Privacy policy
This policy explains what personal data Narla Digital collects through the narla.digital website, why it collects it, and what rights you have in connection with it. It applies to visitors to the site and to people who contact us by phone or WhatsApp.
1. Who the data controller is
The data controller for the data collected through this site is NARLA S.R.L., CUI 55631866, Trade Register No. J2026055707008, with registered office at Str. Rezervelor nr. 58C, bl. 1, et. 1, ap. 9, Sat Dudu, Comuna Chiajna, Ilfov county, represented by Aris Madalina, email contact@narla.digital.
For any question about your data, you can contact us at +40 747 800 659 (phone or WhatsApp) or at madalina@narla.digital.
2. What data we collect
This site has no user account, shopping basket or payment form. We collect personal data only when you provide it to us directly:
- through the contact form and the Atria order form: your name, company or institution, email address, phone number if you fill it in, the interest you choose and your message;
- through the newsletter sign-up form: your email address, your name if you fill it in and the field you work in;
- by starting a conversation on WhatsApp using the number shown on the site: your phone number and the content of the conversation.
We do not collect other categories of data and we do not use forms that request sensitive data (health, ethnic origin, political or religious opinions).
3. Purpose of processing
We use the data collected to:
- respond to your request and carry out the necessary correspondence;
- prepare an offer or an appointment, where applicable;
- keep a record of requests received, for internal organisation purposes.
The address given at newsletter sign-up is used only to send the newsletter, until you unsubscribe. We do not use the data for other automated marketing and do not pass it to third parties for commercial purposes.
4. Legal basis for processing
We process your data on the basis of:
- Article 6(1)(b) of Regulation (EU) 2016/679 (GDPR), for steps taken at your request before any potential collaboration;
- Article 6(1)(f) of the GDPR, for the legitimate interest of responding to requests received through the site and keeping a minimal record of them;
- Article 6(1)(a) of the GDPR, your consent, for the newsletter; you can withdraw it at any time through the unsubscribe link in every message or by writing to us.
5. Who we share the data with
The data may be accessed by:
- the people within Narla Digital responsible for client communication;
- Vercel, which hosts the site and the associated technical infrastructure; the newsletter subscriber list is stored in Vercel's Frankfurt (Germany) data centre, in the European Union;
- Google (Google Workspace), where messages sent through the site's forms arrive, in the NARLA S.R.L. mailbox;
- WhatsApp (Meta Platforms Ireland Limited), to the extent you choose to contact us through this channel, in accordance with WhatsApp's own privacy policy.
We do not sell or rent your data to third parties.
6. Retention period
6.1 Newsletter
The address and details given at sign-up are kept for as long as you are subscribed and deleted within 30 days of unsubscribing, except for a minimal record of the unsubscription so that we do not write to you again.
6.2 Calls to Eliza, the phone voice assistant
When you call Eliza, Narla Digital's voice assistant, we collect your name, phone number, the need you expressed briefly, and the call transcript. We do not record audio.
We use this data so that a colleague within NARLA S.R.L. can call you back with a proposal.
The legal basis is NARLA S.R.L.'s legitimate interest in responding to requests received by phone, together with your request during the call.
Calls are technically processed by ElevenLabs, acting as processor on behalf of the controller, which keeps the call transcript for 30 days, with no audio recording of the call at all. The name, phone number and need expressed are kept for 12 months in NARLA S.R.L.'s contact records, after which they are deleted, unless the law requires a different period.
You can decline this data collection right at the start of the call by telling Eliza so; in that case, we keep nothing from the conversation.
For access, deletion or objection regarding this data, you can contact us at contact@narla.digital.
6.2 WhatsApp conversations
We keep data received through WhatsApp for [retention period, for example 3 years from the last interaction], after which it is deleted or anonymised, unless the law requires a different retention period.
Conversations on WhatsApp remain stored according to WhatsApp's own policy, on the devices and accounts involved in the conversation.
7. Your rights
Under the GDPR, you have the right to:
- request access to the data we hold about you;
- request correction of inaccurate data;
- request deletion of data, under the conditions of the law;
- request restriction of processing;
- object to processing based on legitimate interest;
- request data portability, where applicable;
- lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru nr. 28-30, Bucharest, www.dataprotection.ro.
To exercise any of these rights, you can contact us at +40 747 800 659 (phone or WhatsApp) or at madalina@narla.digital.
8. Cookies
This site may use strictly technical cookies, described in detail in the Cookie policy. We do not use tracking or marketing cookies without your consent.
9. Data security
We take reasonable technical and organisational measures to protect the data collected against unauthorised access, loss or accidental disclosure.
10. Changes to this policy
This policy may be updated periodically. The date of the last update is shown at the top of the document. Significant changes will be flagged on this page.