This is an English translation provided for convenience. In case of any discrepancy, the Romanian version prevails.

1. Introduction

Welcome to igienaindustriala.ro. Protecting your personal data is a priority for us. This policy explains what personal data we collect, how and why we use it, how long we keep it and what your rights are, in accordance with Regulation (EU) 2016/679 (the “GDPR”) and applicable Romanian law.

2. Data controller

The igienaindustriala.ro website is operated by:

Smart Clean S.R.L.
Tax identification number (CUI): RO24092583
Trade Register no.: J200800117904
Registered office: str. Gh. Donici nr. 1 bis, Bacău, Romania
Email: contact@igienaindustriala.ro
Phone: +40 371 159 978

Under the GDPR, Smart Clean S.R.L. is the “data controller” when it processes your personal data.

3. What data we collect and why

a) Data you provide through the contact form

What we collect: full name, company name, phone number, email address, the services you are interested in and any other information you include in your message.

Purpose: to respond to your requests, questions and requests for quotes.

Legal basis: Art. 6(1)(b) GDPR — taking steps at your request prior to entering into a contract (responding to a request for a quote) and Art. 6(1)(f) GDPR — our legitimate interest in communicating with people who contact us.

The fields marked as required (name, company, phone, email) are needed to reply to you. Without them we cannot process your request.

Form data is sent to us by email, to office@igienaindustriala.ro and office@cleansmart.ro, both managed by Smart Clean S.R.L.

b) Data processed to secure the form

To protect the form against automated messages (spam, bots), we use:

a limit on the number of requests sent from the same IP address. The IP address is not stored as such, only as a cryptographic fingerprint (hash), kept for at most one hour;
Cloudflare Turnstile, an anti-bot service that analyses technical browser signals (e.g. IP address, browser type) without asking you to solve visual puzzles.

Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in keeping the website secure and preventing abuse.

c) Data collected automatically when you visit the website

What we collect: on every visit, the hosting server automatically records technical data such as IP address, browser type, page accessed, and date and time of access (server logs).

Purpose: operation, security and technical troubleshooting of the website.

Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in operating the website securely.

The website currently does not use analytics or marketing cookies (e.g. Google Analytics, Facebook Pixel). If we introduce such tools, we will only enable them with your consent (Art. 6(1)(a) GDPR), given through a cookie banner, and we will update this policy. See our Cookie policy for details.

d) Google Maps and external links

The map on the contact page only loads with your consent: if you choose “Accept all” in the cookie banner or click the “Show map” button. From that moment, Google may collect data (e.g. your IP address) and set cookies under its own privacy policy. Without your consent, no data is sent to Google.

Links to WhatsApp, Facebook and LinkedIn take you to those platforms, where their own privacy policies apply.

4. How long we keep your data

We only keep your data for as long as necessary for the purposes above:

Contact form data: while your request is being handled and for up to 12 months afterwards, for any follow-up. If we enter into a contract, the data will be kept according to legal obligations (e.g. 5 or 10 years for accounting documents).
IP address fingerprint used for rate limiting: up to 1 hour.
Server logs: a limited period set by the hosting provider for security purposes.
Cookies: the lifetime of each cookie is listed in the Cookie policy.

We do not sell or rent your personal data.

We may share data only as far as necessary to run the website and provide our services, with:

our web and email hosting provider (Romarg), where the website and mailboxes are hosted;
Cloudflare, Inc. — anti-bot verification of the form (Cloudflare Turnstile);
Google — only if you choose to display the Google Maps map;
public authorities — only at their request and strictly in line with legal obligations.

We ensure through contractual clauses that partners processing data on our behalf (processors) respect data confidentiality and GDPR standards.

6. Transfers outside the European Economic Area

Some providers (Cloudflare, Google) may also process data outside the European Economic Area, including in the United States. In these cases, transfers rely on appropriate safeguards under the GDPR, such as the EU-U.S. Data Privacy Framework or the standard contractual clauses approved by the European Commission.

7. Your rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access: you can request a copy of the data we hold about you.
Right to rectification: you can ask us to correct inaccurate or incomplete data.
Right to erasure (“right to be forgotten”): you can ask us to delete your data, under certain conditions.
Right to restriction of processing: you can ask us to limit how we use your data.
Right to data portability: you can ask us to transfer your data to another controller.
Right to object: you can object to processing based on our legitimate interest.
Right to withdraw consent: where processing is based on consent, you can withdraw it at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise these rights, email us at contact@igienaindustriala.ro. We will respond without undue delay and within one month of receiving your request. This period may be extended by two further months for complex or numerous requests, in which case we will let you know.

You also have the right to lodge a complaint with the Romanian data protection authority, Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru nr. 28–30, sector 1, Bucharest, www.dataprotection.ro.

8. Automated decisions and children

We do not make decisions based solely on automated processing and do not carry out profiling that produces legal effects concerning you.

Our website and services are aimed at businesses and are not intended for children under 16. We do not knowingly collect data from them.

9. Data security

We have implemented appropriate technical and organisational measures to protect your data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. The website uses a secure connection (HTTPS), and the credentials used to send emails are stored outside the public area of the server.

10. Changes to this privacy policy

We may update this policy whenever necessary. The updated version will be published on this page together with the date of the last update. We encourage you to check it periodically.

Privacy policy