Privacy Statement

We, Zaneffi S.R.L. (hereinafter referred to as "Zaneffi"), are committed to the protection of your personal data and ensuring your privacy is safeguarded. We process your data exclusively in accordance with the legal provisions of the General Data Protection Regulation (GDPR) and Romanian laws, including Law No. 506/2004 regarding the processing of personal data and the protection of privacy in electronic communications. Below, we outline key information on how we handle your data through our website (hereinafter referred to as "the website").

A. Controller

The entity responsible for the collection and processing of personal data is:Zaneffi S.R.L.E-Mail: [email protected]For any questions regarding data protection or privacy concerns, please contact our Data Protection Officer at [email protected].

B. Categories of Data Subjects

Data subjects include visitors to the website, prospective clients, customers, suppliers, and job applicants.

C. Categories of Data Processed

We collect and process the following categories of personal data:

Usage data: Information such as the pages you visit, your interest in content, and the time you access our services.
Meta/communication data: Technical information such as IP addresses, browser types, and device information.
Contact form data: If you submit inquiries via our contact form, we collect your name, email, company name, and any additional details you choose to share.
Customer/supplier data: For business purposes, we may process your name, profession, industry, contact information (address, email, phone), and relevant business-related data.
Job application data: When applying for a position, we collect data such as your name, contact details, CV, and other documents you provide. Interview notes or feedback are also collected during the application process.

D. Purposes of the Processing

The data we process is used for the following purposes:

1. Website Usage:

We process data from visitors to our website to ensure its security, functionality, and continuous improvement. This processing is conducted on the basis of our legitimate interests under Article 6(1)(f) GDPR.

2. Inquiries via Contact Form:

When you contact us using the website’s contact form, we collect your data to respond to your request. The legal basis for this processing is Article 6(1)(b) GDPR (fulfillment of pre-contractual obligations) or, where applicable, Article 6(1)(a) GDPR (consent).

3. Analytics and Website Optimization:

We use analytics tools to monitor and improve user experience. This helps us understand user behavior, identify trends, and enhance the performance of our website. The legal basis for this processing is Article 6(1)(a) GDPR (consent). You can manage or opt-out of analytics tracking by adjusting your cookie preferences.

4. Marketing and Client Relationship Management:

We manage inquiries and client information in a customer relationship management system. Data such as your contact details and business information is used to follow up on inquiries, send marketing communications (if you opt-in), and manage client relations. The legal basis for this processing is your consent under Article 6(1)(a) GDPR. You can withdraw consent at any time by contacting [email protected].

5. Contractual Obligations:

We process personal data from customers and suppliers to execute contracts, including pre-contractual communications and fulfillment of orders. The legal basis is Article 6(1)(b) GDPR.

6. Recruitment Process:

Personal data collected during job applications is used to evaluate candidates and carry out recruitment processes. This processing is based on Article 6(1)(a) GDPR (consent) and Article 6(1)(b) GDPR (pre-contractual measures). You are not obliged to provide your personal data, but failure to do so may affect your application.

E. Storage Duration

Personal data is retained only for as long as necessary to fulfill the purposes listed in Section D. Once the relevant processing purpose is completed, we delete your data unless there are legal retention obligations (e.g., in relation to accounting or labor law).In the case of job applications, your data will be stored for six months following the conclusion of the recruitment process, unless you consent to a longer retention period (up to 18 months). If your application results in employment, your data will be transferred to your employee file.

F. Transfer of Data

Personal data may be shared with service providers who assist us in processing your data, such as:

Providers of web analytics services to help us improve website functionality.
Service providers for customer relationship management to manage our contacts and communications.

We ensure all third-party service providers process your data in accordance with Article 28 GDPR, and we ensure that they use appropriate technical and organizational measures to safeguard your information.We do not share your data with third parties for marketing purposes without your explicit consent.

G. Cookies

Our website uses cookies for essential functionality, analytics, and optimization. When you first visit, you can adjust your cookie settings to allow or block non-essential cookies. These cookies help us understand how you interact with our website and improve the user experience.Cookies are small text files stored on your browser that collect and store information related to your website visit. You can manage or delete cookies in your browser settings, but please note that disabling cookies may affect website functionality.You can find more information on managing cookies in the settings of your browser:

H. Data Transfers Outside the EU

We do not currently transfer personal data outside the European Union. Should this change in the future, we will ensure that any such transfer complies with GDPR by using standard contractual clauses or another legally recognized mechanism to protect your data.

I. Your Rights

You have the following rights in relation to your personal data:

Right of Access: You can request information about the personal data we hold about you.
Right to Rectification: You can request corrections to inaccurate or incomplete data.
Right to Deletion: Under certain circumstances, you may request the deletion of your personal data.
Right to Restrict Processing: You can request a limitation on the processing of your personal data.
Right to Data Portability: You may request that your data be provided to you in a structured, commonly used format.
Right to Object: You have the right to object to data processing based on legitimate interests.
Right to Withdraw Consent: You can withdraw your consent at any time for data processing activities that rely on consent.

If you believe your rights have been violated, you may file a complaint with the National Supervisory Authority for Personal Data Processing (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal) in Romania.

J. Updates to This Privacy Policy

We may update this privacy statement to reflect changes in our data processing practices or legal obligations. Significant updatesE-Mail: [email protected]As amended in June 2024