1. Who we are

This Privacy Policy explains how PGA Electric SRL (“we”, “us”, “our”) collects and processes personal data when you use pgaelectric.ro (the “Site”), contact us, request a quote, purchase our products/services, or otherwise interact with us.

2. Scope

This Policy applies to personal data processed through our Site, emails, contact forms, customer support channels, and—where applicable—order and invoicing systems connected to our services.

3. Categories of personal data we process

Depending on your interaction with us, we may process:
– Identity & contact data: name, company, role, email, phone number, address.
– Account & transaction data (if e‑commerce or client portal): login, order history, invoices, payment status (we do not store full card data; these are handled by payment providers).
– Communications data: messages sent via forms, email threads, call notes.
– Technical & usage data: IP address, device identifiers, browser type/version, pages viewed, time on page, referral URLs, cookie identifiers and similar technologies (see Cookie Policy).
– Marketing preferences: newsletter opt‑ins/opt‑outs, consent records.

4. Purposes and legal bases

We process personal data for the following purposes and under the following GDPR legal bases:
– Provide and improve the Site and services (e.g., respond to inquiries, fulfill orders, deliver projects): performance of a contract and/or legitimate interests (to run our business).
– Customer support & communications: performance of a contract and/or legitimate interests.
– Billing, accounting, and tax compliance: legal obligation.
– Security, fraud prevention, and abuse detection: legitimate interests (to keep our services secure and prevent misuse).
– Analytics and audience measurement: consent (non‑essential cookies/SDKs).
– Marketing communications (email/SMS/ads): consent (you can withdraw at any time) and/or legitimate interests for non‑electronic B2B outreach where permitted by law.

5. Sharing and disclosures

We may share personal data with:
– Processors/Service providers: hosting, email delivery, CRM, analytics, payment and invoicing, logistics/couriers, IT support—each under data processing agreements.
– Professional advisors: accountants, auditors, legal counsel.
– Authorities: where required by law, court order, or to protect rights. We do not sell personal data.

6. International transfers

If we transfer personal data outside the EEA/UK (e.g., to service providers), we will implement appropriate safeguards such as the European Commission’s Standard Contractual Clauses (SCCs) and conduct transfer risk assessments as needed. Details of specific transfers and safeguards are available upon request.

7. Data retention

We retain personal data only as long as necessary for the purposes above, then delete or anonymize it. Typical examples (adapt to your reality):
– Contract and invoicing records: up to 10 years to meet legal/accounting obligations.
– Support correspondence: up to 3 years after resolution.
– Marketing data: until you withdraw consent or after a defined inactivity period [e.g., 24 months].
– Analytics identifiers: see Cookie Policy for specific lifetimes.

8. Your GDPR rights

You have the right to access, rectify, erase, restrict processing, object, and data portability, as well as the right to withdraw consent at any time (without affecting prior lawful processing). You also have the right to lodge a complaint with the Romanian Supervisory Authority (ANSPDCP). We aim to respond within one month. To exercise your rights, contact us at contact@pgaelectric.ro.

9. Children’s data

Our services are not intended for children under 16. We do not knowingly collect personal data from children under this age. If you believe a child provided data to us, please contact us to delete it.

10. Security

We apply appropriate technical and organizational measures—including access controls, encryption in transit, backups, and staff confidentiality—to protect personal data. However, no system is 100% secure.

11. Third‑party sites and plugins

Our Site may contain links to third‑party sites or embed third‑party content (e.g., maps, videos, social widgets). Those providers process data under their own policies.

12. Automated decision‑making

We do not use automated decision‑making producing legal or similarly significant effects about you. If this changes, we will inform you and explain your rights.

13. Changes to this Policy

We may update this Policy from time to time. Material changes will be highlighted on this page, with a new “Last updated” date.

14. Contact

Questions or requests about this Policy: contact@pgaelectric.ro