Privacy policy

Last updated: 28 October 2026

This policy explains how we process personal data on olimpiaprime.ro, in accordance with Regulation (EU) 2016/679 (GDPR) and Romanian Law no. 190/2018. In case of discrepancies, the Romanian version prevails.

1. Who is the data controller

The data controller is OLIMPIA PRIME CONSTRUCT SRL, tax ID (CUI) 46710308, Trade Register no. J2022002685089, EUID ROONRC.J2022002685089, registered office at Str. Lungă 14, Et. Mansardă, Brașov 500058, Romania („Olimpia Prime”, „we”).

Data protection contact: olimpiaprimeconstruct@gmail.com, phone +40 725 153 979.

2. What data we collect

Through the quote request form: company name, contact person, email address, phone number (optional), product, quantity, destination, delivery terms and your message.
By email, phone or WhatsApp: the data you share with us directly (name, contact details, commercial information).
Technical data: IP address and browser information, processed automatically by the server for security and to limit abusive requests, as well as cookies (see the Cookie policy).

We do not collect special categories of data and do not ask for national ID numbers.

3. Purposes and legal bases

Answering your quote request and negotiating a contract — Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract) and the consent given in the form, Art. 6(1)(a).
Managing the B2B relationship (communication with partners’ representatives) — Art. 6(1)(f), our legitimate interest in communicating with business partners.
Legal obligations (accounting, tax, archiving) — Art. 6(1)(c).
Website security and spam prevention — Art. 6(1)(f).

We do not use the data for automated marketing, we do not sell it and we do not carry out automated decision-making or profiling.

4. How long we keep the data

Quote requests that do not lead to a contract: up to 2 years from the last communication.
Contract and accounting documents: the periods required by law (usually 5–10 years).
Technical security data: up to 1 hour for rate limiting; server logs according to the hosting provider’s settings.

5. Who we share the data with

The data is accessed only by Olimpia Prime staff and by service providers acting as processors:

the website hosting provider;
the email service provider (Google LLC – Gmail), through which we receive form submissions;
our accountant, lawyer or public authorities, where required by law;
suppliers or carriers involved in a transaction, only as needed for quoting and delivery.

6. Transfers outside the EEA

Google’s email service may involve transfers of data to the USA, based on the EU-U.S. Data Privacy Framework and/or the Standard Contractual Clauses approved by the European Commission.

7. Your rights

Under Articles 15–22 GDPR, you have the right:

of access to your data;
to rectification of inaccurate data;
to erasure („right to be forgotten”);
to restriction of processing;
to data portability;
to object to processing based on legitimate interest;
to withdraw your consent at any time, without affecting the lawfulness of prior processing.

To exercise your rights, write to olimpiaprimeconstruct@gmail.com. We reply within one month of receiving the request.

You also have the right to lodge a complaint with the Romanian supervisory authority, ANSPDCP (B-dul G-ral. Gheorghe Magheru 28-30, sector 1, Bucharest, www.dataprotection.ro, anspdcp@dataprotection.ro), or with the authority in your EU country of residence.

8. Data security

We use encrypted connections (HTTPS), restricted access to data, spam protection and rate limiting. No system is completely secure, however.

9. Minors

The website is aimed exclusively at businesses (B2B) and is not intended for persons under 18.

10. Changes

We may update this policy. The current version is published on this page, with the date of the last update.