REGULATORY
PROTOCOLS

1. Data Controller Identification

The data controller for the processing of personal data through this website is KernovaLabs, registered at 731110 | Str. Varariei nr. 2, bl. G3 | Mun. Barlad, Jud. Vaslui | Romania. For any inquiries regarding data processing, you may contact our Data Protection Officer at [email protected].

2. Categories of Personal Data Processed

We collect and process the following categories of personal data through this terminal:

• Identity Data: Full name, professional title, organization affiliation provided through contact forms.
• Contact Data: Email address, telephone number, postal address submitted during project inquiries.
• Technical Data: IP address, browser type and version, operating system, device identifiers, and access timestamps collected automatically through server logs.
• Usage Data: Page navigation patterns, session duration, interaction events, and referral sources aggregated through analytics instrumentation.
• Communication Data: Content of messages, project specifications, and correspondence transmitted through our contact channels.

3. Legal Basis for Processing

All personal data processing activities are conducted under one or more of the following legal bases as defined in Article 6(1) of the GDPR:

• Consent (Art. 6(1)(a)): Where you have provided explicit, informed, and freely given consent for specific processing purposes.
• Contractual Necessity (Art. 6(1)(b)): Where processing is necessary for the performance of a contract to which you are a party, or for pre-contractual measures taken at your request.
• Legitimate Interest (Art. 6(1)(f)): Where processing is necessary for our legitimate business interests, including service improvement, security monitoring, and fraud prevention, provided such interests are not overridden by your fundamental rights.

4. Data Retention Periods

Personal data is retained only for the duration necessary to fulfill the purposes for which it was collected:

• Contact form submissions: Retained for 24 months from the date of submission, or until the conclusion of any resulting contractual relationship, whichever is later.
• Server log data: Automatically purged after 90 days.
• Contract-related data: Retained for the duration of the contractual relationship plus 10 years as required by Romanian commercial law and accounting regulations.
• Marketing consent records: Retained for the duration of the consent plus 3 years for evidentiary purposes.

5. Data Recipients and Transfers

Your personal data may be disclosed to the following categories of recipients:

• Authorized personnel within KernovaLabs who require access to fulfill their professional duties.
• Technical service providers (hosting providers, analytics platforms, email services) operating under documented data processing agreements in compliance with Article 28 GDPR.
• Public authorities and regulatory bodies where disclosure is required by law or legal process.

All third-party data processors are contractually bound to implement appropriate technical and organizational measures ensuring a level of security appropriate to the risk, as required by Article 32 GDPR. No personal data is transferred to countries outside the European Economic Area without adequate safeguards as defined in Chapter V of the GDPR.

6. Data Subject Rights

Under the GDPR, you possess the following rights regarding your personal data:

• Right of Access (Art. 15): The right to obtain confirmation as to whether your personal data is being processed and to receive a copy of such data.
• Right to Rectification (Art. 16): The right to request correction of inaccurate personal data or completion of incomplete data.
• Right to Erasure (Art. 17): The right to request deletion of your personal data where there is no compelling reason for continued processing.
• Right to Restriction (Art. 18): The right to request restriction of processing in specific circumstances.
• Right to Data Portability (Art. 20): The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object (Art. 21): The right to object to processing based on legitimate interests, including profiling.
• Right to Withdraw Consent (Art. 7(3)): The right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please submit a written request to [email protected]. We will respond to your request within 30 calendar days. In the event of complexity or volume of requests, this period may be extended by an additional 60 days, with timely notification provided.

7. Right to Lodge a Complaint

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) in Romania:

B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucuresti, Romania
Tel: +40 318 059 211 | Email: [email protected] | Website: www.dataprotection.ro

8. Automated Decision-Making

KernovaLabs does not engage in automated decision-making, including profiling, that produces legal effects or similarly significantly affects data subjects. All decisions affecting service delivery and client relationships involve human review and judgment.

1. Definition and Function

Cookies are small text files stored on your device when you access this website. They enable the terminal to recognize your device, maintain session state, and deliver a functional browsing experience. Similar technologies including local storage, session storage, and pixel tags may also be employed.

