COMPLIANCE.REGISTRY

LEGAL FRAMEWORK

PROTOCOL.SECTION_01

DATA_PRIVACY_PROTOCOL

1. DATA_CONTROLLER IDENTITY

The data controller responsible for processing personal data under this Privacy Policy is Devsdesignlabs, registered at 237220 | Str. Barbu Stirbei nr. 284 | Sat Iancu Jianu, Jud. Olt | Romania, Romania. For data protection inquiries, contact our Data Protection Officer at [email protected].

2. DATA_COLLECTION SCOPE

We collect and process the following categories of personal data: (a) Identity Data: name, company affiliation, job title; (b) Contact Data: email address, telephone number, physical address; (c) Technical Data: IP address, browser type, operating system, device identifiers; (d) Usage Data: pages visited, time spent, navigation patterns; (e) Communication Data: correspondence records, inquiry content, support tickets.

3. LEGAL_PROCESSING BASES

Processing activities are conducted under the following legal bases per Article 6(1) GDPR: (a) Consent: marketing communications and optional analytics; (b) Contract Performance: service delivery and project execution; (c) Legitimate Interest: security monitoring, service improvement, and fraud prevention; (d) Legal Obligation: tax records, regulatory compliance, and audit requirements.

4. DATA_RETENTION PERIODS

Personal data is retained for the minimum period necessary to fulfill the purposes for which it was collected: (a) Contact inquiries: 24 months from last communication; (b) Service delivery records: 60 months from contract completion; (c) Financial/transaction data: 84 months as required by Romanian tax legislation; (d) Analytics data: 13 months in aggregated, anonymized form.

5. DATA_SUBJECT RIGHTS

Under GDPR, you have the following rights: (a) Right of Access (Article 15): obtain confirmation of processing and copies of personal data; (b) Right to Rectification (Article 16): correct inaccurate personal data; (c) Right to Erasure (Article 17): request deletion of personal data; (d) Right to Restriction (Article 18): limit processing activities; (e) Right to Data Portability (Article 20): receive data in structured, machine-readable format; (f) Right to Object (Article 21): object to processing based on legitimate interests; (g) Right to Withdraw Consent (Article 7(3)): withdraw consent at any time without affecting prior lawful processing.

6. INTERNATIONAL_DATA TRANSFERS

Personal data may be transferred to countries outside the European Economic Area (EEA). Such transfers are conducted under appropriate safeguards including: (a) Standard Contractual Clauses (SCCs) approved by the European Commission; (b) Binding Corporate Rules where applicable; (c) Adequacy decisions for recipient countries. Contact [email protected] for specific transfer mechanism details.

7. DATA_SECURITY MEASURES

We implement appropriate technical and organizational measures including: (a) Encryption of data in transit (TLS 1.3) and at rest (AES-256); (b) Regular security assessments and penetration testing; (c) Access controls with role-based authentication; (d) Employee training on data protection obligations; (e) Incident response procedures aligned with Article 33 GDPR notification requirements.

8. SUPERVISORY_AUTHORITY

You have the right to lodge a complaint with a supervisory authority. For data protection matters in Romania, contact: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul. General Gheorghe Magheru 28-30, Sector 1, București, Romania.

PROTOCOL.SECTION_02

COOKIE_GOVERNANCE

1. COOKIE_CLASSIFICATION

This website utilizes the following cookie categories: (a) Strictly Necessary Cookies: essential for website functionality, session management, and security; (b) Performance Cookies: collect anonymized analytics data to optimize website performance; (c) Functionality Cookies: remember user preferences and settings; (d) Targeting Cookies: used for remarketing and advertising purposes (only with explicit consent).

2. SPECIFIC_COOKIE INVENTORY

Currently deployed cookies: (a) session_id: Strictly Necessary, duration: session, purpose: user authentication; (b) csrf_token: Strictly Necessary, duration: session, purpose: security token; (c) _ga: Performance, duration: 2 years, purpose: Google Analytics visitor identification; (d) _gid: Performance, duration: 24 hours, purpose: Google Analytics session distinction; (e) cookie_consent: Functionality, duration: 12 months, purpose: stores user cookie preferences.

3. COOKIE_MANAGEMENT

You can manage cookie preferences through: (a) Our cookie consent banner displayed on first visit; (b) Browser settings to block or delete cookies; (c) Opt-out links provided for third-party analytics services. Disabling strictly necessary cookies may impair website functionality. Contact [email protected] for cookie-related inquiries.

