Regulatory Framework

Legal Compliance

Full EU GDPR alignment. Transparent data practices. Enforceable commitments.

01

Privacy Policy

1. Data Controller

The data controller responsible for processing your personal data is CoreVectorLabs, registered at 032153, Str. Odobești nr. 9, bl. V13, sc. 1, et. 7, ap. 32, București (Sector 3), Romania. For all privacy-related inquiries, contact us at [email protected].

2. Data We Collect

We collect personal data only when necessary for the execution of our services. The categories of data processed include:

  • Identity Data: Full name, company name, job title provided through contact forms or direct communication.
  • Contact Data: Email address, phone number, physical address provided for service delivery and invoicing.
  • Technical Data: IP address, browser type and version, operating system, referring URLs, and page interaction data collected automatically through our web infrastructure.
  • Usage Data: Information about how you interact with our website, including pages visited, time spent on pages, and navigation patterns.

3. Legal Basis for Processing

We process your personal data under the following legal bases as defined by the General Data Protection Regulation (EU) 2016/679:

  • Article 6(1)(a) — Consent: When you voluntarily submit information through our contact forms or subscribe to communications.
  • Article 6(1)(b) — Contractual Necessity: When processing is necessary for the performance of a contract to which you are a party, or for taking pre-contractual steps at your request.
  • Article 6(1)(f) — Legitimate Interest: When processing is necessary for our legitimate interests, such as improving our services, preventing fraud, and ensuring network security, provided these interests are not overridden by your fundamental rights.

4. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Specific retention periods:

  • Contact form submissions: Retained for 24 months from the date of submission, after which they are securely deleted.
  • Contract-related data: Retained for the duration of the contractual relationship plus 7 years, in compliance with Romanian accounting and tax regulations.
  • Technical and usage data: Retained for 12 months in anonymized form for analytical purposes.

5. Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights:

  • Right of Access (Article 15): You may request a copy of all personal data we hold about you.
  • Right to Rectification (Article 16): You may request correction of inaccurate or incomplete data.
  • Right to Erasure (Article 17): You may request deletion of your personal data when it is no longer necessary for the purpose it was collected, or when you withdraw consent.
  • Right to Restrict Processing (Article 18): You may request limitation of processing in specific circumstances.
  • Right to Data Portability (Article 20): You may request your data in a structured, commonly used, machine-readable format.
  • Right to Object (Article 21): You may object to processing based on legitimate interests at any time.
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact our Data Protection Officer at [email protected]. We will respond to your request within 30 days.

6. Data Transfers

Your personal data is primarily processed within the European Economic Area (EEA). Where data transfers outside the EEA are necessary, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission or adequacy decisions under Article 45 of the GDPR.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS 1.3), encryption at rest (AES-256), access controls, regular security audits, and employee training on data protection principles.

8. Supervisory Authority

If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the Romanian supervisory authority: ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal), București, B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, cod poștal 010336.

02

Cookies Policy

1. What Are Cookies

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work efficiently and to provide information to website owners.

2. How We Use Cookies

CoreVectorLabs uses cookies solely for essential website functionality. We do not use advertising, tracking, or analytics cookies that profile users across websites.

3. Types of Cookies We Use

  • Strictly Necessary Cookies: Required for the website to function correctly. These enable core features such as session management, form submission, and security tokens. Without these cookies, services you have requested cannot be provided.
  • Functional Cookies: Used to remember your preferences and settings, such as cookie consent choices stored in localStorage. These cookies do not track your browsing activity on other websites.

4. Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling strictly necessary cookies may impair the functionality of this website. Your cookie consent preference is stored locally in your browser and is not transmitted to any external service.

5. Changes to This Policy

We may update this Cookies Policy to reflect changes in our practices or applicable regulations. The updated policy will be posted on this page with a revised effective date.

03

Refund Policy

1. General Principles

CoreVectorLabs is committed to delivering services that meet or exceed the specifications agreed upon in the project scope. Refunds are evaluated based on the stage of project completion and the nature of the request.

2. Refund Eligibility

  • Pre-Execution Cancellation: If you cancel a project before any work has commenced, a full refund of any advance payment will be issued within 14 business days.
  • Partial Execution: If a project is cancelled after work has begun, a pro-rata refund will be calculated based on the percentage of work completed relative to the total project scope. Completed milestones are non-refundable.
  • Post-Delivery Disputes: If delivered work materially deviates from the agreed specifications, you may request a remediation within 30 days of delivery. If remediation is not feasible, a partial refund proportional to the deviation will be issued.

3. Non-Refundable Items

  • Third-party licenses, subscriptions, or services procured on your behalf.
  • Work completed and approved during interim project milestones.
  • Consulting hours that have been delivered and documented.

4. Refund Process

To request a refund, contact us at [email protected] with your project reference and the reason for your request. We will acknowledge receipt within 48 hours and provide a resolution within 14 business days.

04

Terms of Service

1. Acceptance of Terms

By engaging the services of CoreVectorLabs, you agree to be bound by these Terms of Service. If you do not agree to these terms, do not use our services. These terms constitute a legally binding agreement between you (the Client) and CoreVectorLabs}, registered at 032153, Str. Odobești nr. 9, bl. V13, sc. 1, et. 7, ap. 32, București (Sector 3), Romania.

2. Scope of Services

Services are defined in the individual project proposals or statements of work (SOW) issued by CoreVectorLabs. Any work outside the agreed scope will be treated as a change request and may incur additional charges. Change requests must be submitted in writing and require mutual approval before execution.

3. Payment Terms

  • Invoices are issued according to the payment schedule defined in the project SOW.
  • Payment is due within 14 calendar days of invoice date unless otherwise specified.
  • Late payments incur a statutory interest rate of 9.5% per annum as per Romanian Civil Code Article 1539.
  • All prices are quoted in Euros (€) exclusive of applicable VAT (19% Romanian standard rate).

4. Intellectual Property

Upon full payment, all intellectual property rights for the delivered work product are transferred to the Client. CoreVectorLabs retains the right to use anonymized case studies and general methodologies developed during the engagement for portfolio and educational purposes, unless explicitly prohibited in the project SOW.

5. Confidentiality

Both parties agree to maintain the confidentiality of proprietary information shared during the engagement. This obligation survives the termination of the agreement for a period of 36 months. Confidential information includes, but is not limited to, business strategies, technical specifications, source code, and financial data.

6. Limitation of Liability

CoreVectorLabs's total liability under any engagement shall not exceed the total fees paid by the Client for the specific service giving rise to the claim. CoreVectorLabs shall not be liable for indirect, consequential, incidental, or punitive damages, including but not limited to loss of profits, data, or business opportunities.

7. Termination

Either party may terminate the agreement with 30 days' written notice. In the event of termination, the Client is obligated to pay for all work completed up to the termination date. CoreVectorLabs will deliver all completed work products within 10 business days of the termination date.

8. Governing Law

These Terms of Service are governed by the laws of Romania. Any disputes arising from or in connection with these terms shall be submitted to the exclusive jurisdiction of the courts of București, Romania. The parties agree to attempt amicable resolution before initiating legal proceedings.