Privacy

Information about processing personal data

Updated 28 September 2026.

Controller and privacy contact

SMART INDUSTRIETECHNIK S.R.L.
Str. Toplița nr. 115
530240 Miercurea Ciuc
Harghita, Romania
zsombor.biro@smart-industrietechnik.ro

Project enquiries and business contacts

We process your name, email address and message, together with any optional company, telephone and service details, to respond and prepare a quotation. For enquiries on behalf of a company, the legal basis is our legitimate interest in business communication (GDPR Article 6(1)(f)). Where you personally are the prospective contracting party, steps taken at your request before entering a contract rely on Article 6(1)(b). Required fields are marked; the form cannot be submitted without them. Your telephone number is optional. Please avoid unnecessary personal or sensitive information.

Contact form and email

Contact Form 7 processes the form. Flamingo stores a copy in WordPress, including contact details and technical information such as IP address, browser identifier, source page and time. This supports handling, identifying and protecting enquiries against abuse. Form enquiries are configured for forwarding to the contact address above. General correspondence and abuse prevention rely on our legitimate interests under Article 6(1)(f). Acknowledging the privacy notice in the form is not consent to advertising.

Interest in joining the team

If you contact us about working at SMART, we use your contact details and the professional information you provide to respond and, where appropriate, arrange an introductory meeting. Steps towards a possible employment contract taken at your request rely on Article 6(1)(b); general correspondence relies on our legitimate interest in responding under Article 6(1)(f). Initially, please send only information needed for that conversation. The invitation to meet us is not a specific vacancy announcement.

Website, language and external content

Visiting the website transmits connection information to the web server, including IP address, requested page, time and browser information. Delivery, security and troubleshooting rely on our legitimate interest in reliable operation under Article 6(1)(f). Polylang sets the pll_language cookie to remember the selected language; it contains the language code and lasts one year. You can delete or block it in your browser settings. Fonts, images and videos load from the website’s own server. The current configuration has no active analytics or advertising trackers and no embedded maps. External links send data to the destination when you follow them. Services requiring consent are only activated after the relevant choice. WordPress also stores the result and time of an emoji-display support test under wpEmojiSettingsSupports in the browser tab’s session storage. This supports display functionality and contains no contact details.

Domain, hosting, DNS and other recipients

The domain is registered through ROMARG SRL, Romania. Further information: ROMARG privacy notice.

SIMPLE SOLUTION SRL, Harghita, Romania, manages the hosting and technical maintenance. The IT contact is Felszegi Lóránt Csaba. The company uses rented server infrastructure from Gazduire.Net, operated by TES EURO MEDIA SRL in Romania. DNS resolution uses private nameservers under sfde.ro. Hosting involves website content, the database, stored form enquiries and technically necessary connection data. Delivery, security and troubleshooting rely on our legitimate interest in reliable website operation under GDPR Article 6(1)(f). Further information: Gazduire.Net privacy notice.

We use Google Workspace for email correspondence. This involves email addresses, messages, attachments and technical delivery data. Processing outside the European Economic Area is possible. Information about processing and Google’s provisions for safeguarding international transfers is available in Google’s data processing terms.

Enquiries at SMART are handled by Zsombor Istvan Biro and his authorised assistants. Hosting, email and IT service providers may have access for their assigned tasks. Authorities and advisers receive data where legally required or necessary for legal claims.

Retention

Project enquiries that do not result in an order have a retention period of twelve months after the enquiry is closed. Enquiries about joining the team have a retention period of six months after the conversation or selection process ends. These periods cover the related messages and attachments in both WordPress and the email mailbox. Longer retention applies only where a legal obligation or a specific legal claim requires it.

For ongoing projects, we retain the records needed to handle the project and fulfil the contract. Further retention of contracts, invoices and related business records is determined by applicable commercial and tax obligations and the periods relevant to specific legal claims. The data is then deleted unless another necessary reason for retention applies.

Server logs and backups are retained for six months. Website backups are stored on the hosting server. Data deleted from active systems may remain in backups until this backup retention period expires.

Your rights

Subject to the applicable conditions, you have rights of access, rectification, erasure, restriction and data portability. You may object to processing based on legitimate interests for reasons relating to your particular situation. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing. Contact the email address above. We normally respond within one month; if an extension of up to two further months is necessary, we explain the reasons within the first month. You may complain to a supervisory authority, particularly where you live, work or believe an infringement occurred. In Romania: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), complaint information.

Automated decisions and updates

The current website does not make solely automated decisions with legal or similarly significant effects and does not use profiling. This notice will be updated when services or processing arrangements change.