Request a quote

Privacy Policy

Last updated: October 2026

AS FACTORUM INSTALL SOLUTIONS SRL (hereinafter referred to as "the Company", "we", or "us") respects your privacy and is committed to protecting the personal data collected through our website. This Privacy Policy explains how we collect, use, store, and protect your personal information in compliance with the General Data Protection Regulation (GDPR - Regulation EU 2016/679).

1. Data Controller

The data controller responsible for your personal data is:

  • Company Name: AS FACTORUM INSTALL SOLUTIONS SRL
  • Registration / Tax ID (CUI): 47531726
  • Trade Register No.: J2023000283138
  • Registered Address: Str. Observatorului 90, 400347 Cluj-Napoca, Cluj County
  • Contact Email: info@asfactorum.com

2. Personal Data Collected and Purposes of Processing

A. Contact Forms and Inquiries

  • Data collected: Name, company name, email address (optional), phone number, the service selected, your message about our industrial services (industrial HVAC, machinery installation/relocation, steel structures, technical maintenance), and the language in which you filled in the form. The form also sends technical data: a random request identifier, the time taken to fill in the form, a hidden anti-spam field and the Turnstile verification result.
  • Purpose: Handling inquiries, pre-contractual communications, and drafting technical and commercial proposals.
  • Legal basis: Steps taken at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate B2B interest (Art. 6(1)(f) GDPR).
  • Email confirmation: If you entered an email address, we send you an automatic message confirming receipt of your request.

B. Form Security (IP address)

  • Data collected: IP address and technical browser data.
  • Purpose: Protecting the form against spam and abuse: the Turnstile check (Cloudflare) and a limit on the number of requests sent from the same address (at most 5 requests per 10 minutes; for IPv6 the /64 network is counted).
  • Legal basis: Our legitimate interest in keeping the website and the form secure (Art. 6(1)(f) GDPR).
  • Duration: The request counter is held only in the application's memory, is not written to disk or to a database, and entries older than 10 minutes are no longer counted. The memory is cleared when the application restarts. The email address used for the confirmation is held the same way for 24 hours, to avoid sending repeated messages to the same address.

C. Website Usage Statistics

  • Data collected: Pseudonymised usage data (pages viewed, session duration, device and browser type), through Google Analytics 4 loaded with Google Tag Manager, only if you accepted analytics cookies. Cloudflare Web Analytics measures visits in aggregate, without cookies.
  • Legal basis: Your consent (Art. 6(1)(a) GDPR) for Google Analytics; you can withdraw it at any time from "Cookie settings" in the site footer. For Cloudflare Web Analytics, our legitimate interest in understanding site traffic (Art. 6(1)(f) GDPR).
  • Cookie details are in the Cookie Policy.

D. Communication via WhatsApp

If you choose to contact us via the integrated WhatsApp button, your phone number and conversation details will be processed through the WhatsApp platform (Meta Platforms Ireland Limited).

  • Legal basis: Your consent expressed by initiating the chat (Art. 6(1)(a) GDPR) and our legitimate interest in providing efficient support.

3. Data Storage and Security

Data submitted through the form is not stored in a database on our web server. It is sent automatically, through Google's SMTP server (Gmail), to our official company mailbox: info@asfactorum.com. From there it is kept in the mailbox.

We enforce appropriate technical and organizational measures to safeguard your data against unauthorized access, loss, or alteration (including SSL/TLS encryption for transmission and secure email protocols).

4. Data Retention

  • Unsuccessful Inquiries / Proposals: Email records containing quotes that do not lead to a contract will be retained for a maximum of 12 months from the last communication, after which they are permanently deleted.
  • IP address used for request limiting: See section 2.B; it is held only in the application's memory.
  • Google Analytics usage data: According to the retention settings of our Google Analytics account; _ga cookies last as stated in the Cookie Policy.
  • Executed Commercial Contracts: Data associated with active contracts is retained for the duration of the agreement and subsequently in compliance with statutory financial and legal requirements.

5. Third-Party Disclosures

We do not sell, rent, or lease your personal data to third parties. Data may be accessible only to the IT service providers below, under confidentiality obligations, who act as processors, except for Google Analytics, where the roles depend on how the service is configured:

  • Hostinger (web application hosting): receives requests made to the site and may keep technical access logs, which include the IP address, under its own policies.
  • Cloudflare (proxy and delivery network, Turnstile, Web Analytics): all site traffic passes through Cloudflare, which sees the IP address and technical browser data; Turnstile checks the form for spam.
  • Google, Gmail / Google Workspace (sending the form messages and the mailbox): processes the content of your requests as email messages.
  • Google, Tag Manager and Analytics 4: receive pseudonymised usage data only if you accept analytics cookies; this data may be processed on servers outside the European Economic Area.
  • Meta (WhatsApp): only if you start a conversation through the WhatsApp button; Meta acts as a separate controller.

6. Your Rights Under GDPR

As a data subject, you hold the following rights:

  • Right of Access: To request confirmation and details regarding the processing of your personal data.
  • Right to Rectification: To request correction of inaccurate or incomplete data.
  • Right to Erasure ("Right to be Forgotten"): To request data deletion when it is no longer required for its original purpose.
  • Right to Restrict Processing: To limit how your data is processed under specific circumstances.
  • Right to Object: To object to processing based on legitimate interests.
  • Right to Data Portability (Art. 20): To receive the data you provided to us in a structured, commonly used, machine-readable format and to transmit it to another controller, where processing is based on contract or consent and carried out by automated means.
  • Right to Withdraw Consent: For processing based on consent (analytics cookies), you can withdraw it at any time from "Cookie settings", without affecting the lawfulness of earlier processing.
  • Right to Lodge a Complaint: To lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru nr. 28-30, sector 1, Bucharest, Romania, www.dataprotection.ro, anspdcp@dataprotection.ro.

To exercise your rights, please submit a written request to: info@asfactorum.com. We reply within one month of receiving your request.