4. THIRD_PARTY COOKIES

Third-party services that may set cookies include: (a) Google Analytics: website traffic analysis (opt-out: tools.google.com/dlpage/gaoptout); (b) Payment processors: transaction security and fraud prevention; (c) Content delivery networks: performance optimization. We maintain processor agreements with all third-party cookie providers per Article 28 GDPR.

PROTOCOL.SECTION_03

REFUND_MANIFEST

1. REFUND_ELIGIBILITY

Refund eligibility is determined based on the following criteria: (a) Service not delivered as specified in the signed agreement; (b) Material defects in deliverables that cannot be remedied within reasonable timeframes; (c) Cancellation initiated by Devsdesignlabs due to resource constraints; (d) Duplicate billing or processing errors.

2. REFUND_CALCULATION

Refund amounts are calculated as follows: (a) Pre-delivery cancellation: full refund minus administrative fee (10% of contract value); (b) Partial delivery: prorated refund based on completed milestones minus work-in-progress costs; (c) Post-delivery issues: remediation-first approach; refund considered only after two failed remediation attempts; (d) Force majeure events: case-by-case evaluation with maximum 50% refund of unused services.

3. REFUND_PROCESS

To initiate a refund request: (a) Submit written request to [email protected] with contract reference number; (b) Provide detailed justification and supporting evidence; (c) Allow 5-10 business days for evaluation; (d) Approved refunds processed within 14 business days to original payment method; (e) Disputed decisions may be escalated to management review.

4. NON_REFUNDABLE ITEMS

The following are non-refundable: (a) Completed and accepted deliverables; (b) Third-party license fees already incurred; (c) Custom development work specifically authorized and delivered; (d) Consultation hours already consumed; (e) Administrative and setup fees as specified in contract terms.

PROTOCOL.SECTION_04

TERMS_OF_ENGAGEMENT

1. SERVICE_AGREEMENT

These Terms of Service govern the provision of digital engineering services by Devsdesignlabs, registered at 237220 | Str. Barbu Stirbei nr. 284 | Sat Iancu Jianu, Jud. Olt | Romania, Romania. By engaging our services, you agree to these terms in their entirety. Any modifications require written consent from both parties.

2. SCOPE_OF_WORK

Service scope is defined in individual project agreements (SOWs) which form binding attachments to these terms. Scope changes require written change orders with associated cost and timeline adjustments. Devsdesignlabs reserves the right to refuse scope requests that compromise project integrity.

3. PAYMENT_TERMS

Payment obligations: (a) Invoices issued monthly in arrears unless milestone billing specified; (b) Payment due within 14 days of invoice date; (c) Late payments accrue interest at 8% per annum above ECB base rate; (d) Devsdesignlabs may suspend services for invoices unpaid beyond 30 days; (e) All prices exclude applicable VAT which will be added at current statutory rates.

4. INTELLECTUAL_PROPERTY

IP ownership: (a) Pre-existing IP remains with original owner; (b) Custom deliverables transfer to client upon full payment; (c) Devsdesignlabs retains rights to general methodologies, tools, and know-how developed during engagement; (d) Client receives perpetual, non-exclusive license to use deliverables; (e) Portfolio showcase rights retained unless otherwise specified in NDA.

5. CONFIDENTIALITY

Both parties agree to: (a) Maintain strict confidentiality of proprietary information; (b) Use confidential information solely for project execution; (c) Implement appropriate security measures for data protection; (d) Return or destroy confidential materials upon engagement completion; (e) Confidentiality obligations survive termination for 36 months.

6. LIABILITY_LIMITATION

Liability limitations: (a) Devsdesignlabs liability capped at total fees paid in preceding 12 months; (b) Exclusion of indirect, consequential, and punitive damages; (c) Force majeure events excuse performance delays; (d) Client indemnifies Devsdesignlabs against third-party claims arising from client-provided materials or specifications; (e) Professional indemnity insurance maintained per industry standards.

7. TERMINATION_RIGHTS

Termination provisions: (a) Either party may terminate with 30 days written notice; (b) Immediate termination permitted for material breach not remedied within 14 days; (c) Upon termination, client pays for work completed to date; (d) Confidential information return obligations remain effective; (e) Surviving clauses: confidentiality, liability limitation, dispute resolution.

8. DISPUTE_RESOLUTION

Dispute resolution process: (a) Good faith negotiation between authorized representatives; (b) Mediation through neutral third party; (c) Binding arbitration under Romanian Arbitration Rules; (d) Jurisdiction: courts of Olt, Romania; (e) Governing law: laws of Romania and applicable EU regulations including GDPR.

Last updated: July 2026

For legal inquiries: [email protected]