Data controller: TECHWORKS INDUSTRIAL SOLUTIONS SRL, with its registered office at B-dul Constantin Brâncoveanu nr. 116, Bl. M2/III, Sc. 3, Et. 3, Ap. 138, Camera nr. 1, Sector 4, Bucharest, registered with the Trade Register under no. J40/875/2024, CUI RO49426867 (“Techworks”, “we”). Data protection contact: contact@techworks.ro, phone +40 770 579 904.
This policy explains what personal data we process through the techworks.ro website and in our dealings with customers and partners, why we process it, how long we keep it and what rights you have, in accordance with Regulation (EU) 2016/679 (“GDPR”) and Romanian Law no. 190/2018.
1. What data we process
Data you send us through forms
The site’s forms are: quote request, pump replacement, contact, “We’ll call you” and the quick request on the home page. Through them we collect:
- identification and contact data: first and last name, company, email address, telephone number;
- the content of your request: the message, the technical data of the application (for example flow rate, head, fluid, temperature), the products added to the request list, the required deadline;
- the files you attach (photos of the pump nameplate, diagrams, specifications). Please do not include in them any personal data that is not needed for the request;
- proof of consent: the date and time of submission, the page from which you sent the form and the text of the consent you ticked;
- the source of the visit (for example the campaign or the website from which you reached us), only if you have accepted analytics or marketing cookies.
Mandatory fields are marked in the form. Without them we cannot respond to your request.
Data from direct communications
When you call us, email us or message us on WhatsApp, we process your contact data and the content of the conversation. WhatsApp is a Meta service. If you use the WhatsApp button on the site, the conversation takes place in the WhatsApp app, under its own policy.
Browsing data and cookies
The site uses cookies that are necessary for it to work. Only with your consent do we also use analytics and marketing cookies (Google). Details are in the Cookie policy. The choice made in the cookie banner is recorded in the consent log (date, consent ID, categories chosen, anonymised IP address, page) and kept for 24 months. Like any web server, the hosting server records technical logs (IP address, date, page accessed), used for security.
Customer, supplier and partner data
In the course of our business relationship we process the data of contact persons (name, position, email, telephone, signature, correspondence). We also process the data needed for quotations, delivery, invoicing and service.
2. Why we process the data and on what legal basis
- Responding to requests, quotations and equipment selection: on the basis of steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and of the consent you tick in the form (Art. 6(1)(a)).
- Entering into and performing contracts (delivery, commissioning, service, warranty): Art. 6(1)(b).
- Legal obligations (accounting, invoicing, tax archiving): Art. 6(1)(c).
- Our legitimate interest (Art. 6(1)(f)): the security of the site and of the data, the establishment and defence of legal claims, communication with contact persons at customer and partner companies (B2B prospecting), service quality surveys after a delivery. You may object to this processing at any time.
- Visitor statistics and Google Ads campaign measurement: only with your consent (Art. 6(1)(a)), given through the cookie banner. You can withdraw it at any time under “Cookie settings” in the page footer.
We do not use the data for automated decision-making or profiling that produces legal effects concerning you. We do not sell personal data.
3. Who we share data with
- the site’s web and email hosting provider (Hostinger), which stores the site, the database and the messages;
- Smartbill, for invoicing and accounting documents;
- Google Ireland Ltd (Google Tag Manager, Google Analytics, Google Ads), only if you have accepted analytics or marketing cookies;
- the manufacturer KSB and our technical partners (Prediktis, ifm, Bosch Rexroth), only when necessary for the selection of equipment, your quotation, order or warranty, and only the technical and contact data required;
- courier and transport companies, for delivery;
- public authorities, where the law requires us to.
Providers process the data on our behalf, under contract and with appropriate security measures. Some providers (for example Google) may transfer data outside the European Economic Area. Transfers take place only with the safeguards provided by the GDPR: the EU–US adequacy decision (EU-U.S. Data Privacy Framework) or standard contractual clauses.
4. How long we keep the data
- Requests sent through the site that do not become an order are kept for 24 months from receipt. After this period they are deleted automatically, together with the attached files.
- Data in contracts, accepted quotations, invoices and accounting documents is kept for 10 years, as required by accounting legislation (Law no. 82/1991).
- Correspondence with customers and partners is kept for the duration of the business relationship and for no more than 3 years after the last interaction, unless the law requires otherwise.
- Server technical logs are kept for no more than 90 days.
- Cookies are kept for the periods set out in the Cookie policy.
5. Your rights
You have the right of access to your data, the right to rectification, to erasure (“right to be forgotten”), to restriction of processing, to data portability, to object, and the right to withdraw your consent at any time, without affecting the processing carried out before withdrawal. To exercise any of these rights, write to us at contact@techworks.ro. We respond within one month of receiving the request at the latest.
You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP): B-dul G-ral Gheorghe Magheru nr. 28-30, Sector 1, Bucharest, www.dataprotection.ro, anspdcp@dataprotection.ro.
6. Security
The site uses an encrypted connection (HTTPS). Files attached to requests are stored in a private area, accessible only to authorised employees. Access to site administration is protected and restricted. In the event of a personal data breach, we act in accordance with Art. 33–34 GDPR.
7. Minors
The site is intended for companies and professionals. We do not knowingly collect data from persons under the age of 16.
8. Changes
We may update this policy when our services or the legislation change. The version in force is published on this page, with the date of the last update.