Privacy policy

1. Who the data controller is

The controller of personal data is Sistem Construct 2007 SRL, with its registered office at Str. Traian, nr. 97, bl. A8, ap. 2, Galați 800003, Romania, VAT no. RO21527853, registered with the Trade Register under no. J2007000630170.

You can reach us by phone at +40 749 055 454 (Mon–Fri, 9:00–17:00) with any question about the processing of your data. We are not legally required to appoint a data protection officer (DPO) and have not appointed one.

2. What data we process and how it reaches us

The website contains no contact forms, login areas or data collection tools. The only way we receive personal data is through contact initiated by you, by phone call or WhatsApp message.

In that case we process: your phone number, your name (if you share it), the content of the conversation (for example, details about the road or project you are requesting a quote for) and, if you send them via WhatsApp, photos or documents related to the project.

If the relationship progresses to a contract, we will also process the data needed for contracting and invoicing (identification details of the company or institution, contact person, fiscal data), in line with our legal obligations.

3. Phone calls and WhatsApp: who else processes data

It is important to know that when you call or message us, your data is also processed by third parties independent of us, acting as controllers in their own right:

• The telecom operators (yours and ours) process call metadata (numbers, duration, time) under their own policies and the legal obligations applicable to electronic communications.
• WhatsApp is a service provided by Meta (WhatsApp Ireland Limited). Messages sent via WhatsApp are processed by Meta under its own privacy policy, which may involve data transfers outside the European Economic Area, based on the safeguards Meta provides (e.g. standard contractual clauses). Using WhatsApp to contact us is your choice; alternatively, you can call us.

4. Legal bases and purposes of processing

• Art. 6(1)(b) GDPR: pre-contractual steps taken at your request (responding to quote requests) and performance of the contract, if one is concluded.
• Art. 6(1)(c) GDPR: legal obligations, in particular fiscal and accounting ones (invoicing, bookkeeping).
• Art. 6(1)(f) GDPR: our legitimate interest in keeping track of received enquiries and in ensuring the security and operation of the website (the hosting server's technical logs may record IP addresses, strictly for security and diagnostics).

5. What we do NOT do

• We do not use your data for direct marketing and do not send unsolicited commercial communications.
• We do not sell or rent personal data to third parties.
• We do not use traffic analytics tools, tracking pixels or marketing cookies on this website.
• We do not make automated decisions and do not profile you based on your data.

6. How long we keep the data

Data related to a simple information request is kept only as long as needed to answer you and to allow the conversation to continue, after which it is deleted. WhatsApp conversations can be deleted at your request.

Contractual and financial-accounting documents (contracts, invoices, delivery notes) are kept for the periods required by Romanian fiscal and accounting legislation (generally 5–10 years, depending on the document type).

7. Who we may disclose data to

Data may be accessed, strictly on a need-to-know basis, by: the website hosting provider (technical data), telecom providers and Meta/WhatsApp (as described in section 3), and public authorities where the law requires it (for example, tax authorities).

8. Your rights

Under the GDPR you have the right of access, the right to rectification, the right to erasure, the right to restriction of processing, the right to data portability, the right to object, and the right not to be subject to solely automated decisions. To exercise these rights, call us at +40 749 055 454.

If you believe the processing breaches the law, you have the right to lodge a complaint with the Romanian supervisory authority (ANSPDCP), B-dul G-ral Gheorghe Magheru nr. 28-30, Sector 1, Bucharest, www.dataprotection.ro.

9. Changes to this policy

We may update this policy when the way the website operates or the legal requirements change. The current version, with its last update date, is permanently published on this page.