDPR
Right to object
Object at any time to processing based on legitimate interests or for direct marketing. When you object to marketing, we stop immediately.
Art. 22 GDPR
Right against automated decisions
You cannot be subject to decisions based solely on automated processing that significantly affect you. Status Dosar does not use automated decision-making against users.
Art. 7 GDPR
Right to withdraw consent
Withdraw your consent at any time without affecting previous lawful processing. Use account settings or contact our DPO.
Frequently asked questions about your data
What personal data does Status Dosar process?
Status Dosar processes account data (name, email, phone/CNP/CUI), usage data (saved cases, alerts, monitoring preferences), billing data (paid plans, transaction reference: no PAN/CVV) and support communications. We do not process special categories of data per GDPR Art. 9 (health, biometrics, religion). For data on criminal convictions and offenses (GDPR Art. 10), present in court files retrieved from public sources (ECRIS), see Privacy Policy §4.
How long is my data kept?
Account data is kept for the duration of the contract; on voluntary deletion, a 30-day grace period is observed, after which personal data is permanently erased. Billing data is kept for 10 years (Law 82/1991 on accounting). Application logs are kept for 90 days; immutable audit-trail for the duration of the contract plus 5 years. GDPR consents are kept for at least 5 years after contract termination, as proof under Art. 7 GDPR.
More details: privacy policy · cookie policy · contact us