Privacy and cookies
What this site knows about you, and what it does with it.
- 1. Who is responsible
- 2. When you write to us
- 3. Booking a call, WhatsApp, phone
- 4. Measurement and cookies
- 5. Server logs
- 6. Who else sees the data
- 7. How long we keep it
- 8. Your rights
- 9. Changes to this page
Short version: the site sets no cookies and loads nothing from Google until you choose on the banner. If you send a form, we use what you typed to answer you and for nothing else. There is no newsletter, no list, no selling or sharing of data. You can change your cookie choice any time from “Cookie settings” in the footer.
1. Who is responsible
The controller of the personal data processed through this website is Mundomed Expert SRL, trading as MYDAS Solutions, a Romanian limited liability company: CUI 45261391, Trade Register no. J12/5736/2021, registered office at Str. Între Lacuri 29A, 400591 Cluj-Napoca, Cluj County, Romania.
Contact for anything about your data: alex@mydassolutions.ro or +40 773 857 018. We are a one-person company and have not appointed a data protection officer; the law does not require one for our activity. The person who reads your message is the person who answers it.
We process personal data under Regulation (EU) 2016/679 (GDPR) and Romanian Law no. 190/2018.
2. When you write to us through a form
The site has two forms. Neither creates an account, and neither adds you to a mailing list.
The contact form on the home page
Fields: name, email, company and phone (optional), what the message is about, the message itself, and, if you tick it, an estimate of hours the task takes you today.
The free tracking check on the tracking page
Fields: the address of the website to check, its platform, whether it runs ads and has a cookie banner, the modules you ticked in the price configurator, your company name and email. The form also records, so that we can tell which ad or link brought you: the page address and its UTM parameters, the referring page, a Google Ads click identifier (gclid) if you arrived from a Google ad, the language of the page and the time of sending.
What happens with it
The form is sent over an encrypted connection to our own automation server (n8n, at n8n.mydassolutions.ro, hosted on a server we rent in Germany). The server checks the entry, emails it to alex@mydassolutions.ro and, for the tracking check, sends you a confirmation with your estimate. Each submission also leaves an execution record on that server, which is deleted automatically within 30 days. From then on your request lives in our business mailbox (Google Workspace) and, if we start working together, in the documents of that engagement.
The two boxes under each form
The first box is required: by ticking it you confirm you have read this page and agree that we process the details in the form to answer you. The second box is optional and unticked by default: it lets us email you now and then about tracking and automation, a few messages a year. We record the time you ticked each box together with the form. Both consents can be withdrawn at any time by replying to any email from us or writing to alex@mydassolutions.ro; every marketing email also carries a one-click unsubscribe. Withdrawing does not affect what was done before. We never send marketing without the second box.
Purpose: answering you, preparing the free check or a quote, and, if you ask for it, delivering the work; with the second box, occasional marketing emails. Legal basis: your consent, Article 6(1)(a) GDPR, given through the boxes; Article 6(1)(b), steps taken at your request before entering into a contract, and the contract itself if one follows; for keeping our business correspondence, Article 6(1)(f), our legitimate interest in being able to show what was agreed. You are not obliged to give us anything, but without a working email and the first box we cannot answer.
The tracking check looks at the public pages of the website you name. It does not log in anywhere, does not submit forms on your site and does not collect data about your visitors.
3. Booking a call, WhatsApp, phone
Book 30 minutes opens a Google Calendar appointment page in a new tab. You enter your name, email and the time you want directly on Google’s page, under Google’s privacy policy; we receive the appointment with those details in our calendar. WhatsApp links open a chat with our business number in the WhatsApp app; Meta’s terms apply to the conversation. Phone links dial our number from your device. Nothing about you is recorded on this site when you tap them; if measurement is on (section 4) the tap itself is counted as an event, without your number or address.
4. Measurement and cookies
We use Google Tag Manager to load Google Analytics 4 and Google Ads conversion tracking. None of it loads, and no cookie is set, until you accept something on the banner. We use Google Consent Mode v2, so each Google tag receives your choice and behaves accordingly.
