Privacy and Personal Data Protection Policy (GDPR)
This privacy policy describes how ALWO THERM collects, uses, stores and protects the personal data of its users, customers and partners in accordance with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (the “GDPR”).
1. Data Controller
The controller responsible for processing personal data is:
SC ALWO THERM SRL
VAT ID: RO13451177
Trade Register No.: J40/9412/2000
Registered office: 10 Valea Măgurei Street, Sector 2, Bucharest, 22923, Romania
Tel.: 0311 032 127
Email: alwo@exhaustare.ro
2. What Types of Data Do We Collect?
We may collect the following types of personal data:
- Full name
- Email address
- Telephone number
- Postal address (for deliveries, contracts and invoicing)
- Company name and job title (for business partners and representatives)
- Romanian personal identification number and identity-card series and number, in specific cases regulated by law
- Billing and payment data
- IP address, cookies, online identifiers and information about website usage
3. How We Collect Data
Personal data may be collected through:
- The contact form on the website
- Emails sent directly to the company
- Contracts and commercial documents
- Telephone communications or in-person meetings
- Traffic-analysis platforms, such as Google Analytics
4. Purposes of Processing
Personal data is processed for the following purposes:
- Performing and administering contracts
- Communicating with customers and business partners
- Issuing invoices and processing payments
- Complying with legal and tax obligations
- Managing customer accounts and providing technical support
- Sending commercial offers and information, only with consent
- Maintaining IT security and preventing fraud
- Improving the user experience on the website
5. Legal Basis for Processing
Personal data is processed on one or more of the following legal bases:
- The data subject’s explicit consent
- Performance of a contract or steps taken at the data subject’s request before entering into a contract
- Compliance with a legal obligation
- The company’s legitimate interests, provided that the data subject’s fundamental rights are not adversely affected
6. Data Retention
Personal data is stored:
- For as long as necessary to fulfil the stated purposes
- For the duration of the contract and the subsequent statutory archiving period
- Until consent is withdrawn, in the case of commercial communications
- For the period required by applicable law
7. Disclosure of Data to Third Parties
ALWO THERM does not sell or disclose personal data to unauthorised third parties. However, data may be shared with:
- Service providers, including accounting, courier, IT, server-maintenance and email-marketing providers
- Public authorities, where required by law
- Contracted processors with whom GDPR-compliant agreements are in place
All such third parties are required to maintain confidentiality and comply with data-protection legislation.
8. Data Subject Rights
Under the GDPR, you have the following rights:
- Right of access — you may request confirmation as to whether we process your personal data.
- Right to rectification — you may request the correction of inaccurate data or the completion of incomplete data.
- Right to erasure — you may request deletion when the data is no longer necessary or when you withdraw your consent, subject to applicable legal requirements.
- Right to restriction of processing — in the circumstances provided by law.
- Right to data portability — you may request that your data be provided to you or transferred to another controller.
- Right to object — you may object to processing for direct-marketing purposes or processing based on legitimate interests.
Please send all requests to alwo@exhaustare.ro. We will respond within a maximum of 30 calendar days.
9. Data Security
ALWO THERM applies appropriate technical and organisational measures to:
- Maintain the confidentiality, integrity and availability of personal data
- Prevent unauthorised access
- Protect against accidental loss or destruction
- Train personnel and control access to data
10. International Data Transfers
ALWO THERM does not currently transfer personal data to countries outside the European Economic Area. Should such a transfer become necessary in the future, it will take place only with appropriate safeguards and in accordance with European legislation.
11. Use of Cookies
The website may use cookies for:
- The proper operation of its pages
- Statistical traffic analysis
- Third-party functionality, such as Google Maps and YouTube
You can manage your cookie preferences through your browser settings.
12. Right to Lodge a Complaint
If you believe that your rights have not been respected, you may lodge a complaint with:
National Supervisory Authority for Personal Data Processing (ANSPDCP)
Website: www.dataprotection.ro
Email: anspdcp@dataprotection.ro
Address: 28–30 General Gheorghe Magheru Boulevard, Sector 1, Bucharest, Romania
This GDPR policy is reviewed periodically to maintain compliance with legislative changes and data-protection best practices. Last updated: 11 June 2025.
