Privacy policy

Who we are

The site is run by Phalanx Systems, which decides what happens to the data described here and is responsible for it.

For any question or request about your data, write to paulm@phalanx-systems.com.

What we collect

When you send the contact or quote form, we receive what you filled in and some technical data:

• your name, company, email address, the role you picked and your message;
• the language of the page you sent it from;
• the IP address the submission came from.

Other data

If you email us directly, we receive your message and your email address, as with any correspondence.

As with any website, the servers that deliver it receive your IP address and the technical details of each request, such as your browser and the page requested. We do not use them to identify you or to build a profile.

Why, and on what basis

We use what you send through the form to reply and, if you ask for a quote, to prepare one. The basis is Article 6(1)(b) GDPR, steps taken at your request before a possible contract.

We use the IP address and technical data to protect the form from automated submissions and abuse, on the basis of our legitimate interest, Article 6(1)(f) GDPR.

If you accept analytics cookies, we measure how the site is used: which pages are visited, for how long, from what kind of device and, roughly, from which country. The basis is your consent, Article 6(1)(a) GDPR. You can withdraw it at any time, as easily as you gave it, from “Cookie settings” in the page footer. Withdrawing does not affect what was measured before.

We do not use your data for marketing, we do not subscribe you to anything and we do not sell it.

Filling in the form is voluntary. Without an email address we cannot reply.

Who receives it

We work with three providers, which process the data on our behalf:

• Trello, a service of Atlassian (United States). Each message sent through the form becomes a card on a board used only by our team, so that no enquiry is lost.
• Cloudflare (United States). It delivers the site and runs the code that receives the form. It may use your IP address to limit how many submissions come from one address, with a counter that expires after an hour, and, when enabled, an automated check that tells people from programs, based on technical data about your browser. It also keeps technical request logs for a short period.
• Google Analytics, a service of Google Ireland Limited (Ireland), only if you accept analytics cookies. It receives the pages you visit, how you reached them and technical data about your browser and device, linked to a random identifier kept in a cookie. It does not store your IP address. Its advertising features are switched off, so the data is not used to show you ads.

Transfers outside the EEA

Cloudflare and Atlassian are US companies, and Google Ireland may transfer data to Google LLC, also in the US, so your data may be processed outside the European Economic Area. The transfer relies on the GDPR safeguards these providers offer their customers: the EU and US Data Privacy Framework, for certified companies, and the standard contractual clauses adopted by the European Commission.

How long we keep it

• Messages sent through the form: 12 months from receipt. Then we delete the card.
• Emails sent to us directly: also 12 months from the last message in the conversation.
• If the conversation becomes a contract, the data it needs moves into that relationship and is kept under its rules.
• The counter used to limit submissions: one hour.
• Analytics data: 2 months, after which Google Analytics deletes it.
• Your answer on analytics cookies: 6 months in your browser, then we ask again.

Your rights

Under the GDPR, you have the right:

• to know what data we hold about you and to get a copy (Art. 15);
• to have inaccurate data corrected (Art. 16);
• to have it erased (Art. 17);
• to have its processing restricted (Art. 18);
• to receive it in a structured format so you can take it elsewhere (Art. 20);
• to object to processing based on our legitimate interest (Art. 21);
• to withdraw your consent at any time, without affecting what was done before (Art. 7(3)).

How to exercise them

Write to paulm@phalanx-systems.com. We reply within one month. If we correct, erase or restrict data, we tell the providers above as well (Art. 19).

You also have the right to complain to the Romanian data protection authority, ANSPDCP, www.dataprotection.ro.

Cookies and local storage

The site sets cookies only if you accept analytics cookies. There are two, set by Google Analytics: _ga and one whose name starts with _ga_. They hold a random identifier that tells one visit from the next, and they expire after 6 months. If you decline, or never answer, none are set and the analytics script is not loaded at all.

The site also keeps two things in your browser’s local storage: the theme you chose, light or dark, under the key “theme”, and your answer on analytics cookies, under the key “phx-consent”. Both are strictly functional and never leave your browser.

You can change your answer at any time from “Cookie settings” in the page footer. If you withdraw consent, we delete the analytics cookies from your browser.

Changes

When we change anything here, we update this page and the date above.