Your privacy is important to us. This policy explains what personal data we collect through this site, for what purposes we use it, on what legal basis, with whom we share it and what your rights are, in accordance with Regulation (EU) 2016/679 (GDPR) and Romanian Law no. 190/2018.
1. Data controller
The controller that determines the purposes and means of processing your data is:
- Name: Marael Technology SRL
- Registered office: Sânmihaiu German village, no. 89G, room 2, Sânmihaiu German commune, Timiș county, postal code 307381, Romania
- VAT / registration no.: 53519700 · Trade Register no.: J2026005555004
- Email: contact@marael.ro
2. What data we collect
This site includes contact forms, but does not require you to create an account. The data we may process includes:
- Contact details provided voluntarily: when you submit the contact form, email us or call us, we process your name, email address, phone number (if provided), company (if provided) and the contents of your enquiry so that we can respond.
- Technical and log data: the hosting server may automatically record the IP address, browser type, operating system, date and time of access and pages visited — data necessary for the operation and security of the site.
- Cookies and similar technologies: according to your consent choices — see Cookie Policy.
We do not intentionally collect special categories of data (sensitive data) through this site. Please do not send us such data in your messages.
3. Purposes and legal basis of processing
- To respond to your enquiries — and to take steps prior to entering into a possible contract (Art. 6(1)(b) GDPR).
- For the security and proper functioning of the site — based on our legitimate interest in preventing abuse and attacks (Art. 6(1)(f) GDPR).
- For cookies and non-essential external content — solely on the basis of your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
- To comply with legal obligations — for example, accounting and tax obligations, if you become a client (Art. 6(1)(c) GDPR).
4. Who has access to the data (recipients and processors)
We do not sell or rent your data. We may disclose it only to service providers acting as processors, under GDPR-compliant contracts, including:
- The web hosting provider — on whose servers the site and its logs are stored.
- The email service provider — through which we receive and manage correspondence with you.
- External content providers — Google may receive technical data when you consent to Google Maps or the Traffic analytics category for Google Analytics 4. The site’s fonts and images are hosted locally.
We may also disclose data to public authorities where required by law.
5. Transfers outside the European Economic Area
If you consent to Google Analytics 4 or Google Maps, technical data sent to Google may also be processed outside the European Economic Area, including the United States, under the provider's applicable policies and safeguards. These resources are not loaded before the relevant consent.
6. How long we keep the data
- Correspondence and enquiries: for as long as needed to handle the request and, thereafter, for as long as a legitimate interest (for example, a potential collaboration) justifies it, generally no more than 2 years from the last contact.
- Server technical logs: for a short period, generally up to a few months.
- Contractual and tax documents (for clients): for the period required by tax and accounting law.
7. Data security
We apply appropriate technical and organisational measures to protect data against unauthorised access, loss or destruction — including HTTPS traffic encryption, access control and the data minimisation principle.
8. Your rights
You have all the rights provided by the GDPR: access, rectification, erasure, restriction, portability, objection and withdrawal of consent. The detailed way in which you can exercise them is described on the dedicated Data Protection (GDPR) page.
9. Protection of minors
Our site and services are aimed at professionals and businesses, not children. We do not knowingly collect data from persons under 16.
10. Changes to this policy
We may update this policy periodically to reflect legislative or operational changes. The updated version is published on this page, with the date of the last update shown above.
11. Contact and supervisory authority
For any question regarding the processing of your data, you can contact us at contact@marael.ro.
You also have the right to lodge a complaint with the supervisory authority:
- National Supervisory Authority for Personal Data Processing (ANSPDCP)
- 28-30 Gheorghe Magheru Blvd., District 1, postal code 010336, Bucharest, Romania
- anspdcp@dataprotection.ro · https://www.dataprotection.ro