Privacy Policy
Last updated: October 24, 2026
Who we are
AUDITIS is operated by Ionuț Stancu, independent security consultant, based in Bucharest, Romania. For the purposes of the GDPR, Ionuț Stancu is the data controller for personal data processed in connection with this website.
Contact for any privacy matter: contact@auditis.ro.
This website collects nothing
This site runs no analytics, no tracking cookies, no advertising pixels and no server-side logging of visitor data beyond what the hosting infrastructure technically requires to serve pages.
The contact form does not store or transmit data to us — it opens your own email client with a pre-filled message. Nothing you type there touches our infrastructure until you send the email yourself.
Data you send us
If you email us — directly or via the contact form — we receive what you choose to send: typically your name, email address, company, platform domain and message content.
We use it solely to respond to your inquiry and, where relevant, to prepare a proposal. We never add it to marketing lists.
Legal bases
We process contact data under GDPR Art. 6(1)(b) — steps requested by you prior to entering a contract — and Art. 6(1)(f) — our legitimate interest in responding to inquiries and running our consultancy.
Where a legal obligation applies, we process data under Art. 6(1)(c).
Security evidence handled during audits
Audit engagements may produce evidence containing personal data — for example, user records extracted to demonstrate a vulnerability. This evidence is handled under the engagement's written agreement: extracted in the minimum quantity needed to prove impact, stored encrypted, never shared publicly, and destroyed at the close of the engagement.
We never sell, publish or reuse user data obtained during testing. For that data, the client operator remains the controller and we act strictly within the authorisation given.
Retention
Correspondence is kept for as long as needed to handle your inquiry and any resulting engagement. Security evidence is destroyed when the engagement closes, unless the written agreement states otherwise.
Sharing
We do not sell or share personal data with third parties. Data may be disclosed only where required by law or a competent authority.
Your rights
Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your personal data, and the right to data portability.
You also have the right to lodge a complaint with the Romanian supervisory authority, ANSPDCP (dataprotection.ro). To exercise any right, email contact@auditis.ro.
Security
We apply the same standard to your data that we demand from the platforms we audit: minimal collection, encrypted handling, no third-party exposure.
Changes to this policy
We may update this policy when our practices change. The current version is always the one on this page, identified by the date above.