2. Categories of Cookies Deployed

• Strictly Necessary Cookies: Essential for the operation of this website. These enable core functions such as navigation access, form submission, and security token management. They do not require consent under the ePrivacy Directive. Example: Session identifier, CSRF protection token, cookie consent preference.
• Functional Cookies: Enhance the performance and personalization of the website by remembering your preferences and settings. These cookies may be set by us or by third-party providers whose services we have integrated. Example: Language preference, display configuration, recent activity cache.
• Analytics Cookies: Collect aggregated, anonymized information about how visitors interact with this website, including pages visited, time spent, and navigation patterns. All analytics data is processed in aggregate and does not enable identification of individual users. Example: Page view counters, session duration metrics, traffic source attribution.

3. Cookie Consent Management

Upon your first visit, a consent banner is presented allowing you to accept or decline non-essential cookies. Your choice is recorded in local storage and respected across all subsequent sessions. You may modify your cookie preferences at any time by clearing your browser's local storage for this domain or by revisiting this policy page.

Declining non-essential cookies will not diminish the core functionality of this website. Strictly necessary cookies remain active as they are required for basic terminal operation and cannot be disabled.

4. Third-Party Cookie Providers

This website may integrate services from the following third-party providers, each operating under their own privacy policies:

• Google LLC (Analytics): Anonymized usage analytics. IP anonymization is enabled by default. Data processed under Standard Contractual Clauses.
• Stripe, Inc. (Payment Processing): Transaction-related cookies for payment security and fraud prevention. Governed by Stripe's Privacy Policy.

5. Browser Configuration

You may configure your browser to refuse all or some cookies, or to alert you when cookies are being sent. The following resources provide guidance for major browsers:

• Google Chrome: Settings > Privacy and Security > Cookies
• Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data
• Apple Safari: Preferences > Privacy > Manage Website Data
• Microsoft Edge: Settings > Privacy, Search, and Services > Cookies

Please note that disabling certain cookies may impact the functionality of this website.

1. Scope and Application

This Refund Policy governs the terms under which KernovaLabs processes refund requests for digital services and professional engagements rendered through this terminal. This policy applies to all service contracts initiated after the effective date of this document.

2. Service Delivery and Acceptance

All services are delivered in accordance with the specifications defined in the applicable Statement of Work (SOW) or Service Agreement. Delivery milestones are documented and require explicit client acceptance at each stage. Services are considered accepted upon:

• Written confirmation of milestone completion by the client.
• Expiration of the 5-business-day review period following milestone delivery without written objection.
• Client utilization of delivered components in production environments.

3. Refund Eligibility Criteria

Refund requests are evaluated on a case-by-case basis according to the following framework:

• Pre-Delivery Cancellation: Full refund of any advance payments if cancellation occurs before work commencement on the contracted milestone.
• Incomplete Delivery: Pro-rata refund proportional to undelivered and unaccepted work components, calculated based on the milestone payment schedule.
• Material Non-Conformance: If delivered work materially deviates from the agreed specifications and cannot be remedied within the scope of the original agreement, a partial or full refund may be issued following a formal quality review process.
• Force Majeure: Where service delivery is prevented by circumstances beyond reasonable control, parties shall negotiate equitable adjustment of terms or proportional refund of prepaid amounts.

4. Non-Refundable Items

• Completed and accepted milestones that have passed the review period.
• Third-party license fees, domain registrations, and hosting prepayments incurred on behalf of the client.
• Consultation and audit services where the deliverable report has been provided.
• Custom development work that has been delivered and deployed to client-controlled environments.

5. Refund Processing Procedure

• Refund requests must be submitted in writing to [email protected] within 30 calendar days of the event triggering the request.
• All refund requests are acknowledged within 3 business days and evaluated within 15 business days.
• Approved refunds are processed to the original payment method within 30 calendar days of approval.
• Disputed refunds may be escalated to mediation under the Romanian Consumer Protection framework.

6. Dispute Resolution

In the event of a refund dispute that cannot be resolved through direct negotiation, parties may seek resolution through the competent courts of Barlad, Vaslui County, Romania, or through the Online Dispute Resolution platform provided by the European Commission at https://ec.europa.eu/consumers/odr.

