Who is responsible
WIZ Development & Services SRL, trading as WIZ Research, is responsible for the personal information covered by this notice. The company is registered in Romania under J32/241/2021, CUI 43703977, with its registered office at Str. Samuel Brukenthal nr. 4, ap. 1, Sibiu, Sibiu County, Romania.
Contact us about privacy at office@wizresearch.com or by post at that address. Full company and contact details are included in our Terms & Conditions.
This notice covers this website and enquiries sent to WIZ. Individual projects, research platforms and recruitment activities may have their own privacy notices.
Information involved
If you send an enquiry, we receive the name, email address, organisation and message you include. We also receive ordinary email metadata and any attachments you choose to send.
Completing the website's required fields is necessary only to use its draft-preparation tool. You can contact us directly by email instead. Organisation is optional in the contact form. Supplying extra project details is your choice; without enough information we may need to ask questions before responding.
Please avoid including health information, identity documents or personal information about other people that is unnecessary for an initial enquiry.
How the enquiry form works
Typing in the form does not submit its contents to WIZ. The page prepares a draft using the information in the form. You can review and edit it, open your email application or choose to copy the text. WIZ receives the message only if you send it.
The site does not save form contents in cookies, local storage or session storage. Text can remain in the open page or be restored by your browser's own form-history, autofill or session features. If you choose Copy, the text is placed on your device's clipboard. Your browser, operating system and email service manage those features under their own settings.
Why we use information
We use an enquiry to answer you, assess a proposed collaboration and organise relevant follow-up. When an individual asks us to take steps towards a contract with that individual, the basis is GDPR Article 6(1)(b). For enquiries made on behalf of an organisation, our basis is Article 6(1)(f): the legitimate interest in responding to professional correspondence and assessing business or research opportunities, balanced against the individual's rights.
Where records are needed to meet a legal obligation, Article 6(1)(c) applies. Handling an actual or reasonably anticipated dispute may rely on the legitimate interest in establishing, exercising or defending legal claims.
This website has no newsletter sign-up and does not use enquiry details for automated advertising or profiling. Sending an enquiry does not subscribe you to marketing. We do not make decisions producing legal or similarly significant effects solely through automated processing in the website's enquiry flow.
Website delivery, cookies and tracking
Your browser necessarily sends connection information, such as an IP address and a request for a page or asset, to the server that delivers the website. This website does not use visitor analytics, advertising trackers, fingerprinting or third-party embeds. The website's own code does not set cookies or store access logs.
The website currently has no cookie-consent banner. Any later technology that requires consent must remain inactive until the relevant consent is given, with a means to withdraw it. A change in services must be reflected in this notice before it takes effect.
Who may receive information
Enquiries are available to authorised WIZ personnel and, where necessary for a response, collaborators who have a relevant role. Service providers can process information to deliver email, IT administration and security. Professional advisers or public authorities may receive information where needed for a legal obligation or a legal claim. We do not sell enquiry information.
The WIZ email domain currently routes incoming mail through Google mail services. Your own email provider also handles the message you choose to send.
International processing
Email and other IT providers may process data outside the European Economic Area, including in the United States. The applicable locations and safeguards depend on the contracted provider and service configuration. Processing is not necessarily confined to the EU.
Where a restricted international transfer is involved, the applicable GDPR Chapter V mechanism must be in place, such as a valid adequacy decision or Standard Contractual Clauses with any necessary supplementary measures. Ask us at office@wizresearch.com for information about the safeguards relevant to your data.
How retention is determined
An enquiry is relevant while we are answering it, assessing a concrete proposal or carrying on the resulting discussion. The retention assessment considers whether that discussion remains active, whether a contract or project resulted, and whether particular records are needed for a statutory duty or an actual or reasonably anticipated legal claim.
Information that is no longer needed for those purposes should be deleted or anonymised. Contract, accounting or grant records can have separate statutory or contractual retention requirements. We do not treat an initial enquiry as permission to keep an indefinite marketing profile.
Your rights and how to use them
Depending on the circumstances, you may request access, correction, erasure or restriction of your personal data, object to processing, or receive portable data. Portability applies where its legal conditions are met. Where processing relies on consent, you can withdraw that consent without affecting the lawfulness of earlier processing. These rights are subject to the conditions and exceptions in the GDPR.
You can object to processing based on legitimate interests for reasons relating to your situation. Any direct-marketing objection must be respected for that purpose. To exercise a right, email office@wizresearch.com. We may need proportionate information to verify your identity.
Requests must be handled without undue delay and normally within one month. Where the GDPR permits an extension of up to two further months, you must be told within the first month, with the reasons.
You may complain to Romania's National Supervisory Authority for Personal Data Processing (ANSPDCP), or another competent supervisory authority, and seek a judicial remedy. Contacting us first does not remove those rights.
Changes and further information
The reviewed date identifies this version. Material changes to purposes, providers or website features require the notice to be reviewed and any additional information or consent to be provided when required.
Useful official guidance: EDPB guidance on individual rights and lawful processing.