User Data Request Policy
Last updated: 28 May 2026 · Effective: 28 May 2026
This policy explains how Cadenus responds to requests for a user's data made by law enforcement, government authorities, courts and other third parties (such as parties in civil litigation). We handle every such request in line with the GDPR, applicable Romanian law and our duties to the people whose data we hold.
1. Who we are
The data controller responsible for the data covered by this policy is:
GTW Scaling Solutions S.R.L.
Trade Register fiscal code (CUI): 43728068
EU VAT number: RO54005929
Str. Lămâiței 129, Bl.1, Sc.A, Et.2, Ap.10
Brașov 500371, România
Email: contact@cadenus.io
2. Review of legality
We review every request for legal validity before disclosing any data. We check that the request comes from a competent authority or party, is served through the correct legal process, and is specific about the data sought and the legal basis for it. We do not disclose data on the basis of an informal or unverified request.
3. Challenging unlawful or overbroad requests
Where a request appears to be unlawful, overbroad, vague or otherwise improper, we will push back — seeking clarification or narrowing, and, where appropriate, formally objecting to or challenging the request through the available legal channels before any disclosure.
4. Data minimization
When a disclosure is legally required, we provide only the minimum data necessary to satisfy the specific, validated request. We do not volunteer additional data, and we limit the scope to the named individuals, accounts or time periods identified in the request.
5. Documentation
We keep a record of the requests we receive and how we respond to them, including the requesting party, the legal basis cited, our legal reasoning, the data disclosed (if any) and the people involved in handling the request. These records support our accountability under the GDPR.
6. Notifying affected users
Where we are legally permitted to do so, we will notify a user before disclosing their data, so they have the opportunity to seek their own legal remedy. We will not notify a user only where the law or a valid court order prohibits it.
7. How to submit a request
Requests should be sent to contact@cadenus.io on official letterhead, identifying the requesting party, the legal basis, and the specific data sought. Emergency requests involving a risk to life should be marked as urgent.