Privacy policy

[Draft: to be reviewed by a lawyer before publication.]

Last updated: [publication date]

Who we are

The data controller is SABI STRUCTURA S.R.L., registered office sat Lunca Cetățuii, com. Ciurea, jud. Iași, 707085, Romania [street and number], Trade Register no. J22/765/2009, CUI 25407825. For questions about your data, email sabistructura@gmail.com or call +40 742 229 328.

What data we process

The details in the quote request (name, email, phone, company, role, project details and attachments), messages sent through the contact form (name, email, phone, subject, message), email correspondence, phone calls and the server’s technical logs (IP address, browser, time of access).

Why, and on what legal basis

To reply to you and prepare a quote: Article 6(1)(b) GDPR if you are a private individual, and Article 6(1)(f), our legitimate interest in answering enquiries, if you represent a company. To conclude and perform a contract: Article 6(1)(b). For accounting and tax records: Article 6(1)(c). For site security and the defence of legal claims: Article 6(1)(f).

Your right to object

Where we rely on legitimate interest, you can object to the processing at any time by emailing sabistructura@gmail.com.

Which details are required

In the quote request, the service, type of building, location, your name, your role in the project and your email address are needed for us to reply; without them we cannot prepare a quote. In the contact form, your name, email address, subject and message are required. The other fields are optional.

Who receives the data

Providers that help us operate, under contract: website hosting [provider], form handling [provider], email [provider] and accounting [provider]. Public authorities, only when the law requires it. We never sell your data.

Transfers outside the EEA

[No transfers, or the list of providers outside the EEA with the safeguards used – to be added.]

How long we keep the data

Enquiries that do not lead to a contract: [12 months]. Contract documents: as long as accounting law and liability periods require. Server logs: [30–90 days].

Your rights

You have the right of access and the rights to rectification, erasure, restriction of processing, data portability and objection (Articles 15–22 GDPR). Email sabistructura@gmail.com; we reply within one month.

Complaints to the supervisory authority

You can complain to Romania’s data protection authority, ANSPDCP: B-dul G-ral. Gheorghe Magheru 28–30, Sector 1, 010336 Bucharest; anspdcp@dataprotection.ro; www.dataprotection.ro.

Automated decisions

We do not make automated decisions or carry out profiling.

Security

The site uses an encrypted connection (HTTPS), and only the people who need the data to reply to you can access it.

Cookies and external content

The site uses no cookies and loads no maps or other external content. [To be confirmed at launch.]

Children

The site is not aimed at children.

Changes

When we change this policy, we update the date above.