In short: this website uses no cookies, has no forms and does not track you. We only process the data you send us when you get in touch, so we can reply and give you a quote. We never sell your data.
01Who we are
This website is run by OTR Industries SRL, which is also the controller of your personal data under Regulation (EU) 2016/679 (GDPR).
- Company
- OTR Industries SRL
- Tax ID (CUI)
- 54130344
- Trade Register no.
- J2026013819006
- [email protected]
- Phone
- 0750 480 699
For any question about your data, write to us at the e-mail address above. We have not appointed a data protection officer (DPO), as our activity does not require one.
02What this website does
otr-industries.ro is a static presentation website. In practice this means that:
- it has no contact forms, user accounts or logged-in areas;
- it does not use cookies and does not store anything in your browser;
- it does not use traffic analytics (such as Google Analytics), tracking pixels or advertising;
- fonts, images and animations are hosted on the same server as the website, so loading a page does not send data to other companies.
Your data only reaches us if you contact us yourself, by phone, e-mail or WhatsApp.
03What data we process and why
When you contact us
If you call us, e-mail us or message us on WhatsApp, we process the data you send: your name, phone number, e-mail address, the content of your message and details about the job (for example the location, address and type of work, and photos of the site if you send them).
- Purpose: to reply to you, prepare a quote and, if we work together, to plan and carry out the work.
- Legal basis: Art. 6(1)(b) GDPR, i.e. steps taken at your request before entering into a contract, and performance of the contract; for other correspondence, Art. 6(1)(f) GDPR, our legitimate interest in replying to the messages we receive.
When you become a customer
We process the data needed for invoicing and accounting records (for example your name or company name, address and tax ID) to comply with our legal tax and accounting obligations, under Art. 6(1)(c) GDPR.
When you visit the website
Like any web server, the server hosting this website may automatically record, in technical logs, your IP address, the date and time of access, the page requested and the browser type. This data is used only to run and secure the website (for example to prevent attacks), based on legitimate interest (Art. 6(1)(f) GDPR). We do not use it to identify you or to build profiles.
We do not make automated decisions or carry out profiling based on your data.
05Links and external services
- WhatsApp: the “WhatsApp” buttons open the WhatsApp app, operated by WhatsApp Ireland Limited (Meta group). Messages sent this way are also processed by WhatsApp, under its own privacy policy.
- Phone and e-mail: the call and e-mail links open the apps on your device; the communication goes through your phone operator and e-mail provider.
- ANPC: the ANPC – SAL link leads to the website of the Romanian National Authority for Consumer Protection, which has its own privacy policy.
We are not responsible for how these external websites and services process data.
06Who we share data with
We do not sell or rent your data. Only the people in our company who handle your request have access to it and, where necessary, suppliers who help us operate:
- our website hosting provider and e-mail provider;
- our phone operator;
- our accountant or accounting firm, for tax documents;
- public authorities, only when the law requires it.
As a rule, data is processed within the European Union. If you choose to message us on WhatsApp, your data may be transferred outside the European Economic Area by Meta, based on the safeguards it applies.
07How long we keep data
- Enquiries that do not become a contract: no more than 12 months after the last contact, after which we delete them.
- Job and customer data: for the duration of our work together and as long as needed for warranties and possible claims.
- Accounting records and invoices: for the period required by financial and accounting law.
- Server technical logs: for a short period, according to the hosting provider’s settings.
08Your rights
Under the GDPR you have the right:
- to find out what data we hold about you and to receive a copy (right of access);
- to have inaccurate or incomplete data corrected;
- to have your data erased when we no longer have a legal reason to keep it;
- to ask us to restrict processing;
- to receive your data in a structured format or have it sent to someone else (portability);
- to object to processing based on our legitimate interest.
For any of these requests, write to us at [email protected]. We will reply without undue delay and within one month of receiving your request. We may ask for additional information to confirm your identity.
If you believe we process your data unlawfully, you can lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP): www.dataprotection.ro, [email protected]. We would appreciate it if you contacted us first, so we can try to resolve the issue directly.
09Security
We take reasonable technical and organisational measures to protect data against unauthorised access, loss or alteration: access limited to the people who need it, protected passwords and devices, and trusted suppliers. However, no transmission over the internet is completely secure, so we recommend not sending us sensitive information by e-mail or WhatsApp unless it is needed for the job.
10Changes to this policy
We may update this policy when the website, our services or the law change. The version in force is always the one published on this page, and the date of the last update is shown at the top.