1. Data controller
The data controller is XEOTYPE SRL, Romanian company registered
under J24/1044/2023, fiscal code RO48497754, headquartered in
Municipiul Sighetu Marmației, Strada Dragoș Vodă, Nr. 185,
Județ Maramureș, Romania.
Contact: contact@xeotype.com.
2. What data we process
- Identity and contact details you provide: name, organisation, email address, phone number and communication channel.
- Project information: descriptions, product ideas, quantities, deadlines, links, references and attachments that you choose to send.
- Communication data: email content, WhatsApp messages, replies, meeting notes and follow-up decisions.
- Technical data: IP address, browser information, device type, approximate access time, requested pages and security logs created by the hosting infrastructure.
3. Why we process data
- To answer contact and collaboration requests.
- To evaluate whether Xeotype can provide software, robotics, prototype, design, manufacturing or product development services.
- To prepare proposals, estimates, invoices, contracts and project documentation.
- To maintain the security, reliability and legal compliance of the website.
- To protect Xeotype’s legitimate interests, including fraud prevention, dispute management and portfolio planning.
4. Legal bases
Depending on the context, processing may be based on your consent,
steps requested before entering into a contract, performance of a
contract, legal obligations, or Xeotype’s legitimate interests in
operating a secure business website and responding to requests.
5. Sharing and processors
We may use hosting, email, domain, communication and security
providers. We only share data when needed to operate the website,
answer your request, provide a service, comply with the law, or
protect our legal interests. We do not sell personal data.
6. Retention
Contact requests are kept for as long as necessary to respond,
evaluate collaboration, document decisions and comply with legal
or accounting obligations. If a request does not become a project,
we aim to remove or archive unnecessary data within a reasonable
period unless there is a legitimate reason to keep it.
7. Your rights
Under GDPR, you may request access, rectification, erasure,
restriction, portability, objection to processing and withdrawal
of consent where processing is based on consent. You may also
contact the Romanian supervisory authority for data protection.
8. Security
We use reasonable technical and organisational measures to protect
data from unauthorised access, loss, alteration or disclosure. No
online system can be guaranteed as perfectly secure, so please do
not send confidential technical files unless they are needed for
the request.
9. Scope of this policy
This policy covers the public hub.Xeotype website, contact pages,
collaboration request flows and public project presentation pages.
Separate Xeotype products or subdomains, including MobilityCloud,
robotics.Xeotype or future product platforms, may have additional
or product-specific privacy notices when they collect different
data, provide accounts, process orders or handle project files.
10. Data you choose to include in project requests
Collaboration requests may contain business ideas, drawings,
product photos, technical references, robot designs, software
requirements, educational project details, quantities, production
assumptions, pricing expectations and other material supplied by
you. You are responsible for ensuring that you have permission to
send any third-party personal data, copyrighted material,
technical documentation or confidential information.
Please avoid sending unnecessary personal data, identity documents,
health information, student data, financial records, passwords,
private keys, access credentials or sensitive business information
unless Xeotype explicitly requests it for a defined purpose.
11. Sources of personal data
- Data you provide directly through email, WhatsApp, phone, forms or meetings.
- Data provided by an organisation, partner, collaborator or team member when they contact Xeotype on your behalf.
- Technical and security data generated when the website is accessed.
- Public business information, only where relevant for verifying an organisation, preparing a proposal or understanding a collaboration context.
12. Special categories and minors
The hub.Xeotype website is not designed to collect special
categories of personal data, such as health data, biometric data,
political opinions, religious beliefs or information about
children. Some collaborations may involve educational projects or
youth-focused organisations; in those cases, Xeotype expects the
contracting organisation to obtain all necessary permissions and
to avoid sending identifiable data about minors unless it is
strictly necessary and legally justified.
13. No automated decision-making
Xeotype does not use the hub.Xeotype website to make automated
legal, financial, employment, eligibility or contractual decisions
about visitors. Collaboration requests are reviewed manually.
14. International services and external platforms
Some communication, hosting, email, domain, font, analytics,
security or external product platforms may be operated outside
Romania or the European Economic Area. Where relevant, Xeotype
relies on appropriate safeguards, provider terms, standard
contractual clauses, adequacy decisions or other lawful transfer
mechanisms.
15. Confidentiality limits
Sending a request through this website does not automatically
create a non-disclosure agreement. Xeotype treats incoming
requests with reasonable care, but if your idea requires strict
confidentiality, a separate written NDA or collaboration agreement
should be signed before you send sensitive technical or commercial
details.
16. Portfolio, testimonials and public references
Xeotype may publish public project pages, case studies, product
names, visuals or collaboration references only when the material
is already public, belongs to Xeotype, is generated by Xeotype, or
is used with permission. If a collaboration later becomes public,
project-specific publishing terms can be agreed separately.
17. Accounting and legal records
If a request becomes a paid project, invoice, contract, order or
formal collaboration, Xeotype may keep related personal and
business data for the periods required by Romanian accounting,
tax, contractual and legal rules. Such records may not be deleted
immediately upon request when retention is legally required.
18. Updates to this policy
Xeotype may update this policy when the website changes, new
products are added, forms are modified, cookies are introduced,
legal requirements change or new processing activities become
relevant. The updated version will be published on this page with
a revised date.
19. Product ecosystem coverage
This policy is designed to cover public hub.Xeotype interactions
and the first contact point for Xeotype ecosystem projects:
software platforms, robotics systems, prototypes, 3D printed
products, educational collaborations, MobilityCloud-related
enquiries, prints.Xeotype and future product pages. If a product
later introduces accounts, payments, uploads, analytics or order
management, a more specific notice may be added for that product.
20. Business-to-business and representative data
If you contact Xeotype on behalf of a company, school, NGO,
robotics team, supplier, public institution or client, we may
process your role, professional contact details, organisation
name, decision-making context, order history and communications in
order to manage the relationship and keep a record of commercial
discussions.
21. Attachments, technical files and large materials
You may send links, images, drawings, CAD files, product
references, videos, manuals, screenshots or other files during a
request. Xeotype may review, store, download, forward internally,
archive or delete those materials as needed for feasibility,
quoting, delivery, support, security checks or legal evidence.
Please remove unnecessary personal or confidential data before
sending files.
22. Security logs and abuse prevention
To protect the website and communication channels, Xeotype or its
providers may process technical logs, spam indicators, failed form
submissions, unusual traffic patterns, blocked requests and
security events. These records are used to prevent abuse, debug
problems and maintain service integrity.
23. Contract, invoice and payment data
When a request becomes a paid collaboration, Xeotype may process
billing data, tax identifiers, invoice addresses, order details,
payment status, due dates, delivery information and accounting
communications. These records may be kept for the periods
required by accounting, tax and legal obligations.
24. Data minimisation expectation
Xeotype asks visitors and collaborators to send only the data that
is necessary for the request. Do not upload or email passwords,
private keys, full identity documents, sensitive student lists,
medical data, unrelated personal information or confidential
third-party materials unless a specific written arrangement
requires it.