Privacy notice

This notice explains what personal data we process when you visit 365phyta.com or ask us for a demo, why, and what rights you have under the EU General Data Protection Regulation (GDPR).

1. Controller

Vanguard 360 Solutions SRL
Romania
Email: [email protected]

Full company details are in our Impressum.

2. Visiting the website

When you open a page, your browser sends technical data to our hosting provider: IP address, date and time, the page requested, referrer, browser and operating system. This is needed to deliver the site and to protect it against attacks.

• Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in a secure, working website.
• Retention: security and access logs are kept by the hosting provider for a short period, in line with its standard retention, and then deleted.

We do not use cookies, analytics, advertising or tracking tools. Fonts are hosted on our own server, so no data is sent to font providers.

3. Demo and contact requests

When you use the demo form, we process the data you enter: name, work email, company, role, type of business, country, your area of interest and your message, plus your confirmation that you are a licensed operator. We use it to answer your request, arrange a demo and send you information you asked for, such as a quote or the product brief.

• Legal basis: Art. 6(1)(b) GDPR (steps prior to a contract, at your request) and Art. 6(1)(f) GDPR (our legitimate interest in answering business enquiries).
• Retention: we delete enquiries 24 months after our last contact, unless a business relationship follows or statutory retention periods apply.

If you email us, the same applies to the data in your email.

4. Service providers

We use the following providers, who process data on our behalf under a data processing agreement (Art. 28 GDPR):

• Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA): hosting, content delivery, security and processing of form submissions. Data may be processed in the USA; Cloudflare is certified under the EU-U.S. Data Privacy Framework, and standard contractual clauses apply.
• Resend, Inc. (USA): delivers the demo form to us by email. Data may be processed in the USA; standard contractual clauses apply. Demo requests are delivered to our business email mailbox.
• Microsoft Ireland Operations Ltd. (Microsoft 365 / Exchange Online), One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland: email hosting.

5. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Where we rely on legitimate interest, you have the right to object (Art. 21). To use these rights, email [email protected].

You also have the right to complain to a data protection supervisory authority, in particular in the EU country where you live or work. Our lead supervisory authority is the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), dataprotection.ro.

6. No automated decisions

We do not use automated decision-making or profiling.

7. Changes

We update this notice when our processing changes. The date at the top shows the current version.