Legal
Privacy Policy
5 October 2026
This policy explains how DamTrex handles personal data. We keep it in plain language, but it is a legal document.
1. Who we are
DamTrex (“we”, “us”, “our”) operates this website and provides lead generation, lead conversion and revenue automation services. We are the data controller for the personal data described in this policy.
We are operated by Dumitru Cernei. You can reach us at dumi@damtrex.com.
2. Scope of this policy
This policy explains what personal data we collect when you visit this website, submit an enquiry, book a call, or receive outreach from us. It does not cover third-party websites we link to, which have their own policies.
3. Personal data we collect
Data you give us
- Enquiry form: name, email address, phone number, company, website and the content of your message.
- Bookings: the details you provide when scheduling a strategy session, including name, email and timezone.
- Email, WhatsApp and Messenger: the content of messages you send us and the contact details you provide.
Data we collect from outreach
We operate a B2B outreach agency. We may contact business professionals whose details are publicly available, for example from LinkedIn profiles, company websites or business directories. This typically includes your name, business email address, job title, company and country.
Data collected automatically
- IP address, browser type, device type, operating system and referring page.
- Pages visited, time on page and general interaction data.
- Advertising identifiers and campaign parameters such as UTM tags, used to measure whether our advertising is effective.
Data we deliberately do not collect
We do not knowingly collect special category data (such as health, political opinions, religious beliefs, or biometric data), and you should not send it to us. We do not knowingly collect information from children under 16.
4. How we use your data and our lawful bases
Under the GDPR we must have a valid lawful basis for each use of your data. We rely on the following:
- Consent (Art. 6(1)(a)) — for non-essential cookies and advertising measurement technologies, and where you have asked us to contact you by email or messaging. You may withdraw consent at any time.
- Contract (Art. 6(1)(b)) — to take steps at your request prior to entering a contract, such as arranging and holding a strategy session.
- Legitimate interests (Art. 6(1)(f)) — to respond to enquiries, to run and measure our marketing, to carry out B2B outreach, and to maintain the security and performance of this website.
- Legal obligation (Art. 6(1)(c)) — where retention or disclosure is required by law.
Where we rely on legitimate interests, we have assessed that our interest does not override your rights, and you may object at any time using the contact details in section 11.
5. Advertising and cookies
We run Meta (Facebook and Instagram) advertising campaigns. Meta may place cookies or similar technologies on your device and may combine information from your interactions with this website with data it already holds about you. This is used to show you relevant ads and to measure campaign performance.
We ask for your consent before activating any non-essential advertising or analytics technology. On your first visit a consent banner appears, in which you can accept everything, continue with necessary cookies only, or select each category individually.
Your choice is saved in your browser’s local storage and applies to this browser and device. You can change or withdraw it at any time using the Cookie settings link in the footer of every page. Withdrawing consent is as easy as giving it.
You can also control Meta advertising directly through Meta Ads Manager or your Facebook privacy settings.
We also store your country and language preference (for example 🇷🇴 România / 🇺🇸 United States) in a first-party cookie, so that the site opens in the language you chose on your next visit.
6. Who we share your data with
We do not sell your personal data. We share it only with the service providers below, who process it on our instructions and under their own security obligations.
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Google LLC | Contact form submissions, spam protection (reCAPTCHA) and document storage | Name, email, phone number, company, message, IP address | United States / EEA |
| Meta Platforms, Inc. | Advertising delivery and measurement, and communication through WhatsApp and Messenger | Contact details you provide, advertising interactions, device and cookie data | United States / EEA |
| Calendly LLC | Scheduling and hosting of strategy sessions | Name, email, timezone, scheduling metadata | United States |
| Microsoft Corporation (LinkedIn) | Professional outreach and correspondence on LinkedIn | Professional profile information and messages you send | United States / EEA |
| Our hosting and email providers | Hosting this website and delivering email | IP address, request logs, email content and recipient address | EEA / United States |
We may also disclose data where required by law, to enforce our terms, or as part of a corporate transaction such as a reorganisation or sale of assets.
7. International data transfers
Some of our providers process data outside the European Economic Area. Where data is transferred to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses, and we take supplementary measures where required.
8. How long we keep your data
- Enquiries that do not become clients: up to 12 months from your last interaction.
- Outreach records: up to 12 months from your last interaction, after which we delete or suppress the record.
- Client and project data: for the duration of the engagement and for a reasonable period afterwards to meet legal and accounting obligations.
- Analytics and server logs: typically 30 days.
9. Profiling and automated decision-making
Our advertising platforms may use cookies and machine learning to build an estimate of your interests and predict which ads you are most likely to respond to. We do not use such profiling to make decisions producing legal or similarly significant effects for you. You can opt out via the links in section 5.
10. Your rights under the GDPR
You have the right to:
- Access — obtain a copy of the personal data we hold about you.
- Rectification — have inaccurate or incomplete data corrected.
- Erasure — have your data deleted in certain circumstances.
- Restriction — limit how we use your data while a dispute is resolved.
- Portability — receive your data in a structured, machine-readable format.
- Object — object to processing based on legitimate interests, and to direct marketing at any time.
- Withdraw consent — where our processing depends on it.
- Complain — lodge a complaint with your supervisory authority. In Romania this is the Autoritatea Națională de Supraveghere a Protecției Datelor Personale (ANSPDCP).
We respond to requests within one month. We may ask for information to verify your identity before we can act on a request.
11. How to contact us
For any privacy question, to exercise your rights, or to object to outreach, email us. We will always honour an objection immediately.
Remote / Worldwide
12. Changes to this policy
We may update this policy from time to time, for example to reflect changes in our services or the law. The “last updated” date at the top always reflects the current version.