Privacy Policy
Data controller: CORINA PLAST SRL, VAT ID RO27778730, Trade Register no. J2022000238362, registered office: 2B Morarilor Rd., Bucharest, Romania; business address: 32 Republicii Blvd., Alba Iulia, Alba County, Romania. Data protection contact: office@inchirieriutilaje.ro, phone +40 744 66 77 33.
We process your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Romanian law. This policy explains what data we collect, why, how long we keep it and what rights you have.
1. What data we collect and why
| Purpose | Data | Legal basis |
|---|---|---|
| Booking and renting machines | first and last name, email, phone, job-site address, billing details (including company name and VAT ID) | performance of a contract — Art. 6(1)(b) |
| Invoicing and accounting records | identification and billing data, order history | legal obligation — Art. 6(1)(c) |
| Customer account (optional) | email, password (encrypted), saved addresses | consent / performance of a contract |
| Answering requests (form, phone, email) | name, contact details, message content | consent — Art. 6(1)(a) |
| Website usage statistics | browsing data, cookie identifiers | consent (cookie banner) |
| Website security and fraud prevention | IP address, access logs | legitimate interest — Art. 6(1)(f) |
2. How long we keep the data
- Financial and accounting documents (invoices, contracts): 10 years, as required by Romanian Accounting Law no. 82/1991.
- Bookings and order history: for the duration of the contractual relationship and 3 years afterwards, for possible claims (general limitation period).
- Customer account: until you delete the account.
- Requests by form or email: up to 2 years after the last interaction.
- Access logs: up to 12 months.
- Cookies: as listed in the Cookie Policy.
3. Who we share the data with
We do not sell or rent your data. We disclose it only where necessary:
- our web hosting and platform maintenance providers (processors, under a data processing agreement);
- our accountants and the company ERP system, for invoicing;
- the payment processor (if you pay online) — we have no access to your full card details;
- Google (reCAPTCHA), on the sign-in, account creation and password reset pages: to tell real visitors from bots and prevent abusive access to accounts, Google receives technical information about the visit (for example the IP address, browser type and how you interact with the page). The legal basis is our legitimate interest in protecting accounts and the website. Google's Privacy Policy and Terms apply;
- the transport company, if you choose delivery of the machine to your site;
- public authorities, at their request and as provided by law (tax authority, courts etc.).
4. Transfers outside the EU
Data is stored on servers in the European Union. If we use services involving transfers outside the EU/EEA (for example traffic analytics tools, only with your consent), these take place only under the safeguards provided by the GDPR (standard contractual clauses or an adequacy decision).
5. Children
Our services are intended only for persons over 18. We do not knowingly collect data from minors. If you learn that a minor has given us data, contact us and we will delete it.
6. Your rights
Under the GDPR you have the right to: access your data; rectification; erasure ("the right to be forgotten"); restriction of processing; data portability; object to processing based on legitimate interest or for direct marketing; withdraw consent at any time (without affecting the lawfulness of earlier processing); and not to be subject to an automated decision.
To exercise your rights, write to office@inchirieriutilaje.ro. We reply within 30 days.
7. Right to lodge a complaint
If you believe your rights have been infringed, you may lodge a complaint with the Romanian data protection authority, Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP): 28-30 G-ral. Gheorghe Magheru Blvd., Sector 1, Bucharest, phone +40.318.059.211, www.dataprotection.ro. You may also go to the competent courts.
8. Data security
We use encrypted connections (HTTPS), role-based access, encrypted password storage and regular backups. Even so, no transmission over the internet is 100% secure.
9. Changes to this policy
We may update this policy. The version in force is the one published on this page, with the date of the last update below. The Romanian version prevails in case of discrepancy.
Last updated: 24.09.2026.