ACO Industrial
ROGet a quote
Legal

Privacy Policy

Last updated: 16 August 2026

1. Data controller

The controller is ACO INDUSTRIAL SRL, Romanian tax ID 36272669, Trade Register number J2016009114402, registered at 10D Radu Vodă Street, Berceni, Ilfov County, 077020, Romania. Contact us through the contact form on the website.

2. What data we collect

  • Form data: name, email address, subject, message and the requested product/service context.
  • Optional data: company and telephone number.
  • Security data: the IP address is used temporarily for rate limiting but is not written to disk in clear text; it is converted to a pseudonymised HMAC identifier.
  • Your external-resource preference, stored in localStorage in your browser.

3. Purposes and legal bases

  • Quotes, service and consulting requests: steps requested before entering into a contract (Art. 6(1)(b) GDPR).
  • General enquiries and B2B correspondence: our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).
  • Spam prevention and security: our legitimate interest in protecting the form and infrastructure (Art. 6(1)(f) GDPR).
  • Google Fonts and YouTube videos: consent (Art. 6(1)(a) GDPR), given or refused separately in the banner.

The contact form does not subscribe you to marketing communications.

4. Required and optional data

Name, email, subject and message are required so that we can identify and answer the request. Company and phone are optional. The form cannot be sent without the required data.

5. Recipients and transfers

Form data is processed on the HostRiver hosting server and delivered to the controller's configured mailbox. Hosting and email providers may process data only to provide their services. If the static fallback version is hosted on Netlify, Netlify may process the form instead of the PHP endpoint. We do not sell or rent personal data.

Google Fonts and YouTube are not contacted before acceptance. After acceptance, Google/YouTube may receive technical data including the IP address and may transfer it outside the EEA under its applicable safeguards. Videos use YouTube's privacy-enhanced youtube-nocookie.com domain.

6. Retention

  • Form correspondence: normally no longer than 24 months after the last communication; if a contract or dispute follows, relevant statutory periods apply.
  • Pseudonymised anti-spam identifiers: an active window of 15 minutes; expired entries are removed when the next request is received.
  • External-resource preference: 183 days, after which your choice is requested again.

7. Cookies and consent control

The public area does not install analytics or marketing cookies. Your Google Fonts and YouTube choice is stored locally in your browser. You can decline without losing the main content and can change or withdraw your choice at any time through “Cookie settings” in the footer. Withdrawal immediately disables external resources on the current page and for subsequent visits.

8. Your rights

Subject to the GDPR, you may request access, rectification, erasure, restriction, portability or object to processing, and may withdraw consent without affecting earlier processing. Contact us through thecontