Privacy Policy

1. Data controller

The personal data controller is:

• Name: SUPREMIUM GENESIS S.R.L.
• VAT ID: RO37752002 · Trade Register: J40/9179/2017
• Registered office: B-dul Unirii 25-27, Bucharest, Romania
• Legal representative: Mihaela Margareta Alexandrescu, Administrator

For any request regarding your personal data you can contact us at office@websem.ro.

2. What data we collect

Data you provide directly via the contact form: name, email address and, optionally, company, website and the content of your message.

Technical and usage data collected automatically (IP address, browser and device type, pages visited, referral source) through analytics tools — only after your consent given through the cookie banner.

We do not intentionally collect special categories of data (sensitive data) and we do not address minors under 16.

3. Purposes and legal basis

We process data for the following purposes and legal bases:

• Responding to requests and sending offers — pre-contractual measures and contract performance (Art. 6(1)(b) GDPR).
• Commercial communications, if you subscribed — consent (Art. 6(1)(a) GDPR).
• Traffic analysis and site improvement — legitimate interest, and consent for analytics cookies (Art. 6(1)(f) and (a) GDPR).
• Compliance with legal obligations (tax, accounting) — legal obligation (Art. 6(1)(c) GDPR).

4. How long we keep data

• Contact form data: for as long as necessary to handle your request and any commercial relationship, then a maximum of 3 years from the last contact.
• Data for commercial communications: until you withdraw consent.
• Documents with tax/accounting relevance: per legal retention periods (up to 10 years).
• Analytics data: per the analytics tool's settings (Google Analytics 4).

5. Who we share data with

We do not sell your data. We may only disclose it to providers who help us operate the site, acting as processors:

• Resend — delivery of emails sent via the form;
• Google Analytics 4 — anonymous traffic analysis;
• Vercel Inc. (USA) — web hosting and infrastructure.

They process the data strictly under our instructions.

6. International transfers

Some providers may process data outside the European Economic Area (e.g. in the US, such as Vercel or Google). In such cases, the transfer is carried out under appropriate safeguards — standard contractual clauses approved by the European Commission or adequacy decisions.

7. Your rights

As a data subject, you have the following rights:

• the right of access;
• the right to rectification;
• the right to erasure (“the right to be forgotten”);
• the right to restriction of processing;
• the right to data portability;
• the right to object;
• the right to withdraw your consent at any time, without affecting the lawfulness of prior processing;
• the right not to be subject to a decision based solely on automated processing.

You can exercise these rights by writing to office@websem.ro. We respond within a maximum of 30 days.

8. Right to lodge a complaint

If you consider that the processing of your data infringes the GDPR, you have the right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP):

• Address: B-dul G-ral. Gheorghe Magheru no. 28-30, District 1, postal code 010336, Bucharest;
• Email: anspdcp@dataprotection.ro · Web: www.dataprotection.ro · Phone: +40 318 059 211.

9. Data security

We apply reasonable technical and organizational measures to protect data against unauthorized access, loss or destruction: encrypted HTTPS connections, access control and GDPR-compliant providers.

10. Changes

We may update this policy. The applicable version is the one published on this page, with the last-updated date shown in the header.