Privacy policy

1. Who we are

The controller of your personal data is ZAG ELECTRIC S.R.L., tax identification number (CUI) 54240185, Trade Register no. J2026016817007, registered office at 6R Iuliu Maniu Blvd., Building C3, 9th floor, Sector 6, Bucharest, Romania. You can contact us at office@zagelectric.ro or on +40 754 220 701. We have not appointed a data protection officer, as we are not required to; any question about your data can be sent to the same email address.

2. What data we process

• Contact form: your name, email address and message (required) and, if you choose to fill them in, your company, phone number, project type and city or town. Along with the message, the form service records the date and time it was sent, the language of the page and your IP address, from which it derives an approximate location in order to filter out unwanted messages.
• Emails, phone calls and WhatsApp messages you send us directly, with the details you choose to include.
• Technical data when you visit the site: IP address, browser type, requested page, date and time. They are processed automatically by our hosting provider to deliver the pages, protect the site and produce aggregated traffic statistics.

Providing your data is voluntary. Without your name, email address and a description of the project we cannot reply, and the form cannot be sent; the other fields are optional. Please do not send us sensitive data (such as health data or personal identification numbers).

3. Why we process it and on what legal basis

• To answer your request and prepare a quote: steps taken at your request before entering into a contract (Art. 6(1)(b) of Regulation (EU) 2016/679, the “GDPR”). When you write on behalf of a company, our legitimate interest in communicating with clients and partners (Art. 6(1)(f) GDPR).
• To keep the site secure, filter automated messages and see aggregated traffic: our legitimate interest (Art. 6(1)(f) GDPR).
• To meet legal obligations, for example accounting obligations if your request becomes a contract (Art. 6(1)(c) GDPR).

We do not use your data for marketing, and we do not make automated decisions about you.

4. How long we keep it

• Requests that do not lead to a contract: at most 24 months after our last exchange, after which we delete them, both from the form service and from our mailbox.
• If a contract is signed: for the duration of the contract and then for as long as the law requires (for example, under accounting rules and the rules on the quality and warranty of construction work).
• Technical data: for the short periods set by the hosting provider for its security logs.

5. Who receives the data

• Cloudflare, Inc. hosts, delivers and protects the site. It may process data outside the European Economic Area; such transfers rely on the EU–US Data Privacy Framework and the European Commission’s standard contractual clauses.
• Trampoline Software SRL (Formspark, Belgium) receives the contact form and forwards it to us by email. It stores the data in the European Economic Area (Ireland and Germany); a few of its service providers, for example for error reporting, are outside it and are covered by an adequacy decision, standard contractual clauses or the EU–US Data Privacy Framework.
• Microsoft Ireland Operations Ltd. provides our company email (Microsoft 365), where your requests arrive. The data is stored in the European Union; in limited cases (for example technical support or security) Microsoft may access it from outside the EEA, relying on the EU–US Data Privacy Framework and standard contractual clauses.
• WhatsApp Ireland Limited (Meta group), if you message us on WhatsApp: messages pass through the WhatsApp service, which processes them under its own terms and privacy policy and may transfer data outside the EEA.
• Public authorities, only where the law requires us to disclose data.

We do not sell or rent personal data.

6. Cookies and statistics

This site does not use cookies, and it does not load analytics, advertising or social media scripts. The fonts and the office map are served from our own site, so visiting a page does not send data to Google or to other third parties. The Google Maps, Waze and WhatsApp buttons take you to those services, whose own privacy policies then apply. For statistics we use only aggregated server data from Cloudflare and Google Search Console, which shows how the site appears in Google search results; neither runs code in your browser.

7. Your rights

You have the right to access your data, to have it corrected or erased, to restrict its processing and to data portability. To exercise these rights, write to office@zagelectric.ro; we will reply within one month. You also have the right to lodge a complaint with the Romanian data protection authority (ANSPDCP), 28–30 G-ral Gheorghe Magheru Blvd., Sector 1, Bucharest, dataprotection.ro, anspdcp@dataprotection.ro.

Right to object. Where we process your data on the basis of our legitimate interests (for example when you write on behalf of a company, or to keep the site secure), you may object at any time, on grounds relating to your particular situation, by writing to office@zagelectric.ro. We will stop, unless we demonstrate compelling legitimate grounds that override your interests, or the data is needed to establish, exercise or defend legal claims.

8. Security

The site is served only over an encrypted connection (HTTPS). Access to the accounts that manage the site, the form and the company email is restricted to the people who need it.

9. Changes to this policy

We may update this policy when the site or the law changes. The current version is always published on this page, with the date of the last update. The Romanian version of this policy prevails.

Last updated: 20 October 2026