Legal Compliance Documentation

1. Data Controller Identification

The data controller responsible for the processing of personal data collected through this digital archive is Quantfils, registered and operating from 115100 | Sat Radesti (Com. Stalpeni) | Mun. Campulung, Jud. Arges | Romania. All data processing activities are conducted in strict alignment with Regulation (EU) 2016/679 (General Data Protection Regulation) and applicable Romanian data protection legislation, including Law No. 363/2018 on the protection of natural persons with regard to the processing of personal data.

2. Categories of Personal Data Collected

Through the operation of this digital platform, Quantfils may collect and process the following categories of personal data:

• — Identification Data: Full name, professional designation, and organizational affiliation as provided through contact inquiry forms.
• — Contact Data: Electronic mail address, telephone number, and physical correspondence address as voluntarily submitted by the data subject.
• — Technical Data: Internet Protocol (IP) address, browser type and version, operating system, referring uniform resource locator (URL), and page interaction timestamps automatically collected through standard server logging mechanisms.
• — Communication Data: The full content of any message, inquiry, or project specification transmitted through the contact channel, including any personal data voluntarily embedded within such correspondence.

3. Legal Basis for Processing

All personal data processing activities are conducted under one or more of the following legal bases as defined in Article 6(1) of the GDPR:

• — Article 6(1)(a) — Consent: The data subject has given clear, affirmative consent to the processing of their personal data for one or more specific purposes, including the storage of contact information for the purpose of responding to project inquiries.
• — Article 6(1)(b) — Contractual Necessity: Processing is necessary for the performance of a contract to which the data subject is party, or for the taking of pre-contractual steps at the request of the data subject.
• — Article 6(1)(f) — Legitimate Interest: Processing is necessary for the purposes of the legitimate interests pursued by the controller, including the maintenance of server security logs and the prevention of fraudulent activity, except where such interests are overridden by the fundamental rights and freedoms of the data subject.

4. Purpose of Data Processing

Personal data is collected and processed exclusively for the following purposes:

• — Responding to project inquiries and providing information about services offered by Quantfils;
• — Executing pre-contractual negotiations and, upon agreement, fulfilling contractual obligations related to digital infrastructure services;
• — Maintaining the security, integrity, and operational stability of the digital platform through server log analysis;
• — Complying with applicable legal obligations under EU and Romanian law.

5. Data Retention Period

Personal data is retained only for as long as is necessary to fulfill the purpose for which it was collected. Contact inquiry data is retained for a maximum period of twelve (12) months from the date of last communication, unless a contractual relationship is established, in which case data is retained for the duration of the contract plus the applicable statutory retention period of ten (10) years in accordance with Romanian commercial record-keeping requirements. Server log data is automatically purged after ninety (90) days.

6. Data Recipients and Third-Party Disclosure

Personal data collected by Quantfils is not sold, rented, or disclosed to third parties for commercial purposes. Data may be shared with the following categories of recipients solely for the purposes outlined in this policy:

• — Technical infrastructure providers (hosting services, email delivery systems) operating under data processing agreements in compliance with Article 28 GDPR;
• — Payment processing partners (Stripe, Inc.) for the sole purpose of facilitating requested financial transactions;
• — Public authorities and regulatory bodies where disclosure is required by law or binding legal order.

7. International Data Transfers

Where personal data is transferred to countries outside the European Economic Area (EEA), Quantfils ensures that appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) adopted by the European Commission, or participation in adequacy decision frameworks as defined under Articles 45-49 of the GDPR.

8. Data Subject Rights

Under the GDPR, data subjects are entitled to exercise the following rights:

• — Right of Access (Article 15): The right to obtain confirmation as to whether personal data is being processed and to receive a copy of such data.
• — Right to Rectification (Article 16): The right to request the correction of inaccurate personal data without undue delay.
• — Right to Erasure (Article 17): The right to request the deletion of personal data where processing is no longer necessary, consent has been withdrawn, or processing is unlawful.
• — Right to Restriction (Article 18): The right to request the restriction of processing under specific circumstances.
• — Right to Data Portability (Article 20): The right to receive personal data in a structured, commonly used, and machine-readable format.
• — Right to Object (Article 21): The right to object to processing based on legitimate interests, including profiling.
• — Right to Withdraw Consent (Article 7(3)): The right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

