Skip to content

Privacy Policy

1. Who We Are

EUROTERM SRL, with its registered office at Piața Mărăști No. 3, Cluj-Napoca, Cluj County, Romania, registered with the Trade Register under no. J12/294/1998, Tax Identification Number RO 10232628 (hereinafter "EUROTERM", "we", "us", or "the controller"), processes personal data as a data controller in accordance with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data ("GDPR") and applicable national legislation, including Romanian Law no. 190/2018.

The protection of your personal data is very important to us. This Privacy Policy explains what data we collect, how we use it, to whom we may disclose it, and what rights you have as a data subject.

Please read this policy carefully. By using our website www.euroterm.ro and providing your data, you agree to its processing as described below.

2. What Personal Data We Collect

EUROTERM only collects data strictly necessary to provide you with our services. Depending on your interaction with our website, we may collect the following categories of data:

2.1. Data You Provide Directly

  • Identification data: first name, last name, company name
  • Contact data: email address, phone number, postal / registered office address
  • Professional data: job title, department, company NACE code
  • Communication data: content of messages sent via the contact form, email, or phone, including quote requests, technical questions, and any other information you choose to share
  • Account data: email address and password (encrypted) used to create a customer account on our platform
  • Order data: history of quote requests and placed orders, products saved to your wishlist

2.2. Automatically Collected Data

  • Browsing data: IP address, browser type and version, operating system, pages viewed, visit duration, access date and time, referring URL
  • Usage data: browsing behaviour on the site, products viewed, interactions with page elements
  • Cookies and similar technologies: in accordance with our Cookie Policy

3. Purposes of Data Processing

We process your personal data exclusively for the following purposes:

  1. Order management and contractual relationship — processing quote requests, confirming and fulfilling orders, invoicing, delivery, after-sales support, warranty and returns management
  2. Customer communication and support — responding to your questions, requests, and feedback submitted through any communication channel
  3. Customer account management — creating and administering your account on euroterm.ro, authentication, order history, saved products
  4. Direct marketing (only with explicit consent) — sending commercial communications about our products, offers, and news, exclusively if you have given your consent. You may withdraw your consent at any time, free of charge, via the unsubscribe link in each email or by written request
  5. Improving the website experience — analysing how visitors use the site, identifying technical issues, optimising content and performance, based on anonymised or aggregated data
  6. Legal obligations — compliance with tax and accounting obligations (retaining invoices and supporting documents), archiving as required by law, responding to requests from competent authorities
  7. Protection of legitimate rights and interests — fraud prevention, IT security, dispute management, and exercise of the right of defence

4. Legal Bases for Processing

The processing of your data is based on the following legal grounds set out in Art. 6 GDPR:

  • Art. 6(1)(a) – Consent: for sending direct marketing communications and for non-essential cookies
  • Art. 6(1)(b) – Performance of a contract or pre-contractual measures: for processing orders, providing quotes, creating and managing your customer account
  • Art. 6(1)(c) – Legal obligation: for invoicing, accounting records, archiving, and communications with tax authorities
  • Art. 6(1)(f) – Legitimate interest: for improving the website, traffic analysis (anonymised data), IT security, fraud prevention, dispute management, and direct communication with existing customers about products similar to those already purchased (pursuant to Art. 12(2) of Romanian Law no. 506/2004)

5. How Long We Keep Your Data

Your personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, as follows:

  • Account data: for the lifetime of the account and up to 30 days after a deletion request
  • Order and invoice data: 10 years, in accordance with tax and accounting legislation (Romanian Accounting Law no. 82/1991, Fiscal Code)
  • Correspondence data (email, contact form): 3 years from the last interaction, to ensure continuity of the business relationship
  • Marketing data: until consent is withdrawn
  • Browsing data (cookies): in accordance with the periods specified in our Cookie Policy

Upon expiry of the retention periods, data will be irreversibly deleted or anonymised.

6. Who We Share Your Data With

Your data is not sold, rented, or traded to third parties. It may only be disclosed in the following limited circumstances:

  • Service providers (data processors): contractual partners assisting us in our business — IT and hosting providers, website maintenance services, accounting firms, couriers and transport companies. These partners process data exclusively on our instructions, under contracts guaranteeing data confidentiality and security, in accordance with Art. 28 GDPR
  • Public authorities: tax authorities (ANAF), judicial bodies, police, or other competent authorities, when required by law or necessary to establish, exercise, or defend a legal right
  • Professional consultants: lawyers, auditors, chartered accountants — strictly to the extent necessary for the services provided and under confidentiality obligations

7. Transfers of Data Outside the EU

As a general rule, your data is stored and processed on servers located within the European Economic Area (EEA). To the extent that, for certain services (e.g. Google Analytics), data may be transferred to servers in the United States or other third countries, we ensure that such transfers only take place with appropriate safeguards provided for by the GDPR (standard contractual clauses approved by the European Commission, adequacy decisions, or other steps necessary to ensure that data is treated with the same level of protection as within the EU).

