Privacy policy

Version: 2026-09-21 · Last updated: 2026-09-21

This policy explains how AI Focus processes personal data through aifocus.ro and its training and consulting services.

1. Controller

The controller is MARLINK TRADING SRL, registered office Str. Vaselor 2 Bl. 34 Et. 1 Ap. 9, Sectorul 2, București, 021254, registration number 6612637, operating the AI Focus brand.

Contact: office@aifocus.ro.

2. Data we process

Depending on how you interact with us, we may process identification and contact details, account and enrolment details, payment and invoice records, attendance records, messages you send, and limited technical information about use of the site.

Do not send special-category or confidential data through the general contact form unless we specifically request it through an appropriate channel.

3. Purposes and legal bases

We process data to operate and secure the site, answer enquiries, create and manage accounts, administer enrolments and attendance, deliver contracted services, issue fiscal or participation records, comply with legal obligations, and improve our services where the law permits it.

The legal basis depends on the activity: steps requested before a contract, performance of a contract, compliance with legal obligations, legitimate interests, or consent where consent is required.

4. Recipients and transfers

Data may be made available to service providers that support hosting, authentication, communications, payments, accounting, analytics, and service delivery, as well as advisers or public authorities where required by law. We do not sell personal data.

Where a provider processes data outside the European Economic Area, we use an applicable transfer mechanism and contractual safeguards.

5. Retention

We retain data only for as long as required for the purpose for which it was collected, applicable accounting and legal obligations, security, and the establishment or defence of legal claims. Exact periods depend on the category of record and will be confirmed during legal review.

6. Account deletion lifecycle

Account deletion is a verified, recoverable process. The working lifecycle is:

1. Request and verification. When you initiate deletion, we send a single-use verification link to the account email address. The account and access remain unchanged unless and until you confirm through that link.
2. Immediate access revocation. Confirmation closes active sessions and blocks new sign-ins. It does not immediately erase the account.
3. Fourteen-day recovery window. Confirmation starts a 14-day recovery period. Until the deadline stated in the confirmation email, you may cancel through the purpose-bound cancellation link. Cancellation restores sign-in eligibility but does not create a new session; you must sign in again.
4. Ownership and administrative review. If you are the sole owner of a company organization, you must transfer ownership or otherwise resolve that organization before confirmation. Finalization also requires administrative approval. A documented legal obligation or legal-claims need may place the request on hold.
5. Finalization. After the 14-day period, and only after approval and the absence of an applicable hold, we remove or replace direct account identifiers, authentication providers, sessions, and invitations, and pseudonymize the account and its personal organization. Pseudonymized data remains personal data where it can be attributed to a person using additional information; it is not automatically anonymous.
6. Completion notice. We send a completion message to the notification address retained specifically for this process, then remove that address from the deletion request.

Some fiscal documents, orders, receipts, seat and attendance records, certificates, and security or audit evidence may be retained separately where and only for as long as an applicable legal obligation or the establishment, exercise, or defence of legal claims requires it. Retained records do not restore account access and must not be reused for an unrelated purpose.

If the request is cancelled, blocked, rejected, or placed on hold, we record that outcome and its reason. You may contact office@aifocus.ro to ask about the status of a request or the legal basis and retention period for information that cannot yet be erased.

This lifecycle remains subject to legal review before production activation.

7. Your rights

Subject to the GDPR and applicable conditions, you may request access, rectification, erasure, restriction, portability, or object to processing. Where processing is based on consent, you may withdraw it without affecting earlier lawful processing.

Send requests to office@aifocus.ro. You may also lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP).

8. Cookies and changes

Our use of cookies is described in the Cookie policy. We may update this policy when our services or legal obligations change; the version shown above identifies the applicable text.