Last updated on 23.06.2026
This Privacy Policy (“Policy”) will help you understand how Flyward SRL (“Flyward”, “us”, “we”, “our”) uses and protects the data you provide to us when you visit and use the website (“website”, “service”).
For personal data processed through this website, the data controller is Flyward SRL, with registered office at Brasov 27 Aleea Dealul Spirii, Block 3, Ground Floor-1st Floor, Ap. 3, Brasov County, registered with the Trade Registry under no. J2023003702081, having tax identification number 49320636.
For any privacy-related questions or requests, you may contact us at: data.privacy@flyward.eu .
Flyward has not appointed a Data Protection Officer. If this changes, the relevant contact details will be made available in this Policy.
You acknowledge that this Privacy Policy is designed to be read in connection with the Website’s Terms of Use.
We reserve the right to change this policy at any given time, of which you will be promptly updated. If you want to ensure that you are up to date with the latest changes, we advise you to visit this page frequently.
Flyward is committed to providing quality services to you, and this policy outlines our ongoing obligations to you regarding how we manage your Personal Data.
This privacy policy also sets out how we protect your privacy and your rights regarding our use of your Personal Data.
This Privacy Policy explains how Flyward SRL processes personal data collected through the website. We process personal data only where we have a valid legal basis under applicable data protection laws. Using the website does not mean that you consent to all processing activities described in this Policy. Where consent is required, including for non-essential cookies, analytics/tracking technologies or direct marketing, we will request your consent separately and you may withdraw it at any time.
What is Personal Data, and why do we collect it?
Personal Data is information or an opinion that identifies an individual.
We collect your Personal Data for the primary purpose of providing our services to you. We may also use your Personal Data for secondary purposes closely related to the primary purpose in circumstances where you reasonably expect such use or disclosure. You may unsubscribe from our mailing/marketing lists at any time by contacting us in writing.
When we collect Personal Data, we will, where appropriate and possible, explain why we are collecting the information and how we plan to use it.
What user data we collect
The personal data collected through the website may be processed as follows:
| Processing activity | Personal data processed | Purpose | Legal basis | Retention |
| Website operation and security | IP address, device/browser information, technical logs, strictly necessary cookies | To operate, secure and maintain the website | Legitimate interest – Article 6(1)(f) GDPR | For the period necessary for website operation and security purposes, generally for the period necessary for website operation and security purposes, unless a longer period is required for security investigations or legal claims |
| Contact / request demo / B2B enquiries | Name, surname, company, role/title, phone number, email address, message content and any information submitted through the form | To respond to your request, communicate with you and manage potential business relationships | Legitimate interest – Article 6(1)(f) GDPR; where the request relates to steps before entering into a contract, Article 6(1)(b) GDPR | For the period necessary to handle the request and, where relevant, for the period necessary to handle the request and, where relevant, for the applicable limitation period |
| Recruitment / internship / job applications, if forms are active on the website | Name, surname, phone number, email address, CV, education details, LinkedIn profile and any information provided in the application | To assess applications and manage recruitment processes | Steps prior to entering into a contract – Article 6(1)(b) GDPR; legitimate interest – Article 6(1)(f) GDPR; consent, where applicable, for keeping the application for future opportunities | for the duration of the recruitment process and afterwards according to the applicable recruitment retention period communicated to candidates |
| Analytics and website performance, if enabled | Online identifiers, IP address, cookie identifiers, pages visited, visit duration, browser/device data, interactions with the website | To understand website usage and improve the website | Consent – Article 6(1)(a) GDPR, where non-essential cookies or similar technologies are used | According to the cookie/analytics retention settings described in the Cookie Policy and consent banner |
| Marketing communications, if enabled | Name, email address, company, communication preferences | To send marketing communications, newsletters or promotional information | Consent – Article 6(1)(a) GDPR, unless another lawful basis is available under applicable law for existing business contacts | Until consent is withdrawn/unsubscribe is requested, plus a limited suppression period to evidence the opt-out |
| Legal compliance and claims | Relevant personal data from the above categories | To comply with legal obligations and establish, exercise or defend legal claims | Legal obligation – Article 6(1)(c) GDPR; legitimate interest – Article 6(1)(f) GDPR | For the period required by applicable law or for the relevant limitation period |
Where a website form marks certain fields as mandatory, the provision of that data is necessary for us to process your request, application or demo enquiry. If you do not provide the mandatory information, we may not be able to respond to your request or process your application. Optional fields are voluntary.
