Privacy Policy

1. Who is the data controller

The controller of your personal data is S.C ALPEBOCOM S.R.L, with its registered office at the address shown on the contact page, registered with the Trade Register under no. J2004001155080, VAT number RO16454119.

For any question regarding your data, you may write to us at the email address shown on the contact page.

2. What data we collect

We collect two categories of data: what you voluntarily provide through the contact form, and a few technical details about your visit, described in section 6.

Through the contact form we collect:

• client type (individual or company)
• your name or your company's name
• phone number
• email address
• the service you are requesting a quote for (optional)
• your message (optional)
• the language you used and the time of submission

2.1. If you apply for a job with us

Through the form on the careers page we collect your name, phone number, email address, the position you are applying for, your message and, if you choose to attach one, your CV.

We process this data in order to assess your application and to contact you about it. The legal basis is the steps taken at your request prior to entering an employment contract (Art. 6(1)(b) GDPR) and the consent you give when submitting the form (Art. 6(1)(a) GDPR).

Your CV is stored separately from the rest of the website, in a private area, and is not publicly accessible: it cannot be reached through a link and cannot be indexed by search engines. It can only be downloaded by authenticated company administrators, through a temporary link valid for a few minutes.

We keep your application and CV for no longer than 12 months from receipt, so that we can contact you if a suitable position comes up. You may request earlier deletion at any time by email — we delete them permanently, together with the uploaded file.

We do not pass your CV to other companies and we do not use it for any purpose other than recruitment.

3. Why we process this data

We use your data solely to respond to your enquiry: to contact you, prepare and send you the quote you requested.

The legal basis is your consent, given by ticking the box in the form (Art. 6(1)(a) GDPR), as well as our legitimate interest in responding to commercial enquiries we receive (Art. 6(1)(f) GDPR).

We do not use your data for automated marketing and we do not send you newsletters without a separate request from you.

4. Who has access to the data

The data is accessible only to Alpebocom staff handling quotations. We do not sell or rent your data to anyone.

To operate this website we use the following providers, acting as processors and bound by contractual data protection obligations:

• Vercel Inc. — website hosting
• Supabase — database, hosted in the European Union (Frankfurt, Germany)
• Zooku — the email server through which we receive enquiries and send you the confirmation

5. How long we keep the data

We keep quote requests for as long as necessary to handle them and to maintain a record of the commercial relationship, but no longer than 3 years from the last interaction.

You may request earlier deletion at any time, by a simple email.

The traffic data described in section 6 contains nothing that identifies you, so we keep it in order to follow how the website develops over time.

6. Cookies and traffic measurement

The public website uses no analytics, advertising or tracking cookies. We do not use Google Analytics, social media pixels or any other profiling tools, and visit data never reaches any third-party service.

We do, however, measure our own traffic, so that we know which pages are being read. For each page viewed we record:

• the address of the page visited and the language it is shown in
• the website you came from, if any (for example Google or Facebook)
• the type of device: phone or computer
• the approximate country, county and town, as reported to us by our hosting provider based on the network you connect through
• the time of the visit

6.1. What we do NOT do when measuring traffic

We do not store your IP address, we write nothing to your browser — no cookie and no other form of storage — and we do not keep your browser identifier.

So that we can tell three pages read by one person from three pages read by three people, our server computes a code from the IP address and browser type, mixed with a site secret and the current date. The IP address is used only in that computation, at the moment of the visit, and is not stored; it cannot be recovered from the code. Because the date is part of the computation, the code changes every day, so you cannot be followed from one day to the next, let alone from one website to another.

The legal basis is our legitimate interest in understanding how the website is used, in order to improve it (Art. 6(1)(f) GDPR).

The only cookie used on the site is the administration panel login cookie, strictly necessary and accessible only to administrators.

7. Your rights

Under the GDPR, you have the following rights:

• right of access — to find out what data we hold about you
• right to rectification — to correct inaccurate data
• right to erasure (the "right to be forgotten")
• right to restriction of processing
• right to data portability
• right to object to processing
• right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal

8. How to exercise your rights

Write to us at the email address shown on the contact page. We will respond within 30 days at the latest.

If you are not satisfied with our response, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), 28-30 Gheorghe Magheru Blvd., Bucharest, www.dataprotection.ro.

9. Data security

Data is transmitted encrypted (HTTPS) and stored in a secure database hosted in the European Union. Access to the administration panel is password-protected and passwords are stored encrypted.

10. Changes to this policy

We may update this policy when the way the website works changes. The current version is always available at this address, and the date of the last update appears at the top of the page.