How we actually handle your data.
Last updated · 2026-05-11
This page describes how RAN RESULTS SRL ("we", "us", "Ran·AI") collects, uses, and protects personal data when you visit www.ranresults.com or contact us. We are based in Romania (EU), and this policy is written to comply with the EU General Data Protection Regulation (Regulation 2016/679 — GDPR).
1. Who we are
RAN RESULTS SRL ("Ran·AI") is a private limited company registered in Romania.
- Company number (CUI): RO32881995
- Registered office: Prel. Ghencea 65 B, Bl. H, Sc. 3, Et. 1, Ap. 4, Cod 061702, București, România
- Data protection contact: contact@ranresults.com
We do not have a formal Data Protection Officer (DPO) because we do not engage in large-scale or systematic monitoring of personal data. The address above is where you can write to us about anything in this policy.
2. What we collect
The only personal data we collect is what you give us directly:
- Contact form submissions: name, email, company (optional), area of interest, and the message you write.
- Email correspondence: anything you put in an email to contact@ranresults.com or similar addresses.
We also process minimal technical data for security and abuse prevention:
- IP address and browser headers, used only during a contact form submission to verify the request is not from a bot (via Cloudflare Turnstile). We do not store this data ourselves; it is processed in transit by Cloudflare.
- Server access logs, retained by Cloudflare for a short period (typically 7-14 days) for security and operational purposes. We do not retain or analyse these logs.
We do not use analytics, advertising trackers, or third-party scripts that collect data about you.
3. Why we collect it (lawful basis)
Under GDPR Article 6, we rely on the following lawful bases:
- Legitimate interest (Art. 6(1)(f)) — to respond to your inquiry, to maintain a record of our correspondence, and to protect the website from abuse. We have considered your rights and freedoms and believe this processing does not unduly impact them; you can object at any time (see Section 7).
- Contract performance (Art. 6(1)(b)) — if your inquiry leads to an engagement, we process your data to negotiate and deliver the services.
- Legal obligation (Art. 6(1)(c)) — to comply with tax, accounting, and other statutory requirements once we are in a commercial relationship.
4. Who we share it with
We share personal data only with the following third-party service providers ("processors"), each bound by a data processing agreement and operating under GDPR-compliant safeguards:
- Resend (Resend AI, Inc.) — transactional email delivery. Used to send the contact-form notification to our inbox and the auto-reply to your email. Resend's EU sending region is hosted on AWS in Ireland (eu-west-1).
- Cloudflare, Inc. — website hosting (Workers), bot protection (Turnstile), and DNS. Cloudflare operates a global edge network; requests are typically processed at the nearest data centre.
- Google LLC (Google Workspace) — email inbox where contact briefs are read. Workspace data resides in Google's EU data centres for our organisation.
International transfers of personal data outside the EEA, where they occur, are covered by the European Commission's Standard Contractual Clauses and, for transfers to the United States, supplementary safeguards consistent with the EU-US Data Privacy Framework where applicable.
We do not sell, rent, or share personal data with anyone else. We never transfer your data to advertising networks or data brokers.
5. How long we keep it
We hold personal data only as long as we need it for the purpose for which we collected it.
- Contact-form submissions and email correspondence: retained for up to 24 months after the last interaction, then deleted unless an engagement has begun.
- Engagement records: retained for the duration of the engagement plus the period required by Romanian commercial and tax law (currently 10 years for accounting records).
- Auto-reply email metadata in Resend: retained per Resend's logging policy (typically 30 days).
6. Cookies and similar technologies
The website does not set any cookies on your device. We do not use Google Analytics, Meta Pixel, or any other tracker.
The Cloudflare Turnstile widget on the contact form may use a short-lived browser-local token to verify that you are not a bot. This is purely functional and is not used for tracking. The token is discarded when you close the tab.
Because we set no cookies, no cookie banner is required.
7. Your rights
Under GDPR Articles 15-22, you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — ask us to delete data we hold, subject to legal retention obligations.
- Restriction — ask us to limit how we process your data.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interest, including the contact form record.
To exercise any of these rights, email contact@ranresults.com. We respond within 30 days. We may need to verify your identity before disclosing any data.
You also have the right to lodge a complaint with the Romanian Data Protection Authority — Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), dataprotection.ro — or the supervisory authority in your country of residence.
8. Security
We apply reasonable technical and organisational measures to protect your data: HTTPS-only transport, strict Content Security Policy, no third-party tracking scripts, server-side input validation, anti-bot challenges, and least-privilege access for team members. The website is served from Cloudflare's edge with automatic TLS and DDoS protection.
No system is perfectly secure. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and, where required, notify you directly.
9. Children
This site is intended for organisations and adult professionals. We do not knowingly collect personal data from anyone under 16. If you believe a minor has submitted data to us, contact us and we will delete it.
10. Changes to this policy
We update this policy when our processing changes meaningfully. The "Last updated" date at the top of this page reflects the most recent revision. Material changes are highlighted on the homepage for at least 30 days before taking effect.
11. Contact
For any question about this policy, your data, or to exercise your rights, write to:
RAN RESULTS SRL
Prel. Ghencea 65 B, Bl. H, Sc. 3, Et. 1, Ap. 4
Cod 061702, București, România
contact@ranresults.com