Privacy policy (GDPR)

The controller of your data is SC PROMO PLUS SRL, with its registered office in Suceava, str. Lt. Nicolae Catanescu Nr. 7, VAT no. RO3903674, J33/782/1993. For any question about your data you can write to us at [email protected].

We only process data you give us directly or that results from using the site:

• Identification and contact data — name, email address, phone number, the company you represent — when you send us a message through the contact form or a quote request.
• Your email address — when you subscribe to the newsletter.
• Technical data — IP address, browser type, pages visited — collected automatically for the operation and security of the site.

• Answering messages and quote requests — based on pre-contractual steps taken at your request (art. 6(1)(b) GDPR).
• Running the commercial relationship with partners — based on contract performance and legal invoicing and archiving obligations (art. 6(1)(b) and (c)).
• Sending the newsletter — based on your consent, which you can withdraw at any time using the unsubscribe form in the site footer (art. 6(1)(a)).
• Operating and securing the website — based on our legitimate interest in keeping the site available and protected (art. 6(1)(f)).

• Messages and quote requests — as long as needed to answer you and afterwards for at most 3 years, the general limitation period.
• Financial and accounting documents — for the statutory archiving periods (currently 5 years for supporting documents).
• Newsletter addresses — until you unsubscribe.
• Technical logs — short periods, normally under 12 months.

We do not sell or rent your data. We may share it only with the providers who help us run the site and the business (web hosting, email services, accounting, couriers), under contract and only to the extent necessary, and with public authorities where the law requires it. The data is not transferred outside the European Economic Area.

Under the GDPR you have the following rights, which you can exercise by writing to [email protected]:

• The right to access your data and receive a copy of it.
• The right to have inaccurate or incomplete data rectified.
• The right to erasure (“the right to be forgotten”), under the conditions of art. 17 GDPR.
• The right to restrict processing.
• The right to data portability.
• The right to object to processing based on legitimate interest.
• The right to withdraw your consent at any time, without affecting prior processing.

We answer requests within one month. If you consider that your rights have been infringed, you may lodge a complaint with the Romanian supervisory authority (ANSPDCP) — dataprotection.ro.

We apply appropriate technical and organisational measures to protect the data: encrypted connection (HTTPS), need-to-know access to data, system updates and staff training.

This site uses cookies and equivalent technologies (localStorage). The strictly necessary ones — the language you chose and your choice in the consent banner — work without your agreement, because without them the site cannot do what you asked of it; the legal ground is Art. 5(3) of the ePrivacy Directive, transposed in Romania by Law 506/2004.

Everything else loads only if you accept it. Nothing in the Analytics or Marketing categories starts before you press “Accept all” or tick that category in the banner. The legal ground is your consent — GDPR Art. 6(1)(a) — and you can withdraw it as easily as you gave it.

• pp-locale and promoplus-cookie-consent — strictly necessary. They remember the language you are reading the site in and your choice in the cookie banner. No consent required, and they cannot be switched off in the banner.
• Google Tag Manager (container GTM-PWCHKNS) — loads on every visit, but starts in the “consent denied” state. Until you accept, Google's tags write and read no cookie and transmit no identifier of yours, and the requests are additionally stripped of advertising identifiers (ads_data_redaction).
• Google Analytics 4 — the _ga and _ga_<ID> cookies, up to 2 years. Analytics category. Tells us how many visitors we have and which pages and products are being looked for.
• Google Ads — the _gcl_au and _gcl_aw cookies, up to 90 days. Marketing category. Campaign measurement and remarketing.
• Meta (Facebook) pixel 3181873308496936 — the _fbp and fr cookies, up to 90 days. Marketing category. The Meta script (connect.facebook.net) is not downloaded at all before you accept, and if you decline, no request is made to Meta's servers.

Once you accept it, the Meta pixel transmits the page you opened, the catalogue category or product you viewed, the term you searched for on the site, and the fact that you submitted the contact form or clicked the phone number or e-mail address. This site has no cart, no online payment, and never asks for card details, so no amounts, orders or payment data are transmitted.

If you accept the Analytics or Marketing category, browsing data (the page visited, your IP address, browser and device type, and the events described above) is received by Google Ireland Limited and by Meta Platforms Ireland Limited respectively, which also process it for their own advertising and measurement purposes. Both may transfer the data to the United States under the EU-US Data Privacy Framework and the standard contractual clauses approved by the European Commission.

Apart from these two providers and the company hosting the site, we pass your browsing data to no one, and we do not sell it.

Your choice is stored locally, in your own browser, and you can change it at any time from the cookie banner. Withdrawal takes effect immediately, without reloading the page: Google's tags switch to the “denied” state at once and stop using any information stored on your device.

With Meta there is a technical limit we would rather state than hide: a script already loaded into the open page cannot be removed from it by the browser. It does receive the revoke instruction immediately and stops sending anything, and on the next page load it does not appear at all. Cookies written up to that point can be deleted from your browser settings.

You can also configure your browser to block or delete cookies (Chrome, Firefox, Safari and Edge each publish their own guide). Note that if you block the strictly necessary cookies as well, the site can no longer remember your chosen language or your banner choice, so the banner will reappear on every visit. For Google Analytics there is also an opt-out browser add-on, published by Google at tools.google.com/dlpage/gaoptout.

We may revise this policy when legislation or the way we process data changes. The current version, with its update date, is always published on this page.