Privacy policy
Last updated: 25 October 2026
In the event of any discrepancy, the Romanian version prevails.
1. Who we are
ACME Laser Romania SRL (hereinafter “the Company”, “we” or “the controller”) is a company incorporated in Romania, with its registered office at Str. Giordano Bruno nr. 9, postcode 400243, Cluj-Napoca, Cluj County, Romania, registered with the Romanian Trade Register (Registrul Comerțului) under no. J2025031303003, with the unique registration code (CUI) RO51729544, legally represented by Vaida Adrian.
We operate the acmelaser.ro website and process the personal data of visitors and customers as a data controller within the meaning of Regulation (EU) 2016/679 (GDPR).
Contact details for privacy matters:
- Email: office@acmelaser.ro
- Phone: +40 774 501 662
- Address: Str. Giordano Bruno nr. 9, postcode 400243, Cluj-Napoca, Cluj County, Romania
2. What personal data we process
We process the following categories of personal data:
a) Data you provide to us directly:
- First name and surname
- Company name and job title
- Email address
- Phone number
- Address (for delivery or invoicing, where applicable)
- The content of the messages you send us (contact form, email, quotation request)
- Technical details of your project (material type, thickness, volume, etc.) when you request a quotation
b) Data collected automatically:
- IP address
- Browser type and version
- Operating system
- Page accessed and time of access (in the hosting provider’s technical logs)
- Aggregated visitor statistics (Vercel Web Analytics, cookieless: page, country, device type, traffic source)
- The website does not use first-party cookies or advertising tools (see the Cookie policy)
3. Why we process your data (purposes and lawful bases)
| Purpose | Lawful basis (GDPR) |
|---|---|
| Responding to quotation requests and enquiries; technical support | Art. 6(1)(b) — steps taken at your request before entering into a contract, performance of a contract |
| Sending commercial offers and the newsletter | Art. 6(1)(a) — consent |
| Invoicing, accounting, tax reporting | Art. 6(1)(c) — legal obligation |
| Website security, fraud prevention | Art. 6(1)(f) — legitimate interest |
| Compliance with legal obligations (ANPC — the Romanian consumer protection authority, ANAF — the Romanian tax authority, etc.) | Art. 6(1)(c) — legal obligation |
4. Who we share the data with
Your data may be shared with:
- IT service providers — under data processing agreements compliant with Article 28 GDPR:
- website hosting: Vercel Inc. (USA) — EU-US Data Privacy Framework and standard contractual clauses
- sending the emails from the contact form: Resend (USA) — EU-US Data Privacy Framework and standard contractual clauses
- record of enquiries: Notion Labs, Inc. (USA) — EU-US Data Privacy Framework
- our internal management application
- Couriers and transport companies — solely for delivery (where applicable)
- Our accountant / accounting firm — to meet our tax obligations
- Public authorities — on express request and as provided by law
- Lawyers, auditors — in the event of disputes, audits or inspections
We do not sell or rent your data to third parties for marketing purposes.
5. Transfer of data outside the EU/EEA
Certain providers (e.g. Vercel, Resend, Notion, Google — the map on the Contact page) may process data outside the EU/EEA. In these cases, the transfer takes place on the basis of:
- an adequacy decision of the European Commission (Article 45 GDPR); for the USA, the EU-US Data Privacy Framework (Commission decision of 10 July 2023), under which Vercel, Resend, Notion and Google are certified;
- standard contractual clauses approved by the European Commission (Article 46(2)(c) GDPR), where the provider includes them in its data processing agreement.
6. How long we keep the data
| Data category | Retention period |
|---|---|
| Data from contact forms / quotation requests | 3 years from the last interaction |
| Contract data and invoices | 5 years, counted from 1 July of the year following the end of the financial year in which they were drawn up (Romanian Accounting Law no. 82/1991, Article 25) |
| Marketing data (newsletter) | Until consent is withdrawn |
| Technical logs (IP, access) | Up to 12 months |
| Cookies | As set out in the Cookie policy |
7. Your rights
Under the GDPR, you have the following rights:
- Right of access — to find out what data we hold about you
- Right to rectification — to have inaccurate data corrected
- Right to erasure (“right to be forgotten”)
- Right to restriction of processing
- Right to data portability
- Right to object to processing
- Right not to be subject to automated decision-making
- Right to withdraw your consent at any time
- Right to lodge a complaint with the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), the Romanian data protection authority:
- Web: www.dataprotection.ro
- Address: B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, Bucharest
To exercise any of these rights, write to us at office@acmelaser.ro. We reply within one month.
8. Data security
We apply reasonable technical and organisational measures to protect your data: HTTPS encryption, regular backups, access control, accounts protected by strong passwords, regular staff training.
Nevertheless, no system is 100% secure. In the event of a personal data breach affecting you, we will notify you in accordance with Articles 33–34 GDPR.
9. Children
The website is not intended for anyone under the age of 16 and we do not knowingly collect data about minors. If you become aware that such information has been sent to us, please contact us so that we can delete it.
10. Changes to this policy
We may update this policy from time to time. The current version is always the one published on this page, showing the date of the last update. In the event of significant changes, we will inform you by email or by a notice on the website.