This policy explains what personal data we collect through the MCV ProTrust site, for what purpose we use it, to whom we pass it on and what rights you have in relation to it. We have written it on the basis of what this site actually does, not from a general template.
1. Who we are
The data controller is MCV ProTrust SRL, a Romanian company with its registered office at Strada Oborului 51A, 430392 Baia Mare, Maramureș county, Romania.
- CUI: 38504765
- Nr. Reg. Com.: J2017001906246
- E-mail: office@mcvprotrust.ro
- Telephone: +40 745 488 611
For any question relating to your personal data, write to us at the e-mail address above.
2. What data we collect
2.1 Through the quotation request form
The form on the Contact page collects:
- first name and surname;
- the name of the company, if you fill it in;
- telephone number;
- e-mail address;
- the type of project and the product of interest;
- the details of the project, as you describe them;
- the files you attach: drawings, sketches, joinery schedules or photographs, a maximum of 5 files of no more than 10 MB each;
- confirmation of your consent to the processing of the data;
- the IP address from which the request was sent.
2.2 Through the partnership form
The form on the Become a partner page collects first name and surname, company, telephone, e-mail, the country or region you operate in, the type of business and your message, together with confirmation of your consent to the processing of the data.
2.3 Automatically, when you visit the site
The server the site is hosted on records, as any web server does, technical data: the IP address, the type and version of the browser, the date and time of access and the pages requested. These logs are generated and kept by the hosting provider and are used for the operation and the security of the site.
2.4 What we do not collect
The site uses no traffic analytics, remarketing or advertising tracking tools. We do not create profiles and we take no automated decisions concerning you.
3. Why we use this data and on what legal basis
- In order to answer your request and prepare the quotation. Legal basis: steps taken at your request prior to entering into a contract, and your consent given by ticking the box on the form — Article 6(1)(b) and (a) of Regulation (EU) 2016/679.
- In order to keep a record of the requests received and so that we can pick the discussion up again if you come back to the project. Legal basis: our legitimate interest in keeping a record of commercial relations — Article 6(1)(f).
- In order to protect the site from automated submissions. The forms check how long they take to fill in and limit repeated submissions from the same IP address. Legal basis: the legitimate interest in keeping the site working and clean — Article 6(1)(f).
- In order to comply with the legal obligations that arise if the request turns into a contractual relationship, in particular accounting and tax obligations. Legal basis: legal obligation — Article 6(1)(c).
4. Cookies
On an ordinary visit, the site places no cookies of its own on your device. We use no analytics, advertising or tracking cookies.
Technical cookies may appear only for persons who log in to the administration area of the site, that is for our team, not for visitors.
The external services described below may place their own cookies at the moment their content is loaded. They are blocked until you give your consent: in their place you see a button, and your choice can be changed at any time from the footer of the page.
What exactly is stored in your browser, for how long and how to withdraw your consent, is explained in the cookie policy.
5. External services and the recipients of the data
We do not sell or rent your data. We pass it on only where this is necessary for the operation of the site and in order to answer you:
5.1 Hosting of the site
The site is hosted on the HostGator infrastructure, part of the Newfold Digital group. The provider has technical access to the data stored on the server, including requests sent through the forms, in the capacity of processor.
5.2 The e-mail service
The messages generated by the forms are delivered to us through Google’s e-mail servers. The content of the request, including the attached files, passes through this service.
5.3 The fonts
The font used in the design is served from our own server. No request is made to Google Fonts, so displaying the text transmits nothing about you to another provider.
5.4 Google Maps
The Contact page includes a map hosted by Google. The map does not load by itself: in its place you see a button. Only after you press it, or after you accept the “external content” category in the cookie settings, does your browser transmit your IP address and information about your browser to Google.
5.5 Matterport
The virtual tour of the showroom is hosted by Matterport. On the home page we display only a static image; the tour is loaded from Matterport’s servers only after you press the start button. Until then, your browser does not communicate with this service.
5.6 Authorities and advisers
We may pass data on to our accountants, legal advisers or public authorities, where the law requires us to or in order to defend a right in court.
5.7 Transfers outside the European Economic Area
Some of the providers listed above are part of international groups and may process data outside the European Economic Area. In such cases the transfer takes place on the basis of the mechanisms provided for by Regulation (EU) 2016/679, under the conditions set by each provider.
6. How long we keep the data
- The files attached to the quotation form are deleted from the server as soon as the message has been sent to our team. They remain only in the e-mail received.
- Requests sent through the forms are kept in our records for as long as is necessary for the purpose for which they were collected: preparing the quotation, the discussions that follow and, where applicable, the running of the collaboration.
- Data covered by legal obligations, in particular accounting and tax records, are kept for the periods laid down by law.
- The anti-spam checks use a value derived from the IP address, kept for no more than one minute, strictly in order to prevent repeated submissions.
When the data is no longer needed for any of these purposes, we delete it.
7. Your rights
As a data subject, you have the following rights:
- The right of access — to find out whether we process data about you and to receive a copy of it.
- The right to rectification — to have inaccurate data corrected or incomplete data completed.
- The right to erasure — to have your data erased, in the cases provided for by law.
- The right to restriction of processing — to have us restrict the way we use the data, in certain situations.
- The right to data portability — to receive the data in a structured, commonly used format.
- The right to object — to object to processing based on our legitimate interest.
- The right to withdraw consent, where the processing is based on it. Withdrawal does not affect processing carried out beforehand.
To exercise any of these rights, write to us at office@mcvprotrust.ro. We answer within the period laid down by law, as a rule within one month of receiving the request.
If you are not satisfied with our answer, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing — B-dul General Gheorghe Magheru nr. 28-30, sector 1, Bucharest, dataprotection.ro — or to bring the matter before the courts.
8. Data security
The site runs over an encrypted connection. Access to the requests received is limited to those people in the company who need them in order to answer you. The forms are protected against automated submissions, and uploaded files have their type checked before they are accepted.
9. Minors
The site is addressed to professionals and to persons who want a quotation for construction work. We do not intentionally collect data about persons under 16 years of age.
10. Changes to this policy
We may update this policy when the way the site works or the services we use change. The version in force is always the one published on this page, and the date of the last update is given at the beginning.