Privacy policy

Last updated: 28 October 2026.

This policy explains how Data Pulse Tech SRL processes personal data when you visit sentracast.com, download documents from it or contact us through it. It follows Regulation (EU) 2016/679 (the GDPR) and Law 190/2018 and covers the website only.

Data inside the Sentra platform, such as video, events and user accounts, is processed on behalf of the customer organization under its agreement with Data Pulse Tech. The application at app.sentracast.com is governed by the customer agreement.

Controller

The controller is Data Pulse Tech SRL, Calea Floreasca 165, One United Tower, Sector 1, Bucharest, Romania, registered with the Trade Register under J2024013096405, tax identification code RO50318990. Email: contact@datapulse.ro. Questions about this policy can be sent to this address or through the contact page.

Data we collect

• Contact form: name, company, email address, phone number (optional), your message, the date and time of sending and the record of your consent. The form is protected by Google reCAPTCHA, which processes technical data about your browser.
• Correspondence: the data you include when you write to us by email.
• Server logs: IP address, date and time, requested page, referring page, browser type and response status of each request, used for security and troubleshooting.
• Cookies: a session cookie and a consent cookie, described in the cookie policy. No analytics or advertising cookies are used.

Providing data through the form is voluntary; without the required fields we cannot answer. We do not ask for special categories of data and take no automated decisions about you.

Purposes and legal bases

• Answering your message or demo request: your consent, given by ticking the box on the form (Article 6(1)(a) GDPR) and, where a contract with your organization may follow, the steps taken before that contract (Article 6(1)(b)).
• Operating the website, keeping it secure and preventing abuse, including server logs and reCAPTCHA: our legitimate interest in running a secure website (Article 6(1)(f)).
• Setting the strictly necessary session cookie: the same legitimate interest and Law 506/2004.
• Keeping records of consent and correspondence needed to establish or defend a legal claim: our legitimate interest (Article 6(1)(f)) and, where applicable, a legal obligation (Article 6(1)(c)).

We do not use your data for newsletters, marketing emails, profiling or advertising.

Retention

• Contact form messages and related correspondence: 24 months from the last exchange, then deleted. If a contract follows, the records are kept with the customer file for its duration and the statutory periods after it.
• Consent records: for as long as the related message is kept.
• Server logs: according to the retention settings of the hosting provider.
• Cookies: the lifetimes stated in the cookie policy.

Recipients

Personal data is accessible to the staff of Data Pulse Tech who handle enquiries and the website, and to the following providers acting on our instructions under data processing terms:

• Romarg, the hosting provider in Romania, which hosts the website, the server logs and the mailbox that receives contact form messages.
• Google, for reCAPTCHA and Google Fonts, which receive the IP address and browser information of each visitor.
• CookieYes, for the consent banner, which keeps a log of consent choices.
• Wawsome, for the accessibility widget loaded on each page, which receives the IP address of each visitor.

Data may be disclosed to public authorities when the law requires it and to legal advisers for a claim. We do not sell personal data.

Transfers outside the European Economic Area

Google and CookieYes may process data in the United States and the United Kingdom. These transfers rely on the European Commission adequacy decisions for the United Kingdom and for the Data Privacy Framework between the European Union and the United States, where the provider is certified, and otherwise on the standard contractual clauses in the provider's data processing terms.

No other transfers outside the European Economic Area take place.

Security

The website is served over HTTPS, so data between your browser and the server is encrypted in transit. Access to the mailbox and the hosting account is limited to authorized staff.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you and receive a copy
• have inaccurate data corrected
• have your data erased when it is no longer needed or when you withdraw consent
• restrict processing while a request is examined
• receive the data you gave us in a structured, machine readable format
• object to processing based on legitimate interest
• withdraw consent at any time, without affecting processing carried out before withdrawal

To exercise a right, write to contact@datapulse.ro or to the postal address above. We may ask you to confirm your identity. We answer within one month, extendable by two months for complex requests.

Complaints

If you consider that the processing infringes the law, you can lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP), Bulevardul General Gheorghe Magheru 28 to 30, Sector 1, Bucharest, www.dataprotection.ro, anspdcp@dataprotection.ro, or bring an action before the courts.

Children

The website is addressed to organizations and professionals. We do not knowingly collect data from children under 16. If a child has sent us data, write to us and we will delete it.

Changes to this policy

We update this policy when the website, its providers or the law change. The version in force is the one published here, dated at the top.