Personal data controller:
A.G.S CONS SRL Β· CUI: 2676590 Β· Reg. Com.: J1992002648173
π Calea Smardan 9G, GalaΘi, Romania
βοΈ office@creapal.ro Β· π +40 772 274 415 Β· π +40 747 321 448
Introduction
Protecting your personal data is a priority for us. This policy describes how A.G.S CONS SRL, through the creapal.ro website, collects, uses and protects your personal information, in accordance with Regulation (EU) 2016/679 (GDPR) and Romanian Law no. 190/2018.
By using our website or filling in the contact/configurator forms, you agree to your data being processed in accordance with this policy.
What personal data we collect
| Source | Data collected | Required |
|---|---|---|
| Contact form | Name, email address, phone number, subject, message | Yes (fields marked with *) |
| Configurator online | Name, phone, email, project location, company, number of units, selected configuration | Yes (fields marked with *) |
| Technical data (automatic) | IP address, browser type, pages visited (via technical cookies) | β |
We do not collect sensitive data (race, political opinion, health data, biometric data, etc.) and we never request national ID numbers, bank details or passwords.
Purpose and legal basis for processing
| Purpose | Legal basis (GDPR) |
|---|---|
| Responding to quote requests and questions via the contact form | Art. 6(1)(b) β performance of a contract / pre-contractual steps |
| Sending the personalised quote for modular structures | Art. 6(1)(b) β performance of a contract |
| Marketing communications (if you have given consent) | Art. 6(1)(a) β consent |
| Compliance with legal obligations (invoicing, accounting) | Art. 6(1)(c) β legal obligation |
| Improving services and website security | Art. 6(1)(f) β legitimate interest |
How long we keep data
We keep your personal data only for as long as necessary for the purposes described:
- Quote / contact requests: a maximum of 2 years from the last interaction, after which they are deleted or anonymised.
- Invoicing and contractual data: 10 years, under Romanian tax law (Accounting Law no. 82/1991).
- Technical data (server logs): a maximum of 90 days.
- Withdrawn consent: the data is deleted within 30 days of consent being withdrawn.
Who we share your data with
We do not sell or rent your personal data. It may be accessed by:
- The internal CreaPAL team β to process quote requests.
- Google LLC β via Google Maps (an interactive map, loaded only with your explicit consent through the "Enable map" button) and via Google Fonts.
- Email provider (Gmail/Google Workspace) β to send and receive emails.
- Public authorities β where we are required by law (tax inspections, courts, etc.).
International data transfers
Some service providers (e.g. Google LLC) may process data outside the European Economic Area (EEA). These transfers are made with appropriate safeguards under the GDPR, including Standard Contractual Clauses (SCCs) approved by the European Commission or equivalent mechanisms.
Cookies
The creapal.ro website uses only strictly necessary cookies for its operation:
| Type | Description | Duration |
|---|---|---|
| Technical / functional | Ensure the site works correctly (navigation, forms) | Session |
| Google Fonts | The Inter and Space Grotesk fonts are loaded from Google servers | 1 year |
| Google Maps | Loaded only on explicit activation by the user | 6 months |
We do not use advertising cookies, behavioural tracking or targeted ads.
Your rights under the GDPR
Under Regulation (EU) 2016/679, you have the following rights:
Right of access
You can request a copy of the personal data we hold about you.
Right to rectification
You can request the correction of inaccurate data or the completion of incomplete data.
Right to erasure
You can request the deletion of your data (the "right to be forgotten"), as permitted by law.
Right to restriction
You can request that data processing be limited in certain situations.
Right to data portability
You can receive your data in a structured, machine-readable format.
Right to object
You can object to data processing for marketing or legitimate-interest purposes.
Withdrawal of consent
You can withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand.
Right to lodge a complaint
You can contact the Romanian National Authority (ANSPDCP) if you believe your rights have been breached.
Data security
We implement appropriate technical and organisational measures to protect your data:
- Encrypted communications via HTTPS/TLS
- Access to personal data is restricted to authorised staff only
- Emails are sent over secure connections (SMTP with TLS)
- We do not store form data in databases β it is sent directly by email
Supervisory authority
If you believe your data protection rights are not being respected, you have the right to lodge a complaint with:
π www.dataprotection.ro
π +40 318 059 211
Changes to this policy
We reserve the right to update this privacy policy at any time, in order to reflect legislative changes or changes in the way we process data. The date of the last update is shown at the top of the page.
We recommend that you check this page periodically. Continued use of the website after changes are published constitutes acceptance of the new version.