1. Acceptance of Terms

By accessing, browsing, or utilizing any service offered through this website operated by KernovaLabs at 731110 | Str. Varariei nr. 2, bl. G3 | Mun. Barlad, Jud. Vaslui | Romania, you acknowledge and agree to be bound by these Terms of Service. If you do not accept these terms in their entirety, you must immediately discontinue use of this terminal and its associated services.

2. Service Description

KernovaLabs provides professional digital services including but not limited to: web development, systems architecture, infrastructure engineering, API development, product ecosystem construction, and technical consulting. All services are delivered in accordance with individual Statements of Work (SOW) or Service Agreements executed between the parties.

3. Engagement and Contract Formation

Service engagements are initiated through the following protocol:

• Project inquiry submission through the contact terminal or direct communication channels.
• Discovery session and requirements analysis conducted by our engineering team.
• Proposal delivery with detailed scope, timeline, pricing, and milestone structure.
• Written acceptance of proposal by client, forming a binding service agreement.
• Upon formation, a 50% advance payment is required to initiate the first delivery milestone.

4. Payment Terms

• All prices are quoted in Euros (€) and are exclusive of applicable VAT unless otherwise stated.
• Invoices are issued upon milestone completion and are payable within 14 calendar days.
• Late payments incur a statutory interest rate of 9.5% per annum as prescribed by Romanian commercial law.
• Suspension of services may occur if payment is not received within 30 days of the invoice date.
• All payment processing is handled through Stripe, Inc. in compliance with PCI-DSS Level 1 standards.

5. Intellectual Property

Upon full payment of all applicable fees, the client receives a perpetual, non-exclusive license to use all custom-developed deliverables for their intended business purpose. KernovaLabs retains ownership of:

• Pre-existing frameworks, libraries, and development tools utilized in service delivery.
• General methodologies, processes, and know-how developed through project execution.
• Right to reference the engagement in marketing materials, subject to client approval of specific details.

6. Confidentiality

Both parties agree to maintain strict confidentiality of all proprietary information exchanged during the engagement. This obligation survives termination of the service agreement for a period of 3 years. Confidential information shall not be disclosed to third parties without prior written consent, except as required by law or regulatory authority.

7. Limitation of Liability

To the maximum extent permitted by applicable law, KernovaLabs shall not be liable for indirect, incidental, special, consequential, or punitive damages arising from service delivery. Total aggregate liability under any service agreement shall not exceed the total fees paid by the client under that agreement during the 12-month period preceding the claim. This limitation does not apply to breaches of confidentiality, intellectual property infringement, or gross negligence.

8. Force Majeure

Neither party shall be liable for failure or delay in performance resulting from causes beyond reasonable control, including but not limited to: natural disasters, pandemics, government actions, war, terrorism, cyber attacks, infrastructure failures, or utility disruptions. The affected party shall provide prompt written notice and use commercially reasonable efforts to mitigate the impact.

9. Termination

• Either party may terminate a service agreement with 30 days' written notice for convenience.
• Immediate termination is permitted in cases of material breach that remains uncured for 15 days following written notice.
• Upon termination, the client shall pay for all work completed and accepted up to the termination date.
• All delivered work product and confidential information shall be returned or certified destroyed within 30 days.

10. Governing Law and Jurisdiction

These Terms of Service are governed by the laws of Romania and the European Union. Any disputes arising from or relating to these terms shall be submitted to the exclusive jurisdiction of the competent courts of Barlad, Vaslui County, Romania. For consumer clients, mandatory protections under the Romanian Consumer Code (OUG 34/2014) and EU Consumer Rights Directive (2011/83/EU) shall apply.

11. Severability

If any provision of these terms is found to be invalid or unenforceable by a court of competent jurisdiction, the remaining provisions shall continue in full force and effect. The invalid provision shall be modified to the minimum extent necessary to make it valid and enforceable while preserving the original intent.

12. Amendments

KernovaLabs reserves the right to modify these Terms of Service at any time. Material changes will be communicated through the website or via direct email notification. Continued use of the terminal following notification constitutes acceptance of the amended terms. Users are encouraged to review this page periodically.