Privacy policy (GDPR)

The controller of your data is SC PROMO PLUS SRL, with its registered office in Suceava, str. Lt. Nicolae Catanescu Nr. 7, VAT no. RO3903674, J33/782/1993. For any question about your data you can write to us at office@promoplus.ro.

We only process data you give us directly or that results from using the site:

• Identification and contact data — name, email address, phone number, the company you represent — when you send us a message through the contact form or a quote request.
• Your email address — when you subscribe to the newsletter.
• Technical data — IP address, browser type, pages visited — collected automatically for the operation and security of the site.

• Answering messages and quote requests — based on pre-contractual steps taken at your request (art. 6(1)(b) GDPR).
• Running the commercial relationship with partners — based on contract performance and legal invoicing and archiving obligations (art. 6(1)(b) and (c)).
• Sending the newsletter — based on your consent, which you can withdraw at any time using the unsubscribe form in the site footer (art. 6(1)(a)).
• Operating and securing the website — based on our legitimate interest in keeping the site available and protected (art. 6(1)(f)).

• Messages and quote requests — as long as needed to answer you and afterwards for at most 3 years, the general limitation period.
• Financial and accounting documents — for the statutory archiving periods (currently 5 years for supporting documents).
• Newsletter addresses — until you unsubscribe.
• Technical logs — short periods, normally under 12 months.

We do not sell or rent your data. We may share it only with the providers who help us run the site and the business (web hosting, email services, accounting, couriers), under contract and only to the extent necessary, and with public authorities where the law requires it. The data is not transferred outside the European Economic Area.

Under the GDPR you have the following rights, which you can exercise by writing to office@promoplus.ro:

• The right to access your data and receive a copy of it.
• The right to have inaccurate or incomplete data rectified.
• The right to erasure (“the right to be forgotten”), under the conditions of art. 17 GDPR.
• The right to restrict processing.
• The right to data portability.
• The right to object to processing based on legitimate interest.
• The right to withdraw your consent at any time, without affecting prior processing.

We answer requests within one month. If you consider that your rights have been infringed, you may lodge a complaint with the Romanian supervisory authority (ANSPDCP) — dataprotection.ro.

We apply appropriate technical and organisational measures to protect the data: encrypted connection (HTTPS), need-to-know access to data, system updates and staff training.

The site uses a minimal number of cookies, strictly necessary for it to work — for example to remember the language you chose. We do not use advertising cookies and we do not track your behaviour on other sites.

We may revise this policy when legislation or the way we process data changes. The current version, with its update date, is always published on this page.