Safeguarding and securing the data
Flyward is committed to securing your data and keeping it confidential. Flyward has done, and it is doing all in its power to prevent data theft, unauthorized access, and disclosure by implementing the latest technologies and software, which help us safeguard all the information we collect online.
Your Personal Data is stored in a manner that reasonably protects it from misuse and loss and from unauthorized access, modification,or disclosure.
Personal data collected through the website will be retained only for as long as necessary for the purposes described in this Policy, according to the retention periods indicated above, unless a longer retention period is required or permitted by law.
Recipients of personal data
We may disclose personal data, where necessary, to the following categories of recipients: hosting and infrastructure providers, website maintenance and IT service providers, form management providers, email/communication providers, CRM or marketing tools, analytics providers, cookie consent management providers, professional advisers, public authorities and courts, where required by law.
Where such providers process personal data on our behalf, they act as processors under our instructions and are subject to appropriate contractual obligations.
International transfers
Some of our service providers may be located outside the European Economic Area or may provide services involving access to personal data from outside the European Economic Area. In such cases, we will ensure that appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses approved by the European Commission or other safeguards permitted under applicable data protection law.
Our cookie policy
The website uses strictly necessary cookies and may use non-essential cookies or similar technologies, such as analytics or tracking technologies, only where these are enabled and, where legally required, only after you have provided your consent through the cookie banner.
Strictly necessary cookies are used to make the website function properly and do not require consent. Non-essential cookies, including analytics, marketing or third-party cookies, will only be placed after consent is provided.
You may withdraw or change your cookie consent at any time through the cookie settings available on the website.
Detailed information about the cookies and similar technologies used on the website, including cookie name, provider, purpose, duration and category, is available in the Cookie Policy and/or cookie settings panel.
Links to other websites
Our website contains links that lead to other websites. If you click on these links, Flyward is not held responsible for your data and privacy protection. Visiting those websites is not governed by this privacy policy agreement. Make sure to read the privacy policy documentation of the website you go to from our website.
Do we use analysis tools?
If analytics tools, such as Google Analytics or similar services, are enabled on the website, these tools may collect information about how visitors interact with the website, such as pages visited, visit duration, browser and device information, approximate location and online identifiers.
Analytics tools involving non-essential cookies or similar technologies will only be used, where legally required, after you have provided your consent through the cookie banner. You may withdraw or change your consent at any time through the cookie settings available on the website.
The exact analytics tools used, including provider, cookie name, purpose, duration and category, are described in the Cookie Policy and/or cookie settings panel.
Restricting the collection of your personal data
At some point, you might wish to restrict the use and collection of your personal data. You can achieve this by doing the following: When you are filling the forms on the website, make sure to check if there is a box which you can leave unchecked, if you don’t want to disclose your Personal Data.
If you have already agreed to share your information with us, feel free to contact us via email and we will be more than happy to change this for you.
Access to your Personal Data
You may access the Personal Data we hold about you and to update and/or correct it, subject to certain exceptions. If you wish to acces your Personal Data, please contact us in writing.
We will not charge a fee for responding to your request, unless the request is manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse to act on the request, as permitted by applicable law. In order to protect your Personal Data, we may require identification from you before releasing the requested information.
