Data protection notice
Operator: DIANYS HOLDING SRL, a company registered in Romania — Companies Register no. J2017000514228 (also shown as J22/514/2017), tax identification number (CUI) 37172757, EUID ROONRC.J2017000514228. Registered office: Str. Dumitru D. Pătrășcanu 5, Bl. 34, Sc. B, Et. 1, Ap. 6, Tomești, Iași County, 707515, Romania. Zarina CRM is operated from Romania; we have no establishment in the United Arab Emirates.
Version 2.0, effective from 29 October 2026.
This page is the information notice required by Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR), which applies to us as an EU-based controller, and it also covers visitors and clients in the United Arab Emirates. It is written around concrete situations, so you can quickly find what concerns you. Full details are in the Privacy Policy.
The controller
DIANYS HOLDING SRL, VAT ID RO37172757, trade register no. J22/514/2017, Str. Dumitru D. Pătrășcanu nr. 5, Tomești, Iași, 707515, Romania. Email: contact@zarinacrm.ae.
Situation 1: you wrote to us through a form on the website
We process your name, email, phone number, company name and the content of your message in order to reply to you. The legal basis is taking steps at your request before entering into a contract and, for messages that do not lead to a contract, our legitimate interest in communicating with those who contact us. We keep this data for 24 months from the last correspondence.
The consent box in the form confirms that you have read this notice. Filling in the marked fields is necessary so that we can reply to you.
Situation 2: you requested a demo
In addition to contact details, we process your field of activity, the estimated number of users and the stated objective, in order to configure a relevant test environment. The legal basis is the pre-contractual steps you requested.
Important about demo data: the demo instance is temporary. The data you enter there is test data and is deleted, together with the instance, 30 days after access expires. We recommend that you do not enter real data about your clients in the demo.
Situation 3: you are a client or a client’s representative
We process the identification and contact details of contact persons, billing data and the history of support requests. The legal bases are the performance of the contract and our legal, tax and accounting obligations.
Financial documents are kept for 10 years, as required by the accounting law that applies to us. Other contractual data is kept for the duration of the contract and 3 years after it ends.
Situation 4: your data is in another company’s Zarina CRM installation
This is the most common confusion, so we explain it clearly.
Zarina CRM is installed on each client’s own server. If a company holds your data in its CRM — because you are its client, supplier or candidate — the controller of that data is that company, not us. It decides what data it collects, why and for how long. We only supplied the software, just as a diary manufacturer is not responsible for what someone writes in it.
To exercise your rights over that data, contact that company directly. If you do not know whom to contact and you write to us, we will point you in the right direction, but we cannot access the data and cannot change or delete it in place of the controller.
When a client asks us for maintenance or support and the work involves access to data, we act as a processor, strictly on the client’s instructions and under a data processing agreement concluded in line with Article 28 GDPR.
Who we share data with
Our hosting provider, accountants and payment processors, and where needed legal advisers and public authorities, when the law requires it. We do not sell data. The list of providers that process data on our behalf can be requested at contact@zarinacrm.ae.
International transfers
Data is stored on servers in the European Union. We also operate commercially in the United Arab Emirates; where providing a service to a client outside the EEA involves access to personal data, the transfer takes place only on the basis of the safeguards in Chapter V GDPR, usually the European Commission’s standard contractual clauses. For UAE clients, the CRM itself runs on the client’s own server, so client data does not pass through our infrastructure.
Automated decisions
We do not take decisions based solely on automated processing that produce legal effects for you, and we do not carry out profiling.
Your rights and how to exercise them
You have the right of access, rectification, erasure, restriction of processing, data portability and objection — including to direct marketing, at any time and without justification — and the right to withdraw your consent at any time, as easily as you gave it. If you are in the UAE, you also have the rights granted to data subjects under Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.
Write to contact@zarinacrm.ae. We reply within 30 days at most; this can be extended by two months for complex requests, in which case we tell you within the first 30 days. Exercising your rights is free of charge. We may ask for additional information to confirm your identity, precisely so that we do not disclose data to someone who is not entitled to it.
Data breaches
If a breach occurs that presents a risk to your rights, we notify the supervisory authority within 72 hours of becoming aware of it and inform you directly, without undue delay, when the risk is high.
Where you can complain
To us first — it is usually resolved quickly. If you are not satisfied, you can contact our lead supervisory authority, the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP): B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, Bucharest, anspdcp@dataprotection.ro, dataprotection.ro, or the data protection authority in your country of residence. You also have the right to go to court.
Changes
The current version and its effective date are shown at the top of the page. Changes that significantly affect your rights are communicated to you directly, before they take effect.