Privacy Policy

Last updated: 30.06.2026

Welcome to www.novaweb.ro. The protection of personal data is important to us. This policy explains what data we may collect, the purposes we use it for, the legal basis on which we process it, who we may pass it to, how long we keep it and what rights you have under Regulation (EU) 2016/679 on data protection, known as the GDPR.

This policy applies to the www.novaweb.ro website, the contact forms, quote requests, the free on-page SEO audit tool, email communications and the other interactions carried out through the website.

Who we are

The www.novaweb.ro website is operated by:

NOVAWEB AGENCY SRL
Registered office: Jud. Iaşi, Municipiul Iaşi, Bulevardul ŢUŢORA, Nr. 7, Bl. A1, Scara A, Etaj 1, Ap. 6
Unique registration code (CUI): 52265418
Trade Register registration no.: J2025058013000
EUID: ROONRC.J2025058013000
Email: contact@novaweb.ro
Phone: +40 724 620 957

NOVAWEB AGENCY SRL is the controller of the personal data processed through this website, within the meaning of the GDPR.

The services offered by Novaweb include:

Business website creation
Online stores
Landing pages
SEO optimization
Maintenance, technical support and hosting services
Free on-page SEO audit tool

We have not appointed a data protection officer, because our current activity does not impose this obligation. For any request regarding personal data, you can contact us at contact@novaweb.ro.

What data we collect

We only collect the data necessary for the purposes described in this policy.

Through the contact forms, quote requests or other direct interactions with the website, we may collect the following data:

First and last name
Email address
Phone number
Company name and field of activity, where applicable
The website or project you are requesting information about
The message you send and any other information you provide voluntarily, such as website requirements, project details, indicative budget, desired deadline or other information relevant to the request

Data relating to a company is not, as a rule, personal data. However, when it is associated with a contact person, we may process it together with that person’s data in order to respond to the request received.

Through the Free SEO Audit tool, we may collect and process the following data:

The URL entered for analysis
The publicly available content of the analyzed page, strictly to the extent necessary to generate the SEO report
The audit context chosen by the user, for example general page or local page
The SEO score, the recommendations, the generated report and the technical token associated with the report
The email address entered in order to receive the report
The first name, if voluntarily filled in
The consent options expressed for the SEO remediation tips or the newsletter
The IP address, user agent and minimal technical data necessary for security, abuse prevention and limiting automated requests

The Free SEO Audit tool analyzes only information publicly accessible at the URL entered. We do not request and do not process passwords, account access, private areas or data that is not publicly available. If the analyzed page contains public personal data, this may be processed only to the extent that it appears in the public content analyzed and is necessary for generating the report.

In the case of contact or quote request forms associated with the SEO report, we may also process the name, phone number, the message sent, the analyzed website, the selected level of urgency and the information necessary for handling the request.

Through cookies and similar technologies, we may collect technical data such as:

The IP address, to the extent technically necessary
Information about the browser and device
Pages visited and interactions with the website
Traffic source
Cookie preferences
Analytics or marketing events, only if you have given consent for these categories

We do not intentionally request sensitive data, such as health data, religious beliefs, political opinions, trade union membership, biometric data or other special categories of data. Please do not send such information through the forms on the website. If you do send us such data, we will process it only to the extent strictly necessary for handling your request, or we will delete it if it is not necessary.

The purposes of processing

We use the data collected for the following purposes:

To communicate directly with you as a potential client
To respond to requests received through the website
To provide estimates, proposals, recommendations or tailored solutions
To analyze the requirements you send and prepare a quote
To generate the SEO audit requested
To display the SEO report in the browser and to send it by email
To allow subsequent access to the report and, where applicable, the PDF download
To process contact, quote or consultancy requests
To send SEO remediation tips only if you have explicitly chosen this option
To send the newsletter only if you have separately ticked this option
For the security of the website and of the audit application
To prevent spam, abuse and automated requests
To limit the number of automated or suspicious requests
To improve the operation of the website and of the audit tool
To measure website performance, only within the limits of the consent given for statistics or marketing cookies
To comply with the legal obligations applicable to our activity

Your data is not sold to third parties.

The legal basis for processing

We process personal data on the following legal bases:

Your consent, when you fill in forms, choose to receive the newsletter, choose to receive SEO remediation tips or accept non-essential cookies.

Our legitimate interest, when we respond to requests, protect the website, prevent spam, limit abuse, ensure the security of the application, keep minimal records of communications and improve the services we offer.

The performance of a request or steps taken at your request, when you ask us to generate an SEO report, send the report by email, provide a quote, an analysis or a proposal for collaboration.

Legal obligations, when we have to keep or transmit certain data in accordance with tax, accounting or other applicable rules.

For optional commercial communications, such as the newsletter or the SEO remediation tips, processing is based on your explicit consent, except where the law permits communication to existing clients for similar services, with a clear right to object.

Free SEO Audit, report by email and associated communications

The Free SEO Audit tool allows the user to enter a public URL for analysis and to receive an automatically generated SEO report.

Sending the full report by email is a transactional flow, necessary for delivering the result requested. Sending the report does not entail automatic subscription to the newsletter and does not entail automatic enrolment in the SEO remediation tips flow.

You receive the report you requested even if you do not choose additional communications.

The SEO remediation tips flow is optional. You are enrolled in this flow only if you explicitly tick the dedicated option or confirm the option in the window displayed before the report is sent.