8. Data Security

EUROTERM implements appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or accidental or unlawful destruction. These measures include:

  • Encryption of data in transit via HTTPS (TLS 1.3)
  • Passwords encrypted using secure hashing algorithms (bcrypt)
  • Access to data strictly limited to employees and collaborators who need it to perform their duties
  • Regular updates of systems and applications
  • Regular backups and incident recovery procedures
  • Continuous infrastructure monitoring to detect and prevent security incidents

9. Your Rights

As a data subject, the GDPR grants you the following rights, which you may exercise at any time, free of charge:

9.1. Right of Access (Art. 15 GDPR)

You have the right to obtain confirmation as to whether your data is being processed by us and, if so, to request a copy thereof, together with information about the purposes of processing, categories of data, recipients, retention period, and your rights.

9.2. Right to Rectification (Art. 16 GDPR)

You have the right to request the correction of inaccurate data or the completion of incomplete data concerning you.

9.3. Right to Erasure — "Right to Be Forgotten" (Art. 17 GDPR)

You have the right to request the deletion of data in the following cases: data is no longer necessary for the original purposes, you have withdrawn consent, you have objected to processing, processing is unlawful, or there is a legal obligation to delete. This right is not absolute — it may be limited by legal retention obligations or the need to exercise the right of defence.

9.4. Right to Restriction of Processing (Art. 18 GDPR)

You have the right to request restriction of processing where you contest the accuracy of the data, processing is unlawful, we no longer need the data but you require it for the defence of a legal claim, or you have objected to processing pending verification of legitimate grounds.

9.5. Right to Data Portability (Art. 20 GDPR)

You have the right to receive the data you have provided to us in a structured, commonly used, and machine-readable format, and to request its transmission to another controller, where technically feasible.

9.6. Right to Object (Art. 21 GDPR)

You may object at any time, on grounds relating to your particular situation, to the processing of data based on legitimate interest. You may request that we no longer process your data for direct marketing purposes. In such case, we will cease processing without delay.

9.7. Right Not to Be Subject to Automated Decisions (Art. 22 GDPR)

EUROTERM does not use automated decision-making (including profiling) that produces legal effects concerning you or significantly affects you.

9.8. Right to Withdraw Consent (Art. 7(3) GDPR)

Where processing is based on your consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before the withdrawal.

10. How to Exercise Your Rights

To exercise any of the rights mentioned above, you may contact us via:

  • Email: office@euroterm.ro — with the subject "Data Protection - [right being exercised]"
  • Post: EUROTERM SRL, Piața Mărăști No. 3, Cluj-Napoca, Cluj County, Romania — marked "For the attention of the Data Protection Officer"
  • Phone: +40 264 410499

We will respond to your request within a maximum of 30 calendar days from receipt. In justified cases, this period may be extended by a further 60 days, with prior notification to you.

11. Right to Lodge a Complaint

If you believe that the processing of your data violates applicable law, you have the right to lodge a complaint with the national supervisory authority:

National Supervisory Authority for Personal Data Processing (ANSPDCP)
Address: 28-30 G-ral. Gheorghe Magheru Blvd., District 1, Bucharest, postal code 010336, Romania
Phone: +40 318 059 211
Email: anspdcp@dataprotection.ro
Website: www.dataprotection.ro

You may also apply directly to the competent courts.

12. Minors' Data

Our website is not addressed to minors and we do not knowingly collect their data. Our services are intended exclusively for legal entities and authorised natural persons (sole traders) with full legal capacity to contract. If we discover that we have accidentally collected data of a minor, we will delete it immediately.

13. Changes to This Policy

We reserve the right to periodically update this Privacy Policy to reflect legislative, technological, or practice changes. The updated version will be published on this page, and the date of the last revision will be indicated below. Significant changes will be notified by email or via a visible notice on the site, as appropriate.

Last updated: June 2026

We use cookies for analytics (Google Analytics) to improve our website. By continuing, you confirm you have read our privacy policy.