Controller: K9OS SRL — Romania.
Sites covered: k9os.ai (marketing site).
Scope: This policy covers data we collect from visitors of our marketing website. A separate Privacy Policy governs the K9OS app.
1. Who we are
K9OS SRL ("K9OS", "we", "us") is a Romanian company in registration at ONRC. K9OS builds an operating system for professional dog businesses — kennels, training facilities, breeding programs, working-dog producers.
Contact for privacy questions: privacy@k9os.ai
Postal address: [sediu social — TBD once ONRC registration completes]
Romanian DPA: ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal) — dataprotection.ro
We have not appointed a Data Protection Officer because K9OS does not meet the GDPR Art. 37 criteria for mandatory DPO appointment. You can reach our privacy contact at the email above.
2. What we collect on the marketing site
We collect as little as possible.
Visiting the site:
- Aggregate analytics (Plausible Analytics, EU-hosted). No cookies, no personal identifiers. We see counts like "pageviews of /pricing yesterday: 47" but cannot identify individual visitors.
- Standard web server logs (IP address truncated, user-agent, requested URL, timestamp). Retained 30 days for security and abuse prevention.
Asking us a question (contact form / demo request):
- Your name, email, optional company name, your message.
Newsletter (if/when launched):
- Your email address and the fact that you opted in.
3. Why we use this data (lawful bases)
| Activity | Lawful basis (GDPR Art. 6) |
|---|---|
| Server logs, abuse prevention | Legitimate interest — security (Art. 6(1)(f)) |
| Aggregate analytics | Legitimate interest — improving the site (Art. 6(1)(f)). Cookie-free, aggregate only. |
| Contact form / demo replies | Consent (you submit the form) + steps to enter into a contract (Art. 6(1)(a) + (b)) |
| Newsletter | Consent (Art. 6(1)(a)) |
We do not buy or sell personal data. We do not run advertising on the site. We do not engage in profiling or automated decision-making.
4. How long we keep it
| Data | Retention |
|---|---|
| Server access logs | 30 days |
| Aggregate analytics | Aggregate stats: indefinite. Raw events: 12 months. |
| Contact form submissions | 12 months from last interaction (or longer if you become a customer — covered then by the app Privacy Policy) |
| Newsletter signups | Until you unsubscribe |
5. Who we share it with
Marketing-site data is processed by:
- K9OS internally (Alin Dinescu and, in the future, K9OS team members).
- Hetzner Online GmbH (Germany, EU) — hosts the marketing site and contact-form database.
- Plausible Analytics B.V. (Netherlands, EU) — provides our analytics.
- Email provider — TBD (EU-hosted preferred) — delivers our replies and (later) newsletter emails.
We never share marketing-site data with advertisers, data brokers, or social networks.
For a full list of sub-processors see: sub-processor list.
6. International transfers
All marketing-site data is processed inside the EU/EEA. We do not transfer marketing-site data outside the EU. If our email provider turns out to be outside the EU, we will have Standard Contractual Clauses in place and update this policy.
7. Your rights under GDPR
You have the right to:
- Access your data and ask for a copy (Art. 15).
- Correct inaccurate data (Art. 16).
- Delete your data (Art. 17), subject to legal retention requirements.
- Restrict processing in certain circumstances (Art. 18).
- Port your data (Art. 20) — receive it in a structured, machine-readable format.
- Object to processing based on legitimate interest (Art. 21).
- Withdraw consent at any time (this does not affect the lawfulness of processing before withdrawal).
To exercise any of these rights, email privacy@k9os.ai. We will reply within 30 days. If you are unhappy with our response, you can lodge a complaint with the Romanian DPA (ANSPDCP, dataprotection.ro) or your local EU DPA.
8. Cookies
The marketing site uses no tracking cookies and no analytics cookies. We may set a small preference cookie if you change the language. See the Cookie Policy for details.
9. Children
The marketing site is aimed at professional dog businesses. We do not knowingly collect data from anyone under 16. If you believe a child has submitted data, email us and we will delete it.
10. Security
We protect marketing-site data using:
- TLS for all browser ↔ server connections.
- Encryption at rest for the database that stores contact form submissions.
- Restricted access (only K9OS staff who need it).
- Daily encrypted backups, retained 30 days.
11. Changes to this policy
We will update this policy when our practices change. The "Last updated" date at the top reflects the most recent change. Material changes are announced on the site footer for 30 days. Where required by law, we will ask for renewed consent.
12. Governing law
This policy is governed by Romanian law and the GDPR. Disputes are subject to the courts of Brașov, Romania, without prejudice to the rights consumers have under their local law.