Privacy Policy (GDPR)
Processing of personal data in accordance with EU Regulation 2016/679 (GDPR). Last updated: March 2026.
1. Data Controller
NEOFORT BIZ SRL, 11 Theodor Aman Pictor St., Sector 1, Bucharest 010776, Romania. VAT: RO30324211. E-mail: oferte@neofort-biz.ro · Phone: +40 752 443 435.
2. Personal Data Collected
Through the contact form we collect: (a) Full name; (b) Phone number; (c) E-mail address; (d) Delivery address; (e) Attached files (sketches, plans, photos — maximum 7 files); (f) Requested service option. We do not collect sensitive data (medical, ethnic, biometric, etc.).
3. Purpose and Legal Basis of Processing
Data is processed under Art. 6(1)(b) GDPR — performance of a contract or pre-contractual measures at the request of the data subject. Purposes: preparing requested price quotes, related commercial communication, execution of supply and installation contracts.
4. Authorised Third-Party Processors
Resend Inc. (USA) — email delivery service, processes form data exclusively to transmit the message to the internal recipient oferte@neofort-biz.ro. Resend Inc. is certified under EU Standard Contractual Clauses (SCC). Google LLC (USA) — Google Analytics 4 (ID: G-20PR5SV2XC), used for anonymous statistical analysis of traffic (pages visited, traffic sources, session duration). Google Analytics is activated ONLY after accepting the cookie banner. We implement Google Consent Mode v2 — before acceptance, analytics_storage is set to 'denied'. We do not use Meta Pixel or other advertising tools.
5. International Data Transfers
Contact form data is temporarily processed by Resend Inc. (USA) solely for email delivery, under EU Standard Contractual Clauses pursuant to Art. 46 GDPR. After delivery, data is stored exclusively on Neofort BIZ SRL email servers (EU).
6. Retention Period
Data provided through the form is retained for the duration necessary to prepare the quote and, if a contract is concluded, for the contract duration plus 5 years in accordance with legal accounting obligations. If no contract is concluded, data is deleted within 12 months of the last interaction.
7. Rights of the Data Subject
Under GDPR you have the right to: Access (Art. 15); Rectification (Art. 16); Erasure (Art. 17); Restriction of processing (Art. 18); Data portability (Art. 20); Objection (Art. 21); Withdrawal of consent (Art. 7(3)) without affecting the lawfulness of prior processing. Submit requests to: oferte@neofort-biz.ro or 11 Theodor Aman Pictor St., Sector 1, Bucharest 010776. Response within 30 days.
8. Right to Lodge a Complaint
If you believe your rights have been violated, you may lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP): www.dataprotection.ro · anspdcp@dataprotection.ro · 28-30 G-ral. Gh. Magheru Blvd., Sector 1, Bucharest.
9. Cookies
This site uses: (1) cookie_ok — technical cookie in localStorage, remembers banner confirmation, no personal data; (2) Google Analytics 4 cookies (_ga, _ga_20PR5SV2XC) — activated ONLY after accepting the banner, store anonymous session data, expire in 2 years. We do not use advertising, social media or marketing tracking cookies. You can delete cookies from your browser settings at any time.
10. Data Security
Data is transmitted via HTTPS connection (TLS 1.3). The contact form does not store data on site servers — it is transmitted directly by email to the internal recipient. Attached files are transmitted and deleted from the processing system after delivery.