Privacy Policy

 

Privacy Statement pursuant to the General Data Protection Regulation (GDPR) and applicable Romanian data protection legislation.

1. Name and Address of the Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other applicable data protection laws is:

Suran Recycling INTEGRAL BUSINESS CENTER, B-dul Pipera nr. 1-IA, Corp A, et. 7 Voluntari, Ilfov, Romania Phone: +40 768 724 055 Email: office@suranrecycling.com Website: www.suranrecycling.com

For any questions relating to data protection in connection with our website or the services we offer, please contact us at office@suranrecycling.com.

2. Scope, Purpose and Legal Basis for the Processing of Personal Data

We collect and use personal data only to the extent necessary to provide a functional website and to deliver our content and services. As a rule, personal data is collected and used only with the user’s consent. Exceptions apply where prior consent is not practically obtainable and where processing is permitted by law.

2.1 Server Log Files

Each time our website is accessed, our system automatically collects data and information from the requesting device. The following technical information is collected:

  • Browser type and version
  • Operating system of the user
  • Internet service provider
  • IP address in anonymised form
  • Date and time of access
  • Website from which the user’s system accessed our website
  • Pages accessed via our website

This data is stored in server log files. IP addresses or other data enabling personal identification are not stored alongside other personal data. We process this technical information for the purpose of network security, to ensure the stability and technical operation of our website, and to optimise our online presence. The legal basis is Art. 6(1)(f) GDPR — our legitimate interest in the secure and efficient operation of our website.

2.2 Contact Form

Our website provides a contact form through which users can get in touch with us electronically. When a user submits the form, the following data is transmitted to us and stored:

  • Company name
  • Full name
  • Job title
  • Business email address
  • Phone number
  • Country
  • Inquiry type
  • Message content

At the time of submission, the following additional data is also stored:

  • The user’s IP address
  • Date and time of submission

During submission, the user’s consent to the processing of this data is obtained and the user is referred to this Privacy Policy. The same applies to contact made via the email address provided on our website — in that case, the personal data transmitted with the email is stored.

Personal data collected in the course of making contact is used exclusively for the purpose of processing the inquiry. It is not passed on to third parties. Data is deleted as soon as the purpose of storage has been fulfilled and no statutory retention requirements apply.

The legal basis is Art. 6(1)(a) GDPR (consent) and Art. 6(1)(f) GDPR (legitimate interest in responding to business inquiries).

2.3 Analytics

Our website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies to collect anonymised information about how visitors use our website. The information generated is transmitted to and stored on Google servers.

We have enabled IP anonymisation on this website. Your IP address is truncated by Google within the European Union before transmission to Google servers. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and truncated there.

Google uses this information to evaluate the use of our website, to compile reports on website activity, and to provide other services relating to website activity and internet usage. Google may also transfer this information to third parties where required by law, or where third parties process the information on Google’s behalf.

You can prevent Google Analytics from collecting your data by installing the Google Analytics Opt-out Browser Add-on, available at: https://tools.google.com/dlpage/gaoptout

For more information about how Google uses data, please visit: https://policies.google.com/privacy

The legal basis for the use of Google Analytics is Art. 6(1)(f) GDPR — our legitimate interest in understanding website usage in order to improve our content and services.

2.4 Social Media

Our website may include links or plugins for social media platforms including LinkedIn. When you interact with these elements, data may be transmitted to the relevant platform. We use these integrations based on our legitimate interest in marketing and professional networking under Art. 6(1)(f) GDPR.

3. Legal Bases for Processing Personal Data

Where we obtain consent from the data subject for the processing of personal data, Art. 6(1)(a) GDPR serves as the legal basis.

Where processing is necessary for the performance of a contract to which the data subject is party, Art. 6(1)(b) GDPR applies.

Where processing is necessary for compliance with a legal obligation, Art. 6(1)(c) GDPR applies.

Where processing is necessary for the purposes of our legitimate interests — provided these are not overridden by the interests or fundamental rights of the data subject — Art. 6(1)(f) GDPR applies. Our legitimate interests include:

  • Protecting our company from material or reputational damage
  • Improving our services and website
  • Responding to business inquiries

We also process personal data to comply with commercial and tax law retention requirements.

4. Data Retention and Erasure

Personal data is erased or restricted as soon as the purpose for which it was collected no longer applies. Data may be retained for the period during which claims against our company can be asserted under applicable statutes of limitation. Data subject to statutory commercial or tax retention periods is retained for the duration required by law (typically 5 to 10 years under Romanian and EU legislation) and then deleted.

5. Right to Object (Art. 21 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6(1)(e) or (f) GDPR, including profiling based on those provisions. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

To exercise this right, please contact us at: office@suranrecycling.com

6. Rights of the Data Subject

You have the following rights with respect to your personal data, where the applicable legal requirements are met:

  • Right of access — Art. 15 GDPR
  • Right to rectification — Art. 16 GDPR
  • Right to erasure (“right to be forgotten”) — Art. 17 GDPR
  • Right to restriction of processing — Art. 18 GDPR
  • Notification obligation regarding rectification or erasure — Art. 19 GDPR
  • Right to data portability — Art. 20 GDPR
  • Rights in relation to automated individual decision-making, including profiling — Art. 22 GDPR

To exercise any of these rights, please send an email to office@suranrecycling.com. For identification purposes, please note that we process your personal data in accordance with Art. 6(1)(c) GDPR when handling such requests.

7. Right to Withdraw Consent

You have the right to withdraw your declaration of consent under data protection law at any time, with effect for the future. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

8. Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority — in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement — if you consider that the processing of personal data relating to you infringes the GDPR.

The competent supervisory authority for Suran Recycling is:

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP) Blvd. G-ral. Gheorghe Magheru nr. 28-30, Sector 1, 010336 București Phone: +40 318 059 211 Email: anspdcp@dataprotection.ro Website: www.dataprotection.ro

9. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy to reflect changes in our data processing practices or in applicable legislation. The current version is always available on this page. We recommend checking this page periodically.

Last updated: April 2026

 

Contact