Privacy Policy

Tech Insider SRL, operating as Aviz to Excel, is the data controller for personal data collected through our document processing service at aviz-to-excel.ro.

We process your data under the following GDPR legal grounds:

• Contractual Necessity (Article 6(1)(b)) — Processing is required to provide the service you requested
• Legal Obligation (Article 6(1)(c)) — We retain billing data to comply with Romanian tax laws
• Legitimate Interest (Article 6(1)(f)) — We analyze usage patterns to improve our service and ensure security

Your personal data is used to:

• Process your documents and extract structured data
• Provide, maintain, and improve our service
• Manage your account and process payments
• Send essential service communications
• Comply with legal obligations
• Prevent fraud and ensure platform security

We implement industry-standard security measures:

• TLS 1.3 encryption for all data in transit
• AES-256 encryption for data at rest
• Role-based access controls with least-privilege principles
• Automatic deletion of processed documents within 24 hours
• Regular security audits and vulnerability assessments

We use trusted third-party providers to deliver our service. All providers maintain GDPR compliance and are bound by Data Processing Agreements.

Your data is primarily processed within the European Economic Area (EEA). When data is transferred outside the EEA, we ensure protection through:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions where applicable

Under GDPR, you have the right to:

• Access — Request a copy of your personal data
• Rectification — Request correction of inaccurate data
• Erasure — Request deletion of your data (subject to legal retention requirements)
• Restriction — Request limits on how we process your data
• Data Portability — Receive your data in a machine-readable format
• Object — Object to processing based on legitimate interest
• Withdraw Consent — Withdraw consent at any time where applicable

To exercise any of these rights, contact us at support@digital-docs.ro. We will respond within 30 days.

Our service uses automated document extraction technology. This processing does not produce legal effects or similarly significant effects on you. You can always review and correct extracted data before export.

In the event of a data breach that poses a risk to your rights, we will:

• Notify the Romanian Data Protection Authority (ANSPDCP) within 72 hours
• Inform affected users without undue delay if the breach poses high risk

We use strictly necessary cookies for authentication and security. We do not use tracking or advertising cookies. For details, see our GDPR Compliance page.

We may update this policy to reflect changes in our practices or legal requirements. Material changes will be communicated via email or website notice at least 30 days before taking effect.

For privacy questions or to exercise your rights, contact us at support@digital-docs.ro

You also have the right to lodge a complaint with the Romanian supervisory authority: