Working principles
- We only collect the data needed for clear purposes.
- We limit access to people and suppliers who really need data.
- We use technical and organisational measures commensurate with the project risks.
- We treat security, backups, permissions and maintenance as parts of the project, not as optional details.
- We document important decisions when the project involves personal data.
Possible roles
SIDECUBE acts as the controller for personal data received through sidecube.ro.
In client projects, SIDECUBE may act as a controller, processor or technical provider, depending on the contract, access and purpose of processing. These roles must be explicitly defined in the project documentation.
Personal data in digital projects
- Contact forms, customer accounts, orders, payments, enquiries and ticketing.
- CRMs, dashboards, internal applications, automation and API integration.
- Technical logs, audit trails, user roles, permissions and action history.
- Content, documents or knowledge bases used in AI flows, if approved in the project.
Recommended measures
- Role-based access and the principle of least privilege.
- Safe authentication and careful administration of API passwords and keys.
- Backups, updates, monitoring and logging appropriate to the project.
- Processing contracts and agreements with relevant suppliers.
- Clear public policies for users: privacy, cookies, terms, return or delivery when applicable.
Requests for personal data
For access, rectification, erasure, restriction, portability, opposition or withdrawal of consent, send a request to [email protected]. We can request additional information for identity verification and identification of the data concerned.
Supervisory authority
If you are not satisfied with the answer, you have the right to address the National Supervisory Authority for Personal Data Processing.