Privacy Policy – INNOVATION DRIVEN EXPERIENCES S.R.L.

Last updated: 20.09.2025

This Privacy Policy describes how INNOVATION DRIVEN EXPERIENCES S.R.L. (“we”, “our company”), based in Sibiu, Romania, collects, uses, and protects the personal data of visitors and customers of the website https://additive-point.com.

1. Who We Are

Data Controller: INNOVATION DRIVEN EXPERIENCES S.R.L.
Headquarters: HAMBA, Str. PRIMĂRIEI, Nr. 178, județ SIBIU
Company Registration Number (CUI): 43156845
E-mail: contact@additive-point.com
Phone: +40735187796

2. What Data We Collect and Why

We collect only the data necessary to provide our services, as follows:
• Contact / Quote Request Form: First Name, Last Name, Phone Number, Email, Country, City/Locality, Postal Code, Company Name (optional), Message. Purpose: responding to inquiries and providing quotes.
• Product/Article Comments: Name, Comment Title, Comment Content, IP Address. Purpose: publication and moderation of comments.
• Checkout Page (future): The above data plus the full shipping address and payment details. Purpose: order processing and invoicing.
• Server Logs & Backups: IP addresses and technical data necessary for site security and backup.

3. Legal Basis for Data Processing

We process personal data in accordance with Regulation (EU) 2016/679 (GDPR), based on the following legal grounds:
• Consent – for data submitted through the contact/quote request form and for comments.
• Contract performance – for data collected to process orders and issue invoices.
• Legal obligation – for the retention of accounting and tax data as required by applicable legislation.
• Legitimate interest – to ensure the security of the website and manage potential misuse.

4. Data Retention Period

• Contact form and comment data: kept for up to 2 years or until deletion is requested.
• Invoicing data: kept for at least 5 years in compliance with tax laws.
• Server logs: kept according to the hosting provider’s policies.

5. Your Rights

Under GDPR, you have the right to:
• Access your personal data.
• Request rectification or deletion of data (“right to be forgotten”).
• Restrict or object to processing.
• Data portability.
• File a complaint with the National Authority for the Supervision of Personal Data Processing (www.dataprotection.ro).

6. Data Transfer to Third Parties

To provide our services, we transfer certain data to:
• Netopia – for online payment processing.
• SmartBill – for invoicing.
• Cyberfolks – for website hosting and backup.
These partners also comply with the GDPR requirements.

7. Data Security

We implement technical and organizational measures to protect personal data, including encrypted communication (SSL), regular backups, and access restricted to authorized personnel only.

8. Cookies

The website uses only strictly necessary cookies required for the operation of the platform (e.g., maintaining the shopping cart). We currently do not use cookies for analytics or marketing purposes. If we implement such services (e.g., Google Analytics), this policy will be updated accordingly.

9. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Any changes will be published on this page and will take effect upon publication.