Privacy Policy
Last updated: 15 October 2026.
This policy explains how CORSEM IMPEX S.R.L., with its registered office in Gura Humorului, Str. Orizont nr. 6A, Suceava County, registered with the Trade Register under No. J1993001947333, tax ID (CUI) RO4973970 (“Corsem”, “we”), processes the personal data of visitors to the corsem.ro website and of people who contact us, in accordance with Regulation (EU) 2016/679 (“GDPR”) and Romanian Law No. 190/2018.
1. The data controller
The data controller is CORSEM IMPEX S.R.L. You can contact us with any question about your data by email at [email protected], by phone on 0752 066 023 or by post at Str. Humorului nr. 961, Șcheia, Suceava County. We are not legally required to appoint a data protection officer (DPO); requests are handled by the company's management.
2. What data we process and why
- Contact form: name, company (optional), phone, email, location of the works, subject and your message. Purpose: to reply to you and, where applicable, to prepare a technical and commercial proposal. Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in responding to enquiries (Art. 6(1)(f)).
- Applications (Careers): name, phone, email, location, desired position, experience, the attached CV or a link to the CV, and your message. Purpose: recruitment. Legal basis: steps taken prior to entering into an employment contract (Art. 6(1)(b)) and your consent for unsolicited applications (Art. 6(1)(a)).
- Technical form data: the page from which you submitted the form, the campaign source (if you have accepted analytics/marketing cookies), a cryptographic fingerprint (hash) of your IP address and the browser type. Purpose: preventing abuse and spam, website security. Legal basis: our legitimate interest (Art. 6(1)(f)).
- Commercial communications: only if you have given your separate consent (Art. 6(1)(a)); you may withdraw it at any time.
- Clients and contracts: the data needed to perform the contract and to meet legal obligations (invoicing, accounting, technical documentation of the works) — Art. 6(1)(b) and (c).
3. How long we keep data
- Requests submitted through forms are automatically anonymised after 36 months.
- Applications and CVs are automatically anonymised and deleted, respectively, after 12 months, or earlier at your request.
- Messages automatically flagged as spam are deleted after 30 days.
- Accounting documents and documents relating to the works carried out are kept for the period required by law.
4. Who we share data with
We do not sell or rent your data. It may be accessed, strictly to the extent necessary, by our service providers (website hosting, email service), who act as processors under a contract, and by the authorities where the law requires us to disclose it. We do not transfer data outside the European Economic Area; should a provider do so, we ensure that the safeguards provided for by the GDPR are in place (for example, standard contractual clauses).
5. How we protect data
The website uses an encrypted connection (HTTPS). Requests are stored in a database accessible only to authorised staff, with secure authentication (with the option of two-step authentication); attached files (CVs) are stored in an area that is not publicly accessible and can only be downloaded from the administration panel. Notification emails do not contain the attached CV.
6. Your rights
You have the right of access, rectification, erasure (“the right to be forgotten”), restriction of processing, data portability and objection, and the right to withdraw your consent, without affecting the lawfulness of processing carried out before withdrawal. To exercise your rights, write to us at [email protected]; we will reply within one month at the latest.
If you consider that your rights have been infringed, you may lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru nr. 28-30, sector 1, București, www.dataprotection.ro.
7. Traffic statistics
To understand how the website is used (pages visited, where visits come from, device type, country), we use our own statistics system, hosted on our server, without cookies and without storing any other information on your device. Your IP address and browser details are only used to calculate an anonymous code that is valid for a single day, and they are not stored. The data is aggregated, is not shared with third parties and is kept for at most 25 months. The legal basis is our legitimate interest in improving the website (Art. 6(1)(f) GDPR). If your browser sends the Global Privacy Control signal, your visit is not recorded.
8. Cookies
Details about cookies and how you can change your choice can be found in the Cookies Policy.
9. Changes
We may update this policy; the version in force is always the one published on this page, with the date of the last update.