Privacy and data protection policy

Preliminary information

The information in this document (the ‘Privacy Policy’) is important and we encourage you to read it carefully.

This Policy should be read together with the Terms and Conditions and the Cookie Policy. If this document conflicts with the other policies, the Privacy Policy takes precedence.

The azall.ro website, operated by AZALL CONSULT, collects the minimum personal data necessary for the website to function and for the provision of the services offered through it.

As a personal data controller under the General Data Protection Regulation (GDPR — Regulation (EU) 2016/679), we determine the type and purpose of the data we process.

Data is processed in accordance with applicable legislation, particularly Regulation (EU) 2016/679 on the protection of natural persons with regard to personal data processing and the free movement of such data. AZALL CONSULT implements appropriate measures to ensure the protection and security of the data collected.

The data processed may include the IP address, collected to protect the website against abuse, spam and unauthorised automated access. This information is stored temporarily on our servers for up to 7 days.

To limit repeated form submissions, we use temporary counters with pseudonymised identifiers for the email address and, when available from the hosting infrastructure, the IP address. These counters do not contain the addresses in plain text or the message content. Limits use a 10-minute window, and expired counters are deleted automatically. Contact messages are handled separately, according to the purposes and retention periods described in this policy.

Last updated: 8 October 2026. This policy provides information about data processing; it is not a request for consent. Simply accessing the website or continuing to use it does not constitute consent to data processing.

Definitions

Fully aware that your personal information belongs to you, we make every effort to store it securely and process it carefully. We do not make solely automated decisions with a significant impact on you.

• ‘GDPR/RGPD’ — Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to personal data processing and the free movement of such data (General Data Protection Regulation);
• ‘Controller’ or ‘AZALL CONSULT’ — the legal entity which, alone or jointly with others, determines the purposes and means of processing personal data;
• ‘Data subject’ — any identified or identifiable individual whose data we process as controller, such as customers, prospective customers or AZALL website visitors;
• ‘Terms and Conditions’ — the consensual distance agreement between the Customer and us, without simultaneous physical presence, concerning the purchase of services on the AZALL website in compliance with applicable law;
• ‘Processing’ — any operation performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, erasure or destruction;
• ‘Consent’ — any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which they signify agreement to the processing of their personal data through a statement or clear affirmative action;
• ‘Personal data’ — any information relating to an identified or identifiable individual (name, email, telephone number, address, personal identification number (CNP), tax identification number (CUI), signature, identity document series and number, etc.).
• Other terms used in this document have the meaning given by the GDPR and other applicable legislation.

Information collected

If you use the AZALL website, we will collect and process the following personal data about you:

• Through the contact form: your name, email address, telephone number, service of interest and message content. The form does not request a personal identification number (CNP), copies of identity documents or a signature. Do not include sensitive data or identity documents in your message.
• Information we collect about you through the cookies used when you access the AZALL website.
• Identification or billing information and specific documents may subsequently be necessary to provide a service. The requested data and processing purpose depend on the service chosen; these are distinct from the data requested through the contact form.

Purpose and scope

If you are an AZALL CONSULT customer, we may process your personal data in the following circumstances:

To respond to a service enquiry and prepare an offer, we process your contact details and message for the pre-contractual steps you have requested (Article 6(1)(b) GDPR). For general correspondence or correspondence with company representatives, the basis is our legitimate interest in managing enquiries and professional relationships (Article 6(1)(f) GDPR).

To perform the contractual relationship between you and AZALL CONSULT — processing is based on the contract between you and AZALL CONSULT, as defined in the Terms and Conditions. Providing the data is necessary to perform the contract, and refusal may make it impossible to carry out the contractual relationship.

To meet AZALL CONSULT’s legal obligations in connection with the services provided, including tax and archiving obligations — processing is necessary to comply with legal obligations. Refusing to provide the data may make it impossible to provide our services.

Submitting the contact form does not subscribe you to commercial communications and does not constitute consent to marketing.

For security and abuse prevention, the basis is our legitimate interest in protecting the website and communications (Article 6(1)(f) GDPR). This basis does not replace the consent required by law for storing or accessing non-essential information on your device; the information and choices on the Cookies page apply to these activities.