9. Right to Lodge a Complaint

Without prejudice to any other administrative or judicial remedy, data subjects have the right to lodge a complaint with the competent supervisory authority. For Quantfils, the applicable authority is:

Autoritatea Na\u021bional\u0103 de Supraveghere a Prelucr\u0103rii Datelor cu Caracter Personal (ANSPDCP)
B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, Bucure\u0219ti, Romania
www.dataprotection.ro

10. Data Security Measures

Quantfils implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including but not limited to: encryption of data in transit (TLS 1.3), access controls with role-based permissions, regular security audits, and secure disposal procedures for data at end of life. In the event of a personal data breach likely to result in a risk to the rights and freedoms of natural persons, the supervisory authority will be notified within seventy-two (72) hours in accordance with Article 33 of the GDPR.

11. Contact the Data Protection Officer

For any questions, requests, or complaints regarding the processing of personal data, data subjects may contact Quantfils at: [email protected].

1. What Are Cookies

Cookies are small text files placed on your device by websites you visit. They serve to make the website function correctly, remember your preferences, and provide information to the site owner about how the site is being used.

2. Cookies Used by This Platform

Quantfils employs the following categories of cookies:

• — Essential Cookies (Strictly Necessary): These cookies are indispensable for the basic operation of the platform. They enable core functionalities such as session management, security token validation, and load balancing. These cookies do not require consent under the ePrivacy Directive as they are strictly necessary for the provision of the service explicitly requested by the user.
• — Functional Cookies (Preference): These cookies remember choices you make (such as your cookie consent preference) to provide enhanced, personalized functionality. They may be set by Quantfils or by third-party providers whose services we have integrated. Consent for these cookies is obtained through the interactive cookie consent banner displayed upon your first visit.

3. Third-Party Cookies

This platform may include embedded content from third-party services (such as Google Maps for physical location display) which may set their own cookies. These third-party cookies are governed by the respective privacy policies of those services. Quantfils does not control the setting of these cookies and encourages users to review the privacy and cookie policies of any third-party service embedded within this platform.

4. Managing Your Cookie Preferences

Upon your first visit, the cookie consent banner provides the option to accept or decline non-essential cookies. Your preference is stored in your browser's local storage and remembered for subsequent visits. You may withdraw or modify your consent at any time by clearing your browser's local storage for this domain or by revisiting the platform to trigger a fresh consent prompt. Additionally, most web browsers allow you to control cookies through their settings, including blocking all cookies, accepting all cookies, or deleting cookies at the end of a browsing session.

5. Cookie Retention Period

Session cookies are automatically deleted when you close your browser. Persistent cookies (including consent preference cookies) remain on your device for a period not exceeding twelve (12) months from the date they were set, or until you manually delete them through your browser settings.

6. Impact of Declining Cookies

If you decline non-essential cookies, the core functionality of the platform will remain fully operational. The only impact may be a reduced personalization experience and the re-presentation of the cookie consent banner on each subsequent visit.

1. Right of Withdrawal

In accordance with Article 9 of Directive 2011/83/EU and the applicable provisions of the Romanian Consumer Code (OG No. 21/1992, republished), consumers have the right to withdraw from a distance contract within fourteen (14) calendar days from the date of conclusion of the contract, without providing any reason and without incurring any costs other than those provided for in Articles 13(2) and 14 of the Directive.

2. Exception for Digital Services

Pursuant to Article 16(e) of Directive 2011/83/EU, the right of withdrawal does not apply to contracts for the supply of digital content which is not supplied on a tangible medium if the performance has begun with the prior express consent of the consumer and with the acknowledgment that the consumer loses the right of withdrawal. Quantfils will obtain such consent explicitly before initiating any digital service delivery following the conclusion of a contract.