Maintaining the quality of your Personal Data
It is important to us that your Personal Data is up to date. We will take reasonable steps to make sure that your Personal Data is accurate, complete and up-to-date. If you find that the information we have is not up to date or is inaccurate, please advise us as soon as practicable so we can update our records and ensure we can continue to provide quality services for you.
Flyward will not lease, sell or distribute your Personal Data to any third parties, unless we have your permission. We might do so if the law forces us. Your Personal Data will be used when we need to send you promotional materials if you agree to this privacy policy.
For personal data collected through this website, Flyward acts as data controller.
Where Flyward processes personal data on behalf of its customers in connection with the Flyward platform or related services, such processing is governed by the applicable customer agreement and data processing agreement and is not covered by this website Privacy Policy.
Data subject rights
We do not use personal data collected through the website for decisions based solely on automated processing, including profiling, which produce legal effects concerning you or similarly significantly affect you.
Right to be informed
To know the identity of the data controller and the purpose for obtaining your Personal Data. Controller shall take all appropriate measures to provide the data subject with all information regardless of whether the data is collected from the data subject or not, in a concise, transparent and intelligible, and easily accessible form, using clear and plain language
Right of access
To get a copy of your Personal Data. The GDPR grants the data subject with the right to obtain confirmation from the controller as to whether his/her personal data is being processed, to access the data. In addition, the data subject is entitled to information relating to the following: the retention period (if known or if unknown the criteria used to determine this period).
Right of rectification or erasure (‘the right to be forgotten’)
To have your Personal Data corrected or deleted if inaccurate. The data subject’s right to request from the controller rectification or deletion of personal data, to restrict the processing or to object to the processing, the right to lodge a complaint with a supervisory authority, the source of the data.
Right to block, restrict certain uses
To prevent your Personal Data being used for certain purposes. The data subject can restrict the processing of his or her personal data in certain situations, if the accuracy of the data is contested, the processing is unlawful, the controller no longer requires the personal data for the purposes of processing, but the data is still required to establish, exercise or defend a claim or there is a pending erasure request and the data controller is verifying it.
Right to object to the processing
To stop some specific uses of your Personal Data. Data subjects continue to enjoy the right to object at any time to the processing of their personal data on particular grounds (in particular, relating to his or her particular situation) and for direct marketing purposes including profiling.
Right to portability
The GDPR introduces the new right to data portability which essentially requires the controller to provide the data to the data subject in a structured, commonly used and machine-readable format to be freely transferred to another controller without any restrictions from the initial controller. In addition, where it is technically feasible to do so, the initial controller may be requested by the data subject to transfer the personal data directly to another controller. The right to data portability applies only when the data is processed by automated means and the processing is based on consent or to fulfil a contract.
Freedom from automated decision making, right not to be subject to automated individual-decision making and profiling
To have a human input in the making of important decisions relating to you. Data subjects have a right not to be subject to a decision based solely on automated processing (includes profiling) if these decisions produce legal effects or similarly significantly affects the data subject.
Revocation of your consent to the processing of data
A wide range of data processing transactions are possible only if they are subject to your express consent. You can also revoke at any time any consent you have already given us. To do so, all you are required to do is send us an informal notification via e-mail to data.privacy@flyward.eu . This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.
You also have the right to lodge a complaint with the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing — ANSPDCP, if you believe that your personal data has been processed in breach of applicable data protection laws. ANSPDCP can be contacted at anspdcp@dataprotection.ro or at 28-30 G-ral Gheorghe Magheru Blvd., District 1, Bucharest, Romania.
Changes to this privacy policy
Flyward has the discretion to update this privacy policy at any time. When we do, we will revise the updated date at the bottom of this page. We encourage Users to frequently check this page for any changes to stay informed about how we are helping to protect the Personal Data we collect. You acknowledge and agree that it is your responsibility to review this privacy policy periodically and become aware of modifications.
Contacting us
If you have any questions about this Privacy Policy, the practices of this website, or your actions on this website, please contact us at: data.privacy@flyward.eu