Requirement to provide data

Information must be provided in all fields where it is required, because it is necessary to register your enquiry and provide the requested services.

How we protect your data

We understand the importance of personal data security and take the necessary steps to protect you from unauthorised access, alteration, disclosure or destruction of data. We have implemented the following technical and organisational measures:

• Dedicated policies — we regularly review internal data-processing practices and policies to protect our systems against unauthorised access;
• Data minimisation — we limit processing to data that is necessary, adequate and relevant for the stated purposes;
• Restricted access — access is limited to those who need the data to perform their duties, under strict contractual or statutory confidentiality obligations;
• Data accuracy — we may periodically ask you to confirm that your data is accurate or up to date;
• Staff training — our collaborators receive training on legislation and best practices in data processing;
• Data anonymisation — where possible, we anonymise or pseudonymise data so that individuals can no longer be identified.

Transfer of personal data

We will not disclose your personal data to third parties for their own marketing or commercial purposes without your express consent.

The categories of recipients to whom we may disclose your data are:

• Public authorities in Romania (ONRC, ANAF, etc.), at their request or on our initiative, in accordance with applicable law;
• Accountants, auditors, lawyers and other external professional advisers who are contractually or legally bound to keep the data confidential;
• Individuals or legal entities acting as processors for AZALL (IT services, payment services, etc.), for whom we establish specific measures to comply with data protection requirements;
• Any relevant person, agency or court — to the extent necessary to establish, exercise or defend a legal claim.

Google services

Google Maps and external photographs of review authors are loaded in the browser only after you accept the Functionality category, in the map area or on the Cookies page. The basis for this optional loading is consent (Article 6(1)(a) GDPR). Refusal does not prevent you from using the contact form.

Once enabled, Google receives technical information such as your IP address and browser details and may use cookies under its own policy: https://policies.google.com/privacy?hl=en. Google’s policy also describes international data processing and the safeguards used.

You can withdraw consent on the Cookies page by disabling Functionality and saving your choice. This stops future loading of these elements; it does not undo previous processing or automatically delete Google cookies already present in your browser.

Separately from the map, the website loads the Inter and Plus Jakarta Sans fonts through Google Fonts to display text. Your browser connects to Google servers, which receive technical data such as your IP address; this loading is not controlled by the map preference. Information on the data processed by Google Fonts: https://developers.google.com/fonts/faq/privacy.

Data retention

Correspondence data is retained for as long as necessary to manage the enquiry and any contractual relationship. Subsequent retention is limited to data needed to meet legal obligations or defend rights, taking into account applicable limitation periods and any litigation. Accounting documents are retained for the period required by the legislation applicable to that document category; a single 10-year period does not apply to all data.

After the retention period ends, the data will be destroyed, deleted from IT systems or rendered anonymous. In certain situations expressly regulated by law, we retain data for the legally required period.

If you withdraw consent to processing for marketing purposes, AZALL CONSULT will stop processing your data for that purpose, without affecting processing carried out on the basis of consent before its withdrawal.

Your rights

Under Articles 15–21 of the GDPR, you have the following rights:

• The right to confirmation of whether your data is being processed and to receive a copy of it (Article 15 GDPR);
• The right to request correction of inaccurate data or completion of incomplete data (Article 16 GDPR);
• The right to erasure (‘right to be forgotten’), subject to the conditions and exceptions in Article 17 GDPR;
• The right to restriction of processing, under the conditions in Article 18 GDPR;
• The right to object to processing (for example, for marketing purposes) — Article 21 GDPR;
• The right to request data portability (Article 20 GDPR);
• The right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before withdrawal;
• The right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP).

Limits on rights

Rights are exercised under the conditions of the GDPR. We may request additional information necessary to identify an applicant only where there are reasonable doubts about their identity. Objection to direct marketing requires no justification.

Contact details

For questions and to exercise your rights: contact@azall.ro. We respond without undue delay and, in principle, within one month. If the legal conditions for an extension are met, we will inform you within that period of the reasons and the length of the extension. You may lodge a complaint with ANSPDCP: www.dataprotection.ro.