3. Milestone-Based Refund Framework

For project-based engagements, Quantfils operates under a milestone-based payment structure. Refunds are evaluated based on the completion status of defined project milestones:

• — Pre-Commencement: If the client cancels the project before work has commenced, a full refund of any advance payment will be issued within thirty (30) calendar days.
• — Partial Completion: If the project is terminated after work has commenced, the client will be invoiced proportionally for the milestones completed and accepted at the time of termination. Any overpayment will be refunded within thirty (30) calendar days of the termination date.
• — Deliverable Rejection: If a completed deliverable is rejected by the client and Quantfils is unable to remedy the identified deficiency within a reasonable timeframe, a partial refund corresponding to the value of the rejected deliverable will be issued.

4. Refund Processing

All approved refunds will be processed using the original payment method within thirty (30) calendar days of refund approval. If the original payment method is unavailable, an alternative refund method will be arranged in consultation with the client.

5. Dispute Resolution

Any disputes arising from this refund policy will be resolved in accordance with the dispute resolution mechanisms set out in Section IV (Terms of Service) of this document.

1. Acceptance of Terms

By accessing, browsing, or using this digital platform and the services offered herein, the user acknowledges and agrees to be bound by these Terms of Service. If the user does not agree to any provision of these terms, they must immediately discontinue use of the platform and refrain from submitting any personal data or inquiry through the available communication channels.

2. Description of Services

Quantfils provides digital infrastructure engineering, web application development, system architecture consultation, and related technical services as described in the Service Catalogue available on this platform. All services are delivered as professional technical engagements governed by individual project agreements specifying scope, deliverables, timelines, and compensation terms.

3. Intellectual Property

Unless explicitly stated otherwise in a signed project agreement, all intellectual property rights in the deliverables produced by Quantfils in the course of a project engagement are transferred to the client upon full payment of the agreed compensation. Quantfils retains the right to display anonymized case studies and portfolio entries referencing completed work, unless the client explicitly objects in writing. Pre-existing frameworks, libraries, and tooling used in the production of deliverables remain the property of Quantfils and are licensed to the client on a non-exclusive, perpetual basis.

4. Service Execution & Communication Protocol

All service engagements are conducted through a structured communication protocol. Project milestones, deliverable submissions, and approval gates are documented through formal written correspondence. Oral agreements, informal messages, or social media communications do not constitute binding modifications to any project agreement unless explicitly confirmed in writing by authorized representatives of both parties.

5. Limitation of Liability

To the maximum extent permitted by applicable law, Quantfils shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising out of or in connection with the use of this platform or the services provided herein. The total aggregate liability of Quantfils under any engagement shall not exceed the total compensation actually paid by the client for the specific service giving rise to the claim.

6. Force Majeure

Neither party shall be liable for any failure or delay in the performance of their obligations under any agreement where such failure or delay results from circumstances beyond the reasonable control of the affected party, including but not limited to: natural disasters, armed conflict, pandemic, governmental action, telecommunications failures, or cyber-attacks of extraordinary scale. The affected party shall notify the other party in writing within seventy-two (72) hours of becoming aware of the force majeure event.

7. Governing Law & Jurisdiction

These Terms of Service and any dispute or claim arising out of or in connection with them shall be governed by and construed in accordance with the laws of Romania. The parties irrevocably submit to the exclusive jurisdiction of the courts of Pitesti, Arges County, Romania, for the resolution of any disputes arising from or in connection with these terms or the services provided by Quantfils.

8. Alternative Dispute Resolution

In accordance with Regulation (EU) No 524/2013 on online dispute resolution for consumer disputes, Quantfils informs consumers that the European Commission provides an online dispute resolution platform (ODR) accessible at https://ec.europa.eu/consumers/odr. Consumers may use this platform to resolve disputes arising from online purchase contracts or service agreements.

9. Modifications to Terms

Quantfils reserves the right to modify these Terms of Service at any time. Material changes will be communicated through a prominent notice on this platform. Continued use of the platform following the publication of modified terms constitutes acceptance of the updated provisions. Users are encouraged to review these terms periodically.

10. Severability

If any provision of these Terms of Service is found to be invalid, illegal, or unenforceable by a court of competent jurisdiction, the remaining provisions shall continue in full force and effect. The invalid provision shall be modified to the minimum extent necessary to make it valid, legal, and enforceable while preserving its original intent.