This policy explains what personal data we collect through urstag.com, for what purpose, and what rights you have under Regulation (EU) 2016/679 (GDPR).
1. Data controller
The urstag.com website is operated by URSTAG, a manufacturer and exporter of recycling equipment. You can contact us about your data through the contact form or at info@urstag.com.
2. Data we collect
- Form data: name, email, phone, company, VAT/company ID and the message you send when requesting a quote or contacting us.
- Public company data: if you enter a Romanian company ID (CUI), we may supplement your request with publicly available company data (name, county, activity code, VAT status) from public registries, to prepare a relevant quote.
- Technical data: IP address and access logs collected by the hosting provider, plus your language preference.
- Analytics data: anonymous traffic statistics via Google Analytics (see the Cookie Policy).
We do not collect special categories of personal data.
3. Purposes and legal grounds
- to respond to inquiries and prepare quotes (Art. 6(1)(b) GDPR, pre-contractual measures);
- to perform contracts, including delivery, installation and warranty;
- to ensure site security and prevent fraud (Art. 6(1)(f), legitimate interest);
- to comply with tax and accounting obligations (Art. 6(1)(c));
- to measure traffic and send marketing communications, based on consent that can be withdrawn at any time.
4. Retention
Contact form data is kept for the duration of active interest, up to 3 years from the last interaction. Contracts and invoices are kept for 10 years under accounting law. Technical logs are kept for up to 12 months.
5. Data sharing
We may share data with our hosting provider (Vercel Inc., USA), email provider, lead management tool, logistics and installation partners, and public authorities where required by law. All such processors are contractually bound to comply with GDPR.
6. Transfers outside the EEA
Some data may be transferred to providers located outside the European Economic Area. Such transfers rely on the European Commission's Standard Contractual Clauses or other appropriate safeguards under Art. 46 GDPR.
7. Your rights
You have the right of access, rectification, erasure, restriction of processing, objection, data portability and withdrawal of consent. You can exercise these rights through the contact form or at info@urstag.com.
8. Complaint to a supervisory authority
You may lodge a complaint with the Romanian supervisory authority (ANSPDCP, www.dataprotection.ro) or with the authority in your country.
9. Data security
We use TLS encryption for all transmissions and restricted database access. Nevertheless, no transmission over the internet is completely secure, despite reasonable protective measures.
10. Changes
We may update this policy to reflect technical, legal or practical changes. Continued use of the site after changes are published constitutes acceptance of the revised version.