Privacy Policy

Last updated: [25.11.2025] · Version 1.0

This privacy notice explains how PROTOTIP G AUTO SRL (the “Controller”, “we”) processes the personal data of individuals who visit this website or contact us through it, in accordance with Regulation (EU) 2016/679 (“GDPR”) and Romanian Law No. 190/2018.

1. Who the controller is

PROTOTIP G AUTO SRL
7 Gheorghe Caranfil St., Săvinești, 617410, Neamț County, Romania
Email: office@prototipauto.com
Phone: +40 725 362 560

For any question about the processing of your data or to exercise the rights below, contact us at dpo@prototipauto.com (data protection officer) or at the address above.

2. What data we collect and why

2.1. Contact form

When you complete the contact form, we process the data you provide: name, company name (optional), email address, phone number (optional), the subject of your request and the content of your message.

  • Purpose: to receive and handle your request (quote request, technical question, workshop visit, etc.) and the related follow-up.
  • Legal basis: steps taken at your request prior to entering into a contract [Art. 6(1)(b) GDPR] and/or our legitimate interest in responding to enquiries [Art. 6(1)(f) GDPR]. Ticking the consent box confirms your agreement to this processing [Art. 6(1)(a) GDPR].
  • Mandatory fields: the fields marked with an asterisk (name, email, message) are required in order to reply; without them we cannot contact you.

2.2. Technical browsing data

When you access the website, the hosting server may automatically log technical data such as your IP address, browser type and version, pages visited and access time.

  • Purpose: operation, security and maintenance of the website, and prevention of abuse.
  • Legal basis: our legitimate interest in ensuring the security and proper functioning of the website [Art. 6(1)(f) GDPR].

2.3. Cookies and local storage

This website uses strictly necessary local storage to remember your chosen language (RO/EN) during and between visits. This function does not track your activity and does not require consent.

The WordPress platform may set technical session cookies required for its operation. [If you add analytics or marketing tools — e.g. Google Analytics — these require prior consent through a cookie banner; complete this section accordingly.]

3. Who we share data with

We do not sell or rent your data. We may disclose it only to:

  • the website hosting provider, acting as a processor [hosting provider name];
  • the email service provider through which we receive and manage contact messages [email provider name, if applicable];
  • public authorities, where we are under a legal obligation to do so.

All processors handle the data solely on our instructions and under contracts that include the safeguards required by the GDPR.

4. Transfers outside the European Union

Data is generally processed within the European Union.

5. How long we keep the data

We keep contact-form data for as long as needed to handle your request and, afterwards, for a reasonable period of 2 years] to manage the relationship and any subsequent requests, unless the law requires a different retention period. Technical browsing data is kept short-term, in accordance with the hosting provider’s policy.

6. Your rights

As a data subject, you have the following rights:

  • the right to be informed;
  • the right of access;
  • the right to rectification;
  • the right to erasure (“right to be forgotten”);
  • the right to restrict processing;
  • the right to data portability;
  • the right to object;
  • the right not to be subject to a decision based solely on automated processing, including profiling;
  • the right to withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of prior processing.

You can exercise these rights by request to office@prototipauto.com or [dpo@prototipauto.com]. We generally respond within one month of receiving the request.

We do not use automated decision-making and do not create profiles based on the data collected through this website.

7. Right to lodge a complaint

If you consider that the processing of your data infringes applicable law, you have the right to lodge a complaint with the supervisory authority:

National Supervisory Authority for Personal Data Processing (ANSPDCP)
28–30 G-ral. Gheorghe Magheru Blvd., Sector 1, postal code 010336, Bucharest, Romania
Email: anspdcp@dataprotection.ro
Web: www.dataprotection.ro

8. Data security and breach notification

We apply appropriate technical and organisational measures to protect data against unauthorised access, loss or destruction. In the event of a personal data breach likely to result in a risk to the rights and freedoms of individuals, we notify the supervisory authority within 72 hours and, where applicable, the data subjects.

9. Minors

This website and the contact form are intended for professional communication and are not directed at persons under the age of 16. We do not knowingly collect data of minors under this age without the consent of the holder of parental responsibility.

10. Changes to this notice

We may update this notice from time to time. The applicable version is the one published on this page, together with the last-updated date shown at the top.