Asezio · Legal information

Privacy policy

This policy sets out the personal data processed through the asezio.com website, the purposes and legal bases of that processing, the applicable retention periods and the rights available to data subjects under Regulation (EU) 2016/679 (the General Data Protection Regulation).

Last updated: 24 September 2026

1. Data controller

The controller of the personal data described in this policy is ELIA CONSULTING S.R.L., a company registered in Romania under unique registration code 13421494 and trade registry number J2022008764230, with its registered office at Str. Ștefan Mihăilescu Brăila nr. 19, Voluntari, județul Ilfov, România. Asezio is a product developed and operated by this company.

Enquiries concerning this policy or the exercise of data subject rights may be addressed to contact@asezio.com.

2. Personal data processed

The Asezio platform is not yet generally available. Processing through this website is accordingly limited to the categories set out below.

2.1. Waiting list registrations

Where a registration form is submitted, the following data is processed: name and surname, business email address, company, role held within the company, number of employees, area of interest, country or principal market, the partner link through which the site was reached where applicable, the language version of the site used, any price estimate attached from the calculator, the date of registration, confirmation of the consents given and an irreversibly pseudonymised form of the IP address from which the registration was made. The IP address is not stored in plain form.

Purpose. Registration on the waiting list; issuing invitations to access the platform; communications concerning the launch and Directive (EU) 2023/970; application of the promotional launch prices to organisations registered before general availability; maintaining a record of registrations attributable to each partner link; and identifying registrations submitted more than once by the same person.

Legal basis. Consent, pursuant to Article 6(1)(a) GDPR, given by means of the consent boxes in the registration form, together with steps taken at the request of the data subject prior to entering into a contract, pursuant to Article 6(1)(b) GDPR.

Retention. Until consent is withdrawn or, at the latest, three years from the date of registration where no contractual relationship has been established in the interim. Where a contractual relationship is established, retention is governed by that contract. The pseudonymised form of the IP address is retained together with the registration and is erased with it.

2.2. Record of cookie consent

Where a choice is made in the cookie banner, the following is recorded: a random identifier generated in the browser, the option selected, the date, the version of the applicable policy, the language, the page concerned, the browser type and an irreversibly pseudonymised form of the IP address. The IP address is not stored in plain form.

Purpose. To demonstrate, where required, that consent was given or refused. Legal basis. The obligation to demonstrate consent under Article 7(1) GDPR, together with the legitimate interest of the controller in evidencing compliance, pursuant to Article 6(1)(f) GDPR. Retention. Three years.

2.3. Usage statistics

Where consent to statistical cookies is given, Google Analytics 4 processes data relating to the pages viewed, the duration of the visit, the device and browser used, the approximate country of origin and the source of the visit. The IP address is truncated by Google prior to storage.

Purpose. To understand how the website is used and to improve it. Legal basis. Consent, pursuant to Article 6(1)(a) GDPR, which may be withdrawn at any time by means of the “Cookie settings” link in the site footer. Retention. Fourteen months.

2.4. Server logs

The hosting infrastructure records technical logs automatically, comprising the IP address, the date and time, the resource requested and the browser used. Purpose. Security and troubleshooting. Legal basis. The legitimate interest of the controller in maintaining a secure and functioning website, pursuant to Article 6(1)(f) GDPR. Retention. No longer than ninety days.

2.5. Correspondence

Where correspondence is addressed to the controller by email, the data contained in the message is processed for the purpose of responding. Legal basis. The legitimate interest of the controller in responding to enquiries, pursuant to Article 6(1)(f) GDPR, or pre-contractual steps, pursuant to Article 6(1)(b) GDPR. Retention. For such period as is necessary to conclude the matter, as a rule no longer than two years.

3. Recipients and international transfers

• Hosting provider. The website and the waiting list database are hosted on servers located in Romania. The hosting provider acts as a processor and processes the data solely on the documented instructions of the controller.
• Google Ireland Limited, in respect of usage statistics, and only where consent has been given. Data may be transferred to Google LLC in the United States on the basis of the EU-US Data Privacy Framework and of the standard contractual clauses.
• Collaborators. Persons and undertakings engaged by the controller for sales and support may contact registrants on behalf of Asezio. They act as processors under contract, process the data solely on the documented instructions of the controller and may not use it for any other purpose.
• Public authorities, where disclosure is required by law.

Personal data is not sold and is not used for personalised advertising.

4. Rights of the data subject

Data subjects have the right to:

• obtain access to the personal data processed concerning them;
• obtain the rectification of inaccurate or incomplete data;
• obtain the erasure of the data, in the circumstances provided for by law;
• obtain the restriction of processing;
• receive the data provided in a portable format;
• object to processing carried out on the basis of legitimate interest;
• withdraw consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal;
• not be subject to a decision based solely on automated processing. No such decisions are taken by the controller.

Requests may be addressed to contact@asezio.com and are answered within one month at the latest. Removal from the waiting list may be requested by email sent from the registered address.

Data subjects who consider that their rights have been infringed may lodge a complaint with the supervisory authority, Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP, the Romanian data protection authority), B-dul G-ral. Gheorghe Magheru 28-30, sector 1, Bucharest, Romania, dataprotection.ro. Data subjects resident in another Member State of the European Union may alternatively lodge a complaint with the supervisory authority of that State.

5. Security of processing

The website is served exclusively over an encrypted connection. The waiting list database is stored outside the publicly accessible area of the server and is not reachable over the web. Access to exports is protected by authentication. Access to the data is restricted to those persons who require it for the purposes set out in this policy. The typefaces used by the website are served from the controller’s own infrastructure, so that loading a page results in no request to a third party.

6. Minors

The website is addressed to professionals and to organisations. It is not directed at persons under the age of 16 and personal data is not knowingly collected from them.

7. Amendments

This policy may be updated where the services provided or the applicable legislation change. The version in force and the date of the last update are displayed at the head of this page. Material amendments affecting persons registered on the waiting list are notified by email.