Privacy Policy
Last updated: 27 October 2026
This policy explains what personal data Map Design SRL processes when you visit mapdesign.ro, when you ask us for a quote or contact us and when we carry out work for you, why we process it, to whom we disclose it, how long we keep it and what rights you have. It applies under Regulation (EU) 2016/679 (GDPR) and Romanian data protection legislation.
1. Who we are
The data controller is Map Design SRL, with its registered office in Timișoara, Calea Aradului nr. 18, Timiș County, tax identification number (CUI) RO17581447, trade register number J35/1604/2005. For any question about your data, you can write to us at office@mapdesign.ro or call us on +40 749 031 223.
2. What data we process and where we obtain it
Quote requests. When you fill in the quote form, we receive the data you enter: your name, telephone number, e-mail address, locality, the work required, the description, the deadline and the capacity in which you are contacting us. If you draw the area on the map, we also receive the outline, the address found and the surface area. If you attach documents (for example a land book extract or a title deed), we receive these too, together with the data they contain. Together with the request, we record the page from which it was sent, the page through which you entered the website and the source of the visit (for example a search or an advertisement).
Contact form. Your name, e-mail address, telephone number, subject and message.
Newsletter subscription. Your e-mail address, if you tick the subscription box.
Telephone, e-mail and WhatsApp. Your telephone number or e-mail address and whatever you communicate to us directly. The WhatsApp button opens the conversation in the WhatsApp application, with the address of the page from which you started.
The work itself. For cadastre and land registration documentation, the law requires us to work with the owners’ identification data (name, personal numeric code (CNP), address, identity document) and with the title documents. For field surveys, we process the property data and, where applicable, the data of the persons who give us access.
Proof of consent. When you tick the box consenting to data processing, we keep the date, the version of the text accepted, the browser type and a shortened, irreversible form of the IP address.
Browsing the website. Visit statistics and cookies are described in the Cookie Policy.
3. Why we process it and on what legal basis
| Purpose | Legal basis (GDPR) |
| Replying to the quote request or message, preparing the quote | Steps taken at your request prior to entering into a contract — Article 6(1)(b) |
| Carrying out the work: surveys, documentation, submission to the Cadastre and Land Registry Office (OCPI) | Performance of the contract — Article 6(1)(b); legal obligations in the field of cadastre — Article 6(1)(c) |
| Invoicing, accounting, archiving of documentation | Legal obligations — Article 6(1)(c) |
| Sending the newsletter by e-mail | Your consent — Article 6(1)(a) |
| Visit statistics and advertising measurement | Your consent, given through the cookie banner — Article 6(1)(a) |
| Protecting the forms against automated messages and website security | Our legitimate interest — Article 6(1)(f) |
| Defending rights in the event of a dispute | Our legitimate interest — Article 6(1)(f) |
We do not take decisions based solely on automated processing that produce legal effects concerning you. The text of attached documents may be read automatically, on our own servers, solely so that we can prepare the quote more quickly; the quote is always made by a person.
4. To whom we disclose the data
We do not sell or rent your data. We disclose it only where necessary:
- To public authorities: the Cadastre and Land Registry Office (OCPI) and the National Agency for Cadastre and Land Registration (ANCPI), for the acceptance of documentation, and other authorities where the law requires us to do so;
- To providers who work for us, only to the extent necessary and on the basis of a contract: the company that hosts the website and the e-mail server, Google (e-mail, Google Analytics, Google Ads, Google Maps, Google Fonts, Google Translate), Microsoft (Clarity), Cloudflare (Turnstile), Intuit Mailchimp (newsletter subscription), Mapbox (portfolio map), the invoicing software and the company’s accountant.
Quote requests and attached documents are kept on the company’s own servers, in Romania, not with external providers; the providers receive only the e-mail notification.
5. Transfers outside the European Union
Some of the providers listed above (Google, Microsoft, Cloudflare, Intuit Mailchimp, Mapbox) may process data in the United States. Transfers take place on the basis of the EU–US Data Privacy Framework, for certified companies, or of the standard contractual clauses approved by the European Commission.
6. How long we keep the data
- Quote requests and messages that do not turn into a job: 3 years from the last contact — the general period within which claims relating to them may be brought — after which they are deleted;
- Client data and the documentation prepared: for the duration of the contract and thereafter for as long as cadastre legislation and professional liability for the work carried out require;
- Accounting documents (invoices, contracts): 10 years, in accordance with Accounting Law no. 82/1991;
- Newsletter subscription: until you unsubscribe, using the link in every message;
- Proof of consent: for as long as we keep the data to which it relates, plus 3 years;
- Visit statistics: no more than 14 months, in accordance with the Google Analytics settings.
7. How we protect the data
The website uses an encrypted connection (HTTPS), and the forms are protected against automated messages. Data from requests and from work is kept on the company’s servers, with access restricted to the persons who actually work with it, and backup copies are encrypted. No measure, however, offers absolute security; if a security breach occurs that may affect you, we will notify you and the supervisory authority, as required by law.
8. Your rights
Under the conditions laid down by the GDPR, you have the right:
- to find out what data we hold about you and to receive a copy (Article 15);
- to ask for incorrect data to be corrected (Article 16);
- to ask for your data to be erased, when there is no longer a legal reason for keeping it (Article 17);
- to ask for processing to be restricted (Article 18);
- to receive your data in a machine-readable format or to ask for it to be transmitted to another controller (Article 20);
- to object to processing based on our legitimate interest (Article 21);
- to withdraw your consent at any time, without affecting the processing carried out before the withdrawal.
Requests should be sent to office@mapdesign.ro and are answered within one month at the latest. We may ask for additional information in order to confirm your identity.
If you consider that your rights have been infringed, you may lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral Gheorghe Magheru nr. 28–30, sector 1, București, dataprotection.ro.
9. Minors
Our services are not directed at persons under the age of 16, and we do not knowingly collect data about them through the website.
10. Changes to this policy
We update this policy when the services we use, the way we work or the legislation change. The date of the last update is shown at the top of the page.
11. Contact
Map Design SRL
Registered office: Calea Aradului nr. 18, Timișoara, Timiș County
Office: str. Martir Sebastian Iordan nr. 1, ap. 4, Timișoara 300049
CUI RO17581447 · J35/1604/2005
office@mapdesign.ro · +40 749 031 223
