1. Data Controller
The data controller for personal data collected through this website is:
TRADE CORP S.R.L.
str. Marului, no. 12/2, Sângeorgiu de Mureș, Mureș, Romania, 547530
CIF/CUI: RO48857330
GDPR contact: gdpr@trade-corp.ro
2. Scope of This Policy
This Privacy Policy explains how Trade Corp S.R.L. ("we", "us", "our") collects, uses, stores, and protects personal data when you visit our website at https://trade-corp.ro or submit an enquiry via our contact form. It applies to all users of the website, regardless of their location.
3. Legal Basis for Processing
We process personal data on the following legal bases, as provided for under the General Data Protection Regulation (EU) 2016/679 ("GDPR"):
- Legitimate interests (Art. 6(1)(f) GDPR) — for operating the website and responding to business enquiries;
- Consent (Art. 6(1)(a) GDPR) — for analytics cookies and the processing of contact form data, where explicitly given;
- Legal obligation (Art. 6(1)(c) GDPR) — where required by applicable law.
4. Personal Data We Collect
We collect the following categories of personal data:
- Contact form submissions: company name, full name, work email address, country, and the content of your message;
- Technical data: IP address, browser type, operating system, referring URL, and pages visited — collected automatically when you access the website;
- Analytics data (with consent only): aggregated, anonymised usage data via Google Analytics 4, including session duration, page views, and device information;
- Cookie preference data: your consent choices, stored in your browser's localStorage.
5. How We Use Your Data
- To respond to business enquiries submitted via the contact form;
- To protect the website against spam and malicious automated submissions (honeypot, rate limiting, hCaptcha verification);
- To analyse website traffic and user behaviour in aggregate form, for the purpose of improving our website (analytics cookies, only with consent);
- To comply with legal and regulatory obligations.
We do not use your personal data for automated decision-making or profiling.
6. Data Retention
- Contact form submissions: retained in our email inbox for up to 24 months from the date of receipt, or until the business relationship concludes, whichever is later;
- Analytics data: retained by Google Analytics for 14 months (our configured retention period);
- Rate limiting logs: IP-based log files used for spam prevention are retained for up to 24 hours and then deleted automatically;
- Cookie consent records: stored in your browser until cleared, up to 12 months.
7. Data Sharing and Third Parties
We do not sell, rent, or trade your personal data. We share data with the following categories of third parties, only where necessary:
- Hosting provider: Hostinger International Ltd., which provides the server infrastructure for this website. Data may be processed within the European Economic Area (EEA);
- Google LLC (Google Analytics 4): only when you have given explicit consent to analytics cookies. Google Analytics is configured with IP anonymisation enabled. For more information, see Google's Privacy Policy;
- Intuition Machines, Inc. (hCaptcha): the hCaptcha anti-bot service processes data submitted via our contact form. See the hCaptcha Privacy Policy.
Where data is transferred outside the EEA, we ensure appropriate safeguards are in place in accordance with Chapter V of the GDPR (e.g., Standard Contractual Clauses).
8. Your Rights Under GDPR
If you are located in the European Economic Area, you have the following rights regarding your personal data:
- Right of access (Art. 15) — to obtain a copy of the personal data we hold about you;
- Right to rectification (Art. 16) — to request correction of inaccurate data;
- Right to erasure (Art. 17) — to request deletion of your data, subject to legal obligations;
- Right to restriction (Art. 18) — to request that we restrict processing of your data;
- Right to data portability (Art. 20) — to receive your data in a structured, machine-readable format;
- Right to object (Art. 21) — to object to processing based on legitimate interests;
- Right to withdraw consent (Art. 7(3)) — where processing is based on consent, you may withdraw it at any time without affecting lawfulness of prior processing.
To exercise any of these rights, please contact us at gdpr@trade-corp.ro with a description of your request. We will respond within 30 days. You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) at www.dataprotection.ro, or with the supervisory authority in your country of residence.
9. Cookies
We use cookies and similar technologies on this website. For detailed information about the cookies we use, their purpose, and how to manage your preferences, please read our Cookie Policy.
10. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include SSL/TLS encryption for data in transit, access controls, and server-side validation of all form submissions. However, no method of transmission over the internet is 100% secure.
11. Children's Privacy
This website is directed exclusively at business professionals. We do not knowingly collect personal data from individuals under the age of 16. If you believe we have inadvertently collected such data, please contact us immediately at gdpr@trade-corp.ro.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will indicate the date of the most recent revision at the top of this page. We encourage you to review this policy periodically.
13. Contact
For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact our GDPR representative:
TRADE CORP S.R.L. — GDPR Contact
str. Marului, no. 12/2, Sângeorgiu de Mureș, Mureș, Romania, 547530
Email: gdpr@trade-corp.ro