Last updated: 15.12.2025
This Privacy Policy explains how personal data is collected, processed, used, and protected in connection with the use of the Dovinio platform (the “Platform”).
1.1 The data controller within the meaning of Regulation (EU) 2016/679 (“GDPR”) and applicable Romanian law is:
INNO HOLDING & CONSULTANCY SERVICES SRL
CUI: 46675065
Registration No.: J40/16082/2022
EUID: ROONRC.J40/16082/2022
Registered Address:
Str. Col. Constantin Blaremberg 4–6, Et. 1, Ap. 2A
011879 Bucharest, Sector 1, Romania
1.2 The Controller operates the Platform as a technology-only service provider.
2.1 This Privacy Policy applies to:
2.2 This Privacy Policy applies regardless of the User’s location, subject to mandatory local data protection laws.
3.1 Dovinio is a multi-vendor, multi-tenant technology platform.
3.2 Vendors act as independent data controllers with respect to personal data of their customers, prospects, or business partners.
3.3 Dovinio is not a joint controller with Vendors within the meaning of Article 26 GDPR.
3.4 Dovinio does not control, verify, or supervise Vendor data processing activities.
4.1 The Platform may process the following categories of personal data:
a) Account Data
b) Technical and Usage Data
c) Communication Data
d) Vendor-Provided Data
4.2 Payment data (such as credit card numbers or bank details) is not stored or processed by Dovinio.
5.1 Personal data is processed for the following purposes:
a) provision and operation of the Platform
b) user authentication and access control
c) technical security and fraud prevention
d) legal compliance and regulatory obligations
e) customer support and communication
5.2 Legal bases for processing include:
6.1 Where Dovinio processes personal data uploaded by Vendors, such processing is carried out solely as a data processor within the meaning of Article 28 GDPR.
6.2 The Vendor remains fully responsible for:
6.3 A separate Data Processing Agreement (DPA) governs such processing relationships.
7.1 The Platform may use hosting providers, content delivery networks, or service providers located inside or outside the European Union.
7.2 Where personal data is transferred outside the EU/EEA, such transfers are carried out in accordance with:
8.1 Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected.
8.2 Data may be retained longer where required by:
9.1 Data subjects have the following rights under GDPR:
9.2 Requests may be submitted using the contact details of the Controller.
10.1 Dovinio implements appropriate technical and organizational measures to protect personal data, including:
10.2 No system can be guaranteed to be completely secure.
11.1 The Platform may use cookies and similar technologies necessary for:
11.2 Non-essential cookies are used only where legally permitted or with user consent.
12.1 The Platform may integrate third-party services (e.g. payment providers, analytics tools).
12.2 Dovinio is not responsible for the privacy practices of third parties.
13.1 The Platform is not intended for use by individuals under the age of 18 unless permitted by applicable law and with appropriate consent.
14.1 The Platform is available worldwide.
14.2 Users are responsible for ensuring compliance with applicable local data protection and privacy laws in their jurisdiction.
15.1 Dovinio may update this Privacy Policy at any time.
15.2 Continued use of the Platform after publication of changes constitutes acceptance of the updated Privacy Policy.
16.1 Data subjects have the right to lodge a complaint with the competent supervisory authority, in particular in:
17.1 This Privacy Policy is governed by the laws of Romania, supplemented by applicable EU data protection law.
