This policy explains what personal data we collect through the alfasmt.com website, for what purpose, on what legal basis, and what rights you have. We process data in accordance with Regulation (EU) 2016/679 (GDPR). Last updated: July 2026.
1. Who we are (data controller)
The data controller is Alfa SMT S.R.L., headquartered in Timișoara, Romania, registered with the Trade Register under no. J2026025280001, fiscal code RO54499075. For any question about your data, contact us at office@alfasmt.com.
2. What data we collect
We only collect the data you provide and the minimum needed to run the website:
- Via the contact form: name, email address, phone (optional), company, country, and the subject and content of your message.
- Minimal technical data generated automatically by the hosting server (e.g. IP address, browser type) in security logs.
- Your preferences (cookie-notice choice and light/dark theme), stored locally in your browser.
We do not collect special categories of data and do not build marketing profiles through this site.
3. Purpose and legal basis
- To respond to requests sent through the form and to contact you — basis: your consent and/or steps taken at your request prior to entering into a contract (Art. 6(1)(a) and (b) GDPR).
- For the security, operation and maintenance of the website — basis: our legitimate interest (Art. 6(1)(f)).
4. Cookies and third-party content
The site is privacy-friendly: we use no analytics, advertising or tracking cookies.
- In your browser’s local storage we keep only your cookie-notice choice and theme preference — these never leave your device and do not track you.
- Some pages embed YouTube (Google) videos. On playback, YouTube may set its own cookies; we use the "no-cookie" mode (youtube-nocookie) where possible.
- The map on the Contact page uses OpenStreetMap; "Open in Google Maps" is a plain link.
5. Who we share data with
We do not sell or rent your data. We disclose it only to providers who help us operate the site, acting as processors:
- Web and email hosting: Hetzner (Germany, EU) — including the mail server we use to send confirmations and notifications.
- YouTube / Google — for embedded videos.
We may also disclose data to public authorities where required by law.
6. Transfers outside the EU
Data is processed mainly within the European Union / EEA. Google services (YouTube) may involve transfers outside the EEA, carried out under the standard contractual clauses approved by the European Commission.
7. How long we keep data
We keep messages received through the form for as long as needed to handle your request and manage our relationship, generally no longer than 24 months from the last contact, after which we delete or anonymise them. Technical logs are kept for a short period for security.
8. Your rights
Under the GDPR you have the right of access, rectification, erasure ("right to be forgotten"), restriction of processing, objection, and portability, as well as the right to withdraw consent at any time. You can exercise these rights by writing to office@alfasmt.com.
You also have the right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP) — www.dataprotection.ro.
9. Security
We apply reasonable technical and organisational measures to protect data against unauthorised access, loss or disclosure.
10. Changes to this policy
We may update this policy; the version that applies is the one published on this page, with the last-updated date shown above.