Your choices
| Category | What it does | Legal basis |
|---|---|---|
| Necessary | Remembers your banner choice for 12 months in your browser’s local storage (key mydas-consent). No cookie, nothing sent anywhere. | Art. 6(1)(f), needed to honour your choice |
| Analytics | Google Analytics 4: pages read, how you got here (search, ad, link), device and browser type, approximate location from your IP (which Google does not store), and events such as opening the configurator, sending a form or tapping the phone link. Google Signals is on, so if you are signed in to Google and have Ads Personalisation enabled, Google may link this to your account for its own reporting; we see only aggregates. | Art. 6(1)(a), your consent |
| Advertising | Google Ads conversion tracking: tells Google Ads whether a visit that started from one of our ads led to a form or a booked call, so we can stop paying for ads that bring nobody. Includes the Google Ads remarketing tag; we do not currently run remarketing campaigns. The same category covers the ChatGPT Ads measurement pixel (OpenAI), which does the same job for ads shown in ChatGPT: it records that a form was sent or a call link tapped after a click on one of our ChatGPT ads. It receives no name, email or message content from us. | Art. 6(1)(a), your consent |
Cookies and similar storage
| Name | Set by | Category | Lifetime | Purpose |
|---|---|---|---|---|
mydas-consent (local storage) | mydassolutions.ro | Necessary | 12 months | Your banner choice |
_ga | Google Analytics | Analytics | 2 years | Tells one browser from another |
_ga_<id> | Google Analytics | Analytics | 2 years | Keeps the session state |
_gcl_au | Google Ads (Conversion Linker) | Advertising | 90 days | Links a click on an ad to a later conversion |
_gcl_aw, _gcl_gs | Google Ads | Advertising | 90 days | Stores the ad click identifier |
IDE, test_cookie | doubleclick.net (Google) | Advertising | up to 13 months / 15 minutes | Google’s own ad measurement; third-party |
__obref | mydassolutions.ro (set by the OpenAI pixel) | Advertising | 12 months | Links a click on a ChatGPT ad to a later request on this site |
__oaiq_consent | mydassolutions.ro (set by the OpenAI pixel) | Advertising | 30 days | Remembers that you allowed the OpenAI pixel |
__cf_bm, _cfuvid | bzr.openai.com (Cloudflare, for OpenAI) | Advertising | 30 minutes / session | Bot protection on OpenAI’s measurement endpoint; third-party |
If you decline, none of the Google cookies is set and no request is made to Google from this site. If you accept and change your mind, open Cookie settings: withdrawing consent stops the tags from the next page load and the cookies expire on their own, or you can delete them in your browser. Withdrawing does not affect what was lawfully collected before.
Google’s own description of how it uses data from sites like ours: policies.google.com/technologies/partner-sites.
Fonts are served from our own server, not from Google Fonts. There are no embedded videos, social widgets or chat tools on the site.
5. Server logs
Like every web server, ours records each request: your IP address, the page requested, the time, the referring page and the browser identifier. The logs exist to keep the site running and to spot abuse (Art. 6(1)(f)) and are rotated and deleted within 30 days. They are not combined with anything else.
6. Who else sees the data
We do not sell, rent or share personal data for anyone else’s marketing. The processors that touch it, each under a data processing agreement:
- Google Ireland Ltd (Dublin): Google Analytics 4, Google Ads and Tag Manager, only with your consent; Google Workspace for our email and calendar. Google may transfer data to Google LLC in the United States under the EU-US Data Privacy Framework and the EU standard contractual clauses.
- OpenAI Ireland Ltd (Dublin): the ChatGPT Ads measurement pixel, only with your consent to Advertising. OpenAI may process the data in the United States under the EU standard contractual clauses. Its description: openai.com/policies/privacy-policy.
- Contabo GmbH (Munich, Germany): the server that hosts this site and our automation server. Data stays in the EU.
If we work together, the data needed for invoicing goes to our accountant and, as the law requires, into the Romanian e-invoicing system (ANAF). Authorities receive data only when the law obliges us.
7. How long we keep it
- Marketing consent: until you withdraw it; the address is then removed from the list and only the record of the withdrawal is kept.
- Form submissions and correspondence: three years after the last exchange, then deleted. If you become a client, the contractual documents and invoices are kept for the period Romanian accounting and tax law requires (currently ten years for accounting records).
- Execution records on our automation server: 30 days.
- Analytics data in Google Analytics 4: 14 months, then aggregated by Google. Google Ads conversion data follows Google’s own retention.
- Server logs: 30 days.
- Your cookie choice: 12 months, then we ask again.
8. Your rights
You can ask us at any time to see the data we hold about you (access), to correct it, to delete it, to restrict or object to its processing, and to receive it in a portable format. Where processing rests on consent you can withdraw it at any time, for the cookies through the banner and for anything else by writing to us. We answer within one month.
Write to alex@mydassolutions.ro. If you are not satisfied, you can complain to the Romanian supervisory authority, ANSPDCP: B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 Bucharest, anspdcp@dataprotection.ro, dataprotection.ro, or to the authority of the EU country where you live, and you can go to court.
We do not make automated decisions about you and do not profile you. The site and our services are for businesses; we do not knowingly collect data from anyone under 16.
9. Changes to this page
When the site starts collecting something new, this page changes the same day and the version and date at the top move. Material changes to how we use data you already gave us will be announced by email to the address you gave us.