Privacy policy
Updated on 21 September 2026
Who processes the data
The controller is the company that develops Timona — Business Automated System. For any question about your data, write to up@timona.eu.
This page concerns only the data collected through the first-wave sign-up form. It does not concern data processed inside the Timona application, which is covered by a separate contract.
What we collect and why
Through the form on this page we collect three things: the country, the company name and your email address. We do not ask for or store card details, tax numbers or your own customers' personal data.
- Country — so we know which invoicing legislation applies to you at launch.
- Company name — so we can prepare your account.
- Email address — so we can write to you when access opens.
On what legal basis
The basis is your consent, given through the tick box under the form (Article 6(1)(a) of Regulation 2016/679). You can withdraw it at any time, by an email to up@timona.eu or through the unsubscribe link in any message you receive from us. Withdrawal does not affect processing carried out before it.
How long we keep it
Until the public launch and for at most 12 months after it. If you become a customer in the meantime, the data moves under the service contract. If not, it is deleted.
Where it goes
The data sits on servers in the European Union. We do not sell it, we do not rent it out and we do not send it to artificial intelligence services. There is no transfer outside the European Union.
The only people who can see it are the members of our team preparing the launch and the hosting provider, strictly within server maintenance.
What rights you have
You have the right to ask for a copy of your data, to correct it, to erase it, to restrict or object to the processing, and to receive it in a portable format. Write to up@timona.eu and we will answer within 30 days at the latest.
- If our answer does not satisfy you, you can turn to the supervisory authority of the country you live in.
- As the controller is established in Romania, our supervisory authority is the National Supervisory Authority for Personal Data Processing (ANSPDCP).
How we keep robots out
So that the form cannot be filled in automatically, the server keeps a cryptographic fingerprint of your IP address, not the address itself, and deletes it after one hour. The address cannot be reconstructed from the fingerprint and we do not link it to your registration.
Cookies
This page uses no tracking cookies, has no advertising pixels and measures no traffic through external services. It keeps only your chosen language in your browser's local storage, so it does not have to ask again on your next visit. You can delete that at any time from your browser settings.