Whistworks respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect personal data received through this website and related business communications.
Who we are
Whistworks S.R.L. (“Whistworks”, “we”, “us”, or “our”) is the data controller for personal data processed through this website and our related business communications. We are a company incorporated in Romania, with our registered office at București, Sector 1, Strada Lt. Radu Beller, Nr. 3-5, Romania.
For privacy-related questions or to exercise your data protection rights, contact us at hello@whistworks.com.
What personal data we collect
We may collect personal data that you voluntarily submit through our website forms, including:
- name
- email address
- company name
- job title or role, if provided
- message content
- information about your business needs or request
- any other information you choose to submit
We may also receive limited technical information when you visit the website or submit the inquiry form, such as your IP address, browser type, device information, request timestamps, pages visited, and similar usage information. This information may be processed by our hosting, security, font-delivery, or form-submission providers.
How we use your personal data
We use your personal data to:
- respond to your inquiry
- assess whether Whistworks can support your business needs
- communicate with you about our advisory services
- prepare proposals or follow-up materials, if requested
- manage business records and correspondence
- maintain the security and functionality of the website
- comply with applicable legal obligations
We do not sell your personal data.
Legal basis for processing
Where the General Data Protection Regulation applies, we process your personal data based on one or more of the following legal bases:
- legitimate interests, including responding to business inquiries, operating the website, and developing business relationships
- steps prior to entering into a contract, where you contact us about potential services
- legal obligations, where we are required to keep certain business, tax, or accounting records
- consent, where you have specifically given consent, for example for optional marketing communications
Providing personal data through the inquiry form is voluntary. However, if you do not provide the contact details and information needed to understand your request, we may be unable to respond or assess whether we can provide the requested services.
We do not use personal data collected through this website to make decisions based solely on automated processing that produce legal or similarly significant effects.
How long we keep your personal data
We keep personal data only for as long as necessary for the purposes described in this Privacy Policy.
If you submit an inquiry but no business relationship is established, we generally retain the information for up to 24 months from the last meaningful interaction, unless a longer period is required for legal, accounting, tax, or dispute-resolution purposes.
If a business relationship is established, relevant records may be retained for longer as required by applicable law.
Who we share personal data with
We may share personal data with trusted service providers that help us operate the website and communicate with you, such as:
- website hosting providers
- domain and email providers
- Google services used for form submission handling, business records, and font delivery
- analytics or security providers, if used
- accounting, legal, or professional advisers, where necessary
These providers may process personal data only as needed to provide their services or as required by law. We may also disclose personal data if required to do so by law, regulation, court order, or a competent public authority.
International transfers
Some of our service providers may process personal data outside the European Economic Area. Where this happens, we rely on a lawful transfer mechanism, such as an adequacy decision, standard contractual clauses, or another safeguard permitted by applicable data protection law. You may contact us to request information about the safeguards relevant to your personal data.
Cookies and analytics
Whistworks does not currently use analytics or advertising cookies on this website. The website loads Google-hosted fonts and uses a Google Apps Script endpoint to submit the inquiry form. These services may receive limited technical information, such as your IP address, browser or device information, and request timestamps.
Our hosting or security providers may use strictly necessary cookies or similar technologies to provide and protect the website. If we introduce optional analytics or tracking tools, we will update this Privacy Policy and, where required, request consent before using them. Whistworks does not sell personal data.
Your rights
Depending on applicable law, you may have the right to:
- request access to your personal data
- request correction of inaccurate or incomplete data
- request deletion of your personal data
- object to processing based on legitimate interests
- request restriction of processing
- request data portability
- withdraw consent where processing is based on consent
To exercise your rights, contact us at hello@whistworks.com. You also have the right to lodge a complaint with your local data protection authority. In Romania, this is the National Supervisory Authority for Personal Data Processing.
Data security
We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. However, no website, email, or online transmission method can be guaranteed to be completely secure.
Third-party links
This website may contain links to third-party websites or services. We are not responsible for the privacy practices, content, or security of third-party websites.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new “Last updated” date.