Effective Date: July 2024
At ROMNEF STEEL COMPANY SRL, we respect your privacy and are committed to protecting the personal data you share with us. This Privacy Policy describes how we collect, use, store, and protect your information when you visit or interact with our website, romnef.com. It also informs you about your rights under applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”).
1. Data We Collect
When you use our website, we may collect and process different types of personal data, either directly provided by you or automatically collected:
- Contact Information: such as your name, email address, phone number, or any data you provide via our contact forms or email correspondence.
- Usage Data: including your IP address, device type, browser type and version, pages visited, time and date of your visit, time spent on pages, and referring website addresses.
- Form Submissions: data you voluntarily provide through forms on the site, such as inquiry or contact forms, which may include company details, project information, or specific requests.
- Cookies and Tracking Technologies: please see our Cookies Policy for more details.
2. Purpose of Data Collection
We collect your personal data for specific and legitimate purposes, including but not limited to:
- Providing, operating, and maintaining our website and services.
- Responding to your inquiries, requests, or customer service needs.
- Improving the user experience and optimizing website functionality.
- Analyzing traffic and usage trends to enhance content relevance.
- Ensuring the security of our website, systems, and data.
- Complying with legal obligations under applicable laws and regulations.
3. Legal Basis for Processing
Under GDPR, we process your personal data on one or more of the following legal bases:
- Consent: when you have given clear permission for us to process your personal data for a specific purpose (e.g. newsletter subscription).
- Contractual necessity: to perform a contract with you or to take steps at your request before entering into a contract.
- Legal obligation: where we are required to process your data to comply with a legal requirement.
- Legitimate interests: to pursue our legitimate business interests, provided they are not overridden by your rights and interests.
4. Data Sharing and Disclosure
We do not sell, rent, or trade your personal data. However, we may share your information in the following limited situations:
- With trusted third-party service providers who perform services on our behalf, such as website hosting, analytics providers, or IT support. These parties are contractually bound to keep your data confidential and secure.
- In response to legal obligations such as court orders or lawful requests by public authorities.
- In the context of business transfers such as mergers, acquisitions, or asset sales, where data may be transferred as part of the transaction.
5. International Data Transfers
Your data may be processed or stored outside of Romania or the European Economic Area (EEA) in jurisdictions that may not provide the same level of data protection. In such cases, we ensure that appropriate safeguards (such as Standard Contractual Clauses) are in place to protect your personal data.
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including any legal, regulatory, tax, accounting, or reporting obligations. When data is no longer needed, it is securely deleted or anonymized.
7. Your Rights Under GDPR
As a data subject under the GDPR, you have the following rights:
- Right to Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You may request that we correct any inaccuracies or incomplete data.
- Right to Erasure: You have the right to request that we delete your personal data under certain conditions ("right to be forgotten").
- Right to Restriction: You can ask us to restrict the processing of your data in certain situations.
- Right to Object: You may object to our processing of your data when it is based on legitimate interest.
- Right to Data Portability: You can request your data in a structured, commonly used format for transfer to another controller.
- Right to Withdraw Consent: If processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.
- Right to Lodge a Complaint: You can lodge a complaint with a supervisory authority (in Romania, this is ANSPDCP - www.dataprotection.ro).
8. Security Measures
We take appropriate technical and organizational measures to ensure a level of security appropriate to the risk of processing your personal data. This includes firewalls, access controls, encryption technologies, and regular security assessments. However, please note that no system is completely secure, and we cannot guarantee the absolute security of your data transmitted via the internet.
9. Children's Privacy
Our website is not intended for children under the age of 16. We do not knowingly collect or process data from children. If you believe that we may have unintentionally collected personal information about a minor, please contact us so we can delete it promptly.
10. Updates to This Policy
We reserve the right to update or modify this Privacy Policy at any time. Any changes will be published on this page with an updated “Effective Date” at the top. We encourage you to review this page regularly to stay informed about how we are protecting your data.
11. Contact Us
If you have any questions about this Privacy Policy, our data practices, or if you wish to exercise your data protection rights, please contact us at:
Email: contact@romnef.com
Address: ROMNEF STEEL COMPANY SRL, Bdul. Poligrafiei 1a, Bucharest, Romania, 013704