Privacy policy

The controller of your data is EURO STAR GROUP S.R.L., registered office in Alba Iulia, Barabanț, Str. Gării nr. 2 Bis, 510001, Alba County, Romania, tax number 15977977, Trade Register no. J2003001051017.

For any question about your personal data, write to esg.anvelope@gmail.com or call 0744 595 795 / 0756 028 000.

Through the quote form: your name, phone number, e-mail address (optional) and the content of your message, together with the page you sent it from and the site language.

If you contact us by phone, e-mail or WhatsApp: your contact details and the content of the conversation, as you provide them.

Automatically, through our hosting provider: IP address, browser type and pages visited, in the server's technical logs. These serve the operation and security of the site and are not used to identify you.

We do not ask for or collect special categories of data (health, beliefs, biometrics), and we never ask for payment details through the site.

To answer your quote request and prepare a possible commercial relationship — basis: Art. 6(1)(b) GDPR (steps taken at your request prior to a contract).

To answer your questions and keep a record of commercial correspondence — basis: Art. 6(1)(f) GDPR (our legitimate interest in communicating with customers and prospects).

For site security and to prevent abuse of the form — basis: Art. 6(1)(f) GDPR.

To meet accounting and tax obligations if a sale takes place — basis: Art. 6(1)(c) GDPR (legal obligation).

We do not send unsolicited marketing (no newsletter) and we do not sell your data.

We neither sell nor rent data to anyone. We disclose it only to the providers who help us run the site, acting as processors and contractually bound to protect it:

Netlify, Inc. — site hosting, and receiving and keeping the messages sent through the quote form, which it then forwards to us by e-mail; Google Ireland Ltd. / Google LLC — the Firebase infrastructure where the product catalogue is stored and, on the contact page, the Google Maps map if you choose to load it; our e-mail provider, where we receive and keep the messages.

Data may be disclosed to public authorities where the law requires it.

Some of these providers process data in the United States. Such transfers rely on the Standard Contractual Clauses approved by the European Commission and/or the EU–US Data Privacy Framework.

Quote requests that do not lead to a sale: up to 3 years from the last communication, so we can resume the discussion and defend a possible claim. The same period applies to the copy kept by our hosting provider.

Data relating to a contract: for the term of the contract and afterwards, in line with statutory accounting retention periods (generally 10 years).

Server technical logs: per our hosting provider's policy, normally under 12 months.

Once those periods expire, data is deleted or anonymised.

You have the right of access to your data, rectification of inaccurate data, erasure (the right to be forgotten), restriction of processing, data portability, and objection to processing based on legitimate interest.

We do not subject you to automated decision-making and we do not carry out profiling.

You can exercise any of these rights with a simple request to esg.anvelope@gmail.com. We reply within 30 days at the latest.

If you believe we have infringed your rights, you may complain to the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral Gheorghe Magheru 28-30, Sector 1, Bucharest, anspdcp@dataprotection.ro, dataprotection.ro, or bring the matter before a court.

The site is served exclusively over an encrypted HTTPS connection. Access to the catalogue administration area is limited to named, authenticated accounts. Messages sent through the form are kept in our hosting account, accessible only to us, and are never published on the site.

No measure is absolute; if a personal data breach occurs that is likely to result in a high risk to you, we will inform you as required by Art. 34 GDPR.

This site is aimed at professionals and adults. We do not knowingly collect data from people under 16. If you make us aware of such a case, we delete the data.

We may update this policy. The applicable version is the one published here, with the last-updated date shown at the top of the page.