Privacy Policy

1. Data Controller

The data controller responsible for the processing of your personal data on this website is:

• Company: PAZAL GROUP SRL
• CUI: 49773300
• Address: Str. Siretului 11, Bl. 11, Sc. 2, Et. 4, Ap. 9, Târgu Jiu, Gorj, 210158, Romania
• Email: [email protected]
• Representative: Constantin Mirel

2. What Data We Collect

We may collect and process the following categories of personal data when you use our website (pazal.ro):

2.1 Data You Provide Directly

• Contact form submissions: name, email address, phone number (optional), company name (optional), and the content of your message
• Booking/scheduling: name, email address, and any information you provide when scheduling a meeting through our Stabilim.ro integration

2.2 Data Collected Automatically

• Usage data: pages visited, time spent on pages, referral sources, browser type, device type, operating system, and screen resolution
• IP address: collected by Google Analytics (anonymized where possible)
• Cookies: as described in our Cookie Policy

3. How We Use Your Data

We process your personal data for the following purposes:

• To respond to your inquiries: when you contact us through the contact form or email
• To schedule meetings: when you book a call through our Stabilim.ro widget
• To analyze website usage: to understand how visitors interact with the website and to improve our services
• To ensure website functionality: including storing your cookie preferences
• To comply with legal obligations: where required by applicable law

4. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we rely on the following legal bases:

• Consent (Art. 6(1)(a) GDPR): for analytics cookies (Google Analytics). You can withdraw consent at any time via our Cookie Policy page.
• Legitimate interest (Art. 6(1)(f) GDPR): for website functionality, security, and privacy-friendly analytics (Umami, which does not process personal data).
• Contract performance (Art. 6(1)(b) GDPR): for responding to inquiries and scheduling meetings related to potential service agreements.
• Legal obligation (Art. 6(1)(c) GDPR): where we are required by law to process or retain data.

5. Third-Party Services

We use the following third-party services that may process your data:

5.1 Google Analytics

We use Google Analytics (provided by Google LLC / Google Ireland Limited) to analyze website traffic. Google Analytics uses cookies to collect anonymized usage data. Data may be transferred to Google servers in the United States. Google is certified under the EU-US Data Privacy Framework. For more information, see Google's Privacy Policy.

5.2 Umami Analytics

We use Umami as a privacy-focused analytics solution. Umami does not use cookies, does not collect personal data, and does not track individual users. All data is aggregated and anonymous.

5.3 Stabilim.ro

We embed a Stabilim.ro scheduling widget on our website to allow visitors to book meetings. When you use this widget, your data is processed by Stabilim.ro in accordance with their Privacy Policy.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described above:

• Contact form data: retained for up to 12 months after the last interaction, unless a business relationship is established
• Analytics data (Google Analytics): retained for 14 months, as configured in our Google Analytics settings
• Cookie consent preferences: stored locally on your device until you clear your browser data

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15): You can request a copy of the personal data we hold about you.
• Right to rectification (Art. 16): You can request correction of inaccurate or incomplete data.
• Right to erasure (Art. 17): You can request deletion of your personal data, subject to legal retention requirements.
• Right to restrict processing (Art. 18): You can request that we limit how we use your data.
• Right to data portability (Art. 20): You can request your data in a structured, commonly used, machine-readable format.
• Right to object (Art. 21): You can object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected].

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include HTTPS encryption, secure hosting, and access controls.

9. International Data Transfers

Some of our third-party service providers (such as Google) may transfer data outside the European Economic Area (EEA). Where such transfers occur, they are protected by appropriate safeguards, including the EU-US Data Privacy Framework or Standard Contractual Clauses.

10. Supervisory Authority

If you believe that the processing of your personal data infringes data protection regulations, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP):

• Website: www.dataprotection.ro
• Address: B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336, Bucharest, Romania

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

12. Contact Us

If you have any questions about this Privacy Policy or your personal data, please contact us:

• Email: [email protected]
• Address: PAZAL GROUP SRL, Str. Siretului 11, Bl. 11, Sc. 2, Et. 4, Ap. 9, Târgu Jiu, Gorj, 210158, Romania