Privacy policy
How we handle personal data, under the EU General Data Protection Regulation (GDPR).
1. Who we are
DARC (Data Analysis & Recovery Center) is operated by Vissia Software SRL, registered in Romania under J2018007840408, CUI 39439100 ("we"). We are the controller of the personal data described below.
2. What we process, and why
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email, phone, the details of your request | Answering your request and scheduling a consultation | Steps at your request before a contract (Art. 6(1)(b)) |
| Identity document details, proof of ownership or authority | Confirming that you may have the device examined | Contract (Art. 6(1)(b)); our legitimate interest in preventing unauthorised access (Art. 6(1)(f)) |
| Signed consent and custody log | Documenting what was agreed and the custody of the device | Contract (Art. 6(1)(b)); legal claims (Art. 6(1)(f)) |
| Content of the device (photos, messages, locations and other data) | Carrying out the analysis you asked for | Contract (Art. 6(1)(b)) and your explicit consent where special categories of data may be involved (Art. 9(2)(a)) |
| Billing details | Invoicing and accounting | Legal obligation (Art. 6(1)(c)) |
A device may also contain data about other people, such as the people you message. We look at it only as far as the analysis you asked for requires, never use it for any other purpose, and erase it together with all other working copies.
3. How long we keep it
- Content of the device: only for the duration of the analysis. All working copies are erased at handover, and we confirm the erasure in writing, unless you ask us in writing to keep them for a set period.
- Consent, custody log and identity check: as long as needed to document the engagement and defend legal claims, within the limitation periods set by law.
- Invoices: as long as Romanian accounting law requires.
- Requests that don't lead to an appointment: deleted as soon as they are no longer needed to answer you.
4. Who receives it
We don't sell or share personal data. Device content never leaves our laboratory and is never uploaded to any cloud service. Billing data is shared with our accountant and, where you pay by card, with our payment provider. We disclose data to authorities only where the law requires it.
5. Security
Analyses run on dedicated workstations that are never connected to the internet. Working copies are stored encrypted, only the analyst assigned to your case has access to them, and they are erased at handover.
6. Your rights
You can ask to access, correct or erase your personal data, to restrict or object to its processing, and to receive it in a portable format. You can withdraw your consent at any time; this doesn't affect processing already carried out. To exercise any of these rights, contact us.
You also have the right to complain to the Romanian data protection authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), www.dataprotection.ro.
7. This website
This website uses no tracking, analytics or advertising cookies. What you send through the request form (applicant category, entity, contact details and description) is used only to answer the request and is deleted if it doesn't go ahead.
8. Changes
We will publish any change to this policy on this page. Last updated: 13 November 2026.