Privacy notice for the waitlist
Draft of 4 October 2026. Applies to this website and the waitlist form only.
1. Controller
PPFTEC S.R.L., Str. Patriarh Iustinian Marina nr. 17-19B, bl. DC12, mansardă, ap. 25, 240469 Râmnicu Vâlcea, jud. Vâlcea, Romania. Trade Register (ONRC) no. J2026052999008, fiscal code (CUI) 55537142, VAT ID RO55537142. Managing director (administrator): Petre Popa. Contact for privacy requests: support@ppftec.com. [Data protection officer: not appointed – to be confirmed in the legal review.]
2. What we process and why
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| E-mail address, role, countries and the Stripe question (both optional), page language | Send the confirmation e-mail (double opt-in), keep the waitlist, send product updates, invite to interviews | Art. 6(1)(a) consent |
| Proof of consent: time of sign-up, version of the consent text and of this notice, time of the confirmation click | Demonstrate that consent was given | Art. 6(1)(c) with Art. 7(1) |
| Delivery state: one-time links (stored only as a cryptographic hash), number and time of confirmation e-mails | Make the confirmation and removal links work; limit repeated e-mails to the same address | Art. 6(1)(f) legitimate interest (preventing abuse of the form) |
| Bot check (Cloudflare Turnstile): Cloudflare processes technical data such as your IP address and browser characteristics to tell people from bots. We only receive whether the check passed. | Protect the form against automated abuse | Art. 6(1)(f) legitimate interest |
| Daily counters of form events (for example "sign-ups per day, by page language and role") | Understand whether the waitlist works | Art. 6(1)(f); the counters contain no e-mail address, IP address or other identifier, and no cookies are used |
We do not store your IP address, your browser details or your name. You are not required to provide data, but without an e-mail address and consent we cannot add you to the waitlist. There is no automated decision-making.
3. Double opt-in
After you submit the form we send one e-mail with a confirmation link that works for 48 hours. You are only on the waitlist after you confirm. If you do not confirm, we delete the entry within 7 days. Until our confirmation e-mail is set up, we store new sign-ups as unconfirmed and tell you so on screen; if we cannot send the confirmation within 30 days, we delete the entry without contacting you.
4. Recipients and processors
Hosting, form handling, bot check and database: Cloudflare (the waitlist database is a Cloudflare D1 database with EU jurisdiction, so the data is stored in the EU). To deliver the pages and protect the site, Cloudflare processes technical connection data such as IP addresses. E-mail delivery: no provider yet; we will name it here before the first e-mail is sent. [Data processing agreement with Cloudflare and the safeguards for transfers outside the EU/EEA (Cloudflare, Inc. is a US company) – to be confirmed in the legal review.]
5. Retention
Unconfirmed entries: 7 days after the confirmation e-mail (up to 30 days while no confirmation e-mail can be sent, see section 3). Confirmed entries: until you withdraw consent, and at the latest 12 months after the last e-mail we sent you. When you remove your address, we delete the entry immediately. The daily counters contain no personal data.
6. Your rights
You may request access, rectification, erasure, restriction, data portability and object to processing based on legitimate interests. You may withdraw consent at any time with effect for the future, by e-mail to support@ppftec.com or with the removal link in every e-mail. You may complain to a supervisory authority, in particular the Romanian authority ANSPDCP (competent for the controller) or the authority in the country where you live or work.
7. Cookies and scripts
This site sets no cookies of its own and uses no analytics or tracking scripts. The only third-party script is the Cloudflare Turnstile bot check on the waitlist form. [Whether Turnstile stores anything in your browser is not verified by us – to be checked against Cloudflare's Turnstile privacy documentation in the legal review.]