Legal

Privacy Policy

Last updated: 29 April 2026.

This Privacy Policy explains how Binovate Labs SRL ("Binovate", "we", "us", "our"), trading as CEX Solutions, collects, uses, and protects personal data through our public marketing website at https://cex-solutions.com.

This policy covers the marketing website only. If you become a customer, the processing of personal data inside the CEX360 Platform is governed by your contract with us and our Data Processing Agreement (DPA), which we make available on request.

Who we are

The data controller is Binovate Labs SRL, registered at 40 Ardealului Str., Apt. 1, District 1, Bucharest, Romania. Company number J40/5074/2013, VAT RO31523590. We trade under the name CEX Solutions.

For privacy matters: privacy@cex-solutions.com.

What we collect on this site

  • Form submissions. When you fill in the contact form we receive your name, work email, company, role, target deployment region, and message content.
  • Standard request data. Our hosting provider records IP address, user-agent, requested path, and timestamps automatically for every page request — used for security and operational monitoring.
  • Privacy-friendly, aggregated analytics. Pageview counts and referrer information collected in aggregate. We do not fingerprint visitors or track them across sites.

This site sets no cookies. We do not run third-party advertising, marketing, or social-media trackers.

How we use it

  • To respond to your enquiry and keep records of pre-sales conversations.
  • To detect, investigate, and prevent abuse, fraud, or technical issues.
  • To understand aggregate site usage so we can improve our content.

We do not sell personal data and we do not share it with third parties for their own marketing.

Lawful bases (GDPR Article 6)

  • Form submissions — Article 6(1)(b) (steps taken at your request prior to entering a contract) and Article 6(1)(f) (our legitimate interest in answering business enquiries).
  • Request logs — Article 6(1)(f) (legitimate interest in operating a secure website).
  • Aggregated analytics — Article 6(1)(f) (legitimate interest in measuring site performance, balanced against the minimal, non-identifying nature of the data).

How long we keep it

  • Form submissions — kept for up to 24 months from your last interaction with us, then deleted, unless retained as part of an active or pre-contractual customer record.
  • Request logs — typically retained for 30 days by our hosting provider.
  • Aggregated analytics — retained only in aggregate. No individual visitor records are kept.

Where we host data

The marketing website is hosted on Vercel infrastructure, with European edge regions used by default for visitors in Europe. Form submissions are forwarded to our inbox via FormSubmit. Customer-product data is handled separately under contract — see our Trust page.

Sub-processors for this website

  • Vercel Inc. (United States) — hosting and privacy-friendly analytics for the marketing site.
  • FormSubmit (Saber Web) — receives and forwards contact-form submissions to our inbox.

Both providers are bound by data-protection terms compatible with the GDPR. Where data is transferred outside the European Economic Area (e.g. to the United States), transfers are protected by Standard Contractual Clauses approved under Article 46 GDPR. The list above is the complete sub-processor list for this marketing site; sub-processors used by the CEX360 Platform itself are listed separately in our DPA.

Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data erased ("right to be forgotten") in defined circumstances;
  • restrict or object to processing;
  • receive your data in a structured, portable format;
  • withdraw consent at any time, where consent is the lawful basis;
  • lodge a complaint with the Romanian data-protection authority (ANSPDCP) or with your local supervisory authority.

To exercise any of these rights, email privacy@cex-solutions.com. We respond within one month of receiving a verifiable request, in line with Article 12 GDPR.

Children

This is a business-to-business website intended for professional audiences. We do not knowingly collect personal data from children under 16. If you believe a child has submitted personal data through this site, please contact us and we will delete it.

Updates to this policy

We will revise this policy as our processing evolves. The most recent version is always at this URL, and the "Last updated" date at the top tracks material changes. Where changes are significant, we will flag them at the top of the page.