The newsletter is separate from the SEO plan and is not ticked by default. Subscription to the newsletter takes place only on the basis of separate consent expressed by you.

You can unsubscribe from commercial communications using the unsubscribe link in the emails you receive or by contacting us at contact@novaweb.ro.

Refusing to receive the newsletter or SEO remediation tips does not affect the generation of the SEO report requested and does not limit access to the basic features of the tool.

How long we keep data

We keep personal data only for as long as is necessary for the purposes for which it was collected, except where the law requires or permits a longer period.

Data sent through the contact or quote request forms is kept for a maximum of 12 months from the last interaction, or until you request its deletion, except where there are legal obligations, contractual relationships, disputes or legitimate grounds for retention.

If you become our client, the data necessary for the collaboration, invoicing and commercial records is kept in accordance with the legal obligations applicable to commercial, tax and accounting documents.

Reports generated through the Free SEO Audit are kept temporarily for subsequent access, rehydration and PDF download, as a rule for up to 30 days.

Contact requests and the leads associated with the audit tool may be kept for the handling of commercial requests, within the general period provided for in this policy.

Technical data for security, rate limiting, integration logs and the data necessary for preventing abuse is kept for short periods, depending on technical and security necessity.

Data used for the newsletter or SEO tips is kept until consent is withdrawn, until unsubscription or until the deletion of the respective list.

Who we may pass data to

Data may be passed to technical providers used for the operation of the website, the delivery of communications and the provision of Novaweb services, strictly for the purposes described in this policy.

These providers may include:

Hosting and technical infrastructure providers
Email, SMTP and message delivery providers
WordPress and the plugins used for the operation of the website
MailPoet or other services used for email lists
Anti-spam and form protection services
Google reCAPTCHA for spam prevention
Google Analytics 4 for traffic analysis, subject to consent
Meta Pixel for marketing measurement, subject to consent
Security, optimization, cache or protection services, such as Cloudflare, where technically active
Maintenance, development or technical support providers
Consultants, accountants, lawyers or public authorities, where there is a legal obligation or a justified legitimate interest

Providers that process data on our behalf have access only to the data necessary for the services they supply and must comply with GDPR requirements.

Transfers outside the European Economic Area

Some technical providers used for the operation of the website, analytics, security, communications or marketing may process data outside the European Economic Area, directly or through their technical infrastructure.

In such cases, transfers are made only under the conditions permitted by the GDPR, for example on the basis of an adequacy decision, of the standard contractual clauses approved by the European Commission or of other safeguards provided for by the applicable legislation.

Data security

We implement technical and organizational measures to protect personal data against loss, unauthorized access, unauthorized disclosure, alteration or accidental destruction.

These measures may include, depending on the case:

Secure connections over HTTPS
Limited access to data
Anti-spam and anti-abuse measures
Security updates
Backups and restoration measures
Technical monitoring
Limiting automated requests
Protection against unauthorized access

Even so, no method of online transmission or storage is 100% secure. If you notice a security problem related to our website, you can contact us at contact@novaweb.ro.

Cookies and similar technologies

Our website may use cookies and similar technologies for:

The correct operation of the website
Saving browsing and consent preferences
Improving the functionality of the site
Analyzing traffic, only with your agreement for statistics cookies
Marketing activities and campaign measurement, only with your agreement for marketing cookies

Strictly necessary cookies may be used without separate consent, because they are necessary for the operation of the website or for the provision of a service requested by the user.

Statistics, marketing or other non-essential cookies are used only if you express your consent through the cookie banner.

You can accept, refuse or change your preferences regarding non-essential cookies. Further details can be found in the Cookie Policy.

Google reCAPTCHA

The contact forms, quote request forms and other forms on the website may be protected by Google reCAPTCHA in order to prevent spam and abusive use.

reCAPTCHA may collect and transmit to Google technical data such as the IP address, information about the browser, the device, interactions with the page and risk signals.

We use reCAPTCHA in our legitimate interest of protecting the website, the forms and the audit application against spam, automated attacks and abusive use.

The use of reCAPTCHA is subject to the Google Privacy Policy and the Google Terms.

Google Analytics 4, Meta Pixel and analytics events

The website may use Google Analytics 4 for traffic analysis and Meta Pixel for measuring marketing campaigns.

These services are activated only subject to the consent expressed through the cookie banner, where consent is required.

The Free SEO Audit tool may use non-PII analytics events, such as:

Display of the blocked report
General validation errors
Acceptance or refusal of the option for the SEO plan
Ticking of the consent options
General interactions with the form or the report

These events do not include the email address, the name, the phone number, the full URL analyzed or the report token.

Your rights

Under the GDPR, you have the following rights:

The right of access to your data
The right to rectification of inaccurate or incomplete data
The right to erasure of data, also known as the „right to be forgotten”
The right to restriction of processing
The right to object to certain processing
The right to withdraw consent, where processing is based on consent
The right to data portability, where applicable
The right not to be subject to a decision based solely on automated processing, if such processing would produce legal or similarly significant effects on you
The right to lodge a complaint with the National Supervisory Authority for Personal Data Processing: www.dataprotection.ro

To exercise these rights, you can contact us at contact@novaweb.ro.

We will respond to requests within the period provided for by the GDPR, as a rule no later than one month from receipt of the request. In the case of complex or numerous requests, the deadline may be extended by a further two months, in which case we will inform you within one month of receiving the request, explaining the reason for the delay.