REQUEST A QUOTE
AWS Elektrotehnik SRL –
esd-furniture.eu | Version: July 2026
AWS Elektrotehnik SRL, with its
registered office at Strada Industriei nr. 8, 307201 Giarmata Vii, Timiș
County, Romania, tax identification number RO30053945, Trade Registry no.
J35/884/2012, e-mail office@awstehnik.ro, telephone +40 722 227 703 (referred
to as the “Company” or the “Controller”), processes personal data as a data
controller, in accordance with Regulation (EU) 2016/679 (GDPR) and Law no.
190/2018. This policy explains what data we process, for what purposes, on what
legal grounds, for how long we retain it, and what your rights are.
1. Categories of Data Processed
●
Identification and contact data: first name, last name,
e-mail address, phone number, delivery and billing address.
●
Professional data: the company represented, position,
the company’s billing details (for contact persons of corporate clients).
●
Order and payment data: order history, invoices,
payment data (we do not store full card details).
●
Communication data: the content of messages sent
through the website’s forms, e-mail, or telephone.
●
Technical data: IP address, browser and device type,
data collected through cookies (see Cookie Policy).
We do not intentionally process
special categories of data (Article 9 GDPR) and we do not target minors.
Providing the data marked as mandatory is necessary for processing orders;
refusal to provide it makes it impossible to perform the contract.
2. Purposes and Legal Grounds for Processing
●
Processing orders and requests for quotes, delivering
products, invoicing, warranties, and returns – legal ground: performance of the
contract (Article 6(1)(b) GDPR) and legal obligations, in particular tax and
accounting obligations (point (c)).
●
Compliance with legal obligations – issuing and
retaining financial and accounting documents (Law no. 82/1991, the Fiscal
Code), reporting via the RO e-Invoice system, handling complaints in accordance
with consumer protection legislation – legal ground: Article 6(1)(c) GDPR.
●
Commercial communications (newsletter, offers) – legal
ground: your consent (Article 6(1)(a) GDPR), which may be withdrawn at any time
via the unsubscribe link or by e-mail at office@awstehnik.ro, without affecting
the lawfulness of processing carried out before withdrawal.
●
Legitimate interest (Article 6(1)(f) GDPR) – defending
the Company’s rights in disputes, fraud prevention, debt recovery, maintaining
the business relationship with contact persons of corporate clients, internal
statistics, and improving the website.
3. Recipients of the Data
Data may be disclosed, to the
extent strictly necessary, to: courier and transport companies (for delivery),
IT service providers, web hosting and e-mail providers, accounting and audit
service providers, banking institutions (for processing payments), lawyers and
consultants, and public authorities where required by law (ANAF, ANPC, courts).
We have entered into data processing agreements with all our processors in
accordance with Article 28 GDPR. We do not sell or rent your data to third
parties.
Data is, as a rule, processed
within the European Union / European Economic Area. In the exceptional case of
transfers outside the EEA (e.g., certain digital service providers), these are
carried out only with the appropriate safeguards under Chapter V GDPR (adequacy
decisions, standard contractual clauses).
4. Retention Period
●
Financial and accounting documents (invoices and
supporting documents): 5 years from the end of the financial year in which they
were drawn up, in accordance with Law no. 82/1991, subject to the exceptions
provided by law.
●
Data relating to the client account and order history:
for the duration of the contractual relationship and thereafter for the
duration of the statutory limitation periods (generally 3 years), or of the
applicable warranty periods.
●
Data processed on the basis of consent (newsletter):
until consent is withdrawn.
●
Correspondence and complaints: 3 years from resolution,
except in disputed matters, where data is retained until final resolution.
5. Rights of Data Subjects
Under Articles 15–22 GDPR, you
have the following rights: the right of access to your data, the right to
rectification, the right to erasure (“the right to be forgotten”), the right to
restriction of processing, the right to data portability, the right to object
(including to processing based on legitimate interest and, at any time, to
direct marketing), and the right not to be subject to a decision based solely
on automated processing which produces legal effects. The Company does not use
decision-making processes based solely on automated processing, including
profiling, which produce legal effects concerning you.
To exercise your rights, send a
request to office@awstehnik.ro or by post to the Company’s registered office.
We will respond within one month of receiving the request, a period which may
be extended by two months in complex cases, with notice to you. Exercising your
rights is free of charge, except for manifestly unfounded or excessive
requests.
You also have the right to lodge
a complaint with the National Supervisory Authority for Personal Data
Processing (ANSPDCP), B-dul G-ral Gheorghe Magheru nr. 28-30, sector 1,
Bucharest, www.dataprotection.ro, as well as the right to bring proceedings before
the courts.
6. Data Security
The Company implements
appropriate technical and organisational measures to protect data: need-to-know
access restrictions, secure connections (HTTPS), internal confidentiality
policies, staff training, and backups. In the event of a personal data breach
likely to result in a high risk to your rights, you will be informed in
accordance with Article 34 GDPR, and ANSPDCP will be notified in accordance
with Article 33 GDPR.
7. Updates
This policy may be updated
periodically; the current version, together with the date of the last revision,
is permanently published on the website. Significant changes will be
prominently indicated on the website or, where applicable, by e-mail.