Privacy policy

Controller

SANT ELI SILVA S.R.L.

Registered office

Str. Eroilor nr. 32, Construcția C1, Oraș Târgu Cărbunești, județul Gorj, cod poștal 215500, România

Tax identification number (CUI)

RO40177568

Trade Register No.

J2018001021188

Data protection e-mail

info@santelisilva.ro

Telephone

+40 735 874 519

We are not required to designate a data protection officer (DPO). For any question concerning your data, you may write to us at the address above.

a) The “Become a partner” form (B2B requests). We process: company name, country, contact person, telephone number, e-mail address, company type, estimated volume, products of interest and the message sent. Purpose: to respond to you and to conduct the discussions preceding a possible collaboration. Legal basis: Article 6(1)(b) GDPR — steps taken at your request prior to entering into a contract — and point (f) — our legitimate interest in developing business-to-business commercial relationships.

b) The newsletter. We process: e-mail address, chosen language, the place on the website where you subscribed, the date and time, the IP address and the text of the consent you ticked. Purpose: sending news about the factory, products and partnership opportunities, and keeping proof of consent. Legal basis: your consent, Article 6(1)(a) GDPR and Article 12 of Law no. 506/2004. You may withdraw your consent at any time, via the unsubscribe link included in every message or by writing to us.

c) Direct contact by e-mail or telephone. We process the data you send us (name, contact details, content of the message) in order to respond to you. Legal basis: Article 6(1)(b) or (f) GDPR.

d) Technical browsing data. The server hosting the website automatically records, in technical logs, the IP address, the date and time of access, the page accessed and the browser type. Purpose: secure operation of the website and prevention of abuse. Legal basis: Article 6(1)(f) GDPR — legitimate interest.

We do not use the website for profiling, we do not take decisions based solely on automated processing and we do not use traffic analytics or advertising tools.

• B2B requests and correspondence: no longer than 3 years from the last interaction, if no contract is concluded; if a contract is concluded, for the duration of the contractual relationship and thereafter for the periods required by law (for example, 10 years for financial and accounting documents, under Law no. 82/1991).
• Newsletter: until you unsubscribe. After unsubscription we keep only the proof of consent (e-mail, date, IP, text of the consent) for the period necessary for the defence of legal claims, as a rule 3 years.
• Server technical logs: for the period set by the hosting provider, as a rule no longer than 90 days.

We do not sell or rent your data. The following categories of recipients may access it, strictly to the extent necessary, acting as processors:

• the website hosting provider (Amplica Hosting SRL (IPHOST), CUI 45039302, J2021017390403, str. Grigore Ureche nr. 3, Iași, România), where the database and technical logs are stored;
• the provider of the e-mail service through which we receive requests and send messages;
• in the future, a newsletter service provider — we will name it in this policy before using it;
• public authorities, only where the law requires us to do so.

We do not transfer data outside the European Economic Area. Should a provider involve such a transfer, it will take place only with the safeguards provided for in Articles 44–46 GDPR (for example, standard contractual clauses).

Under Articles 15–22 GDPR, you have the right:

• of access to the data we process about you;
• to rectification of inaccurate data;
• to erasure of data (“right to be forgotten”);
• to restriction of processing;
• to data portability;
• to object to processing based on legitimate interest;
• to withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

To exercise your rights, write to us at info@santelisilva.ro. We will respond free of charge within one month of receipt of the request (a period that may be extended by two further months for complex requests, in which case we will inform you).

If you consider that your rights have been infringed, you may contact the National Supervisory Authority for Personal Data Processing (ANSPDCP): B-dul G-ral. Gheorghe Magheru nr. 28–30, sector 1, București, postal code 010336; e-mail anspdcp@dataprotection.ro; www.dataprotection.ro. We kindly ask you to contact us first — we will try to resolve any issue as quickly as possible.

We apply appropriate technical and organisational measures: encrypted connection (HTTPS), password-protected access to the administration panel for authorised persons only, limitation of the number of automated requests, and data backups.

The website is aimed at companies and is not intended for persons under 16 years of age. We do not knowingly collect data from minors.

Information about the cookies used by the website can be found in the Cookie Policy.

We may update this policy when the way we process data or the legislation changes. The version in force is always the one published on this page, together with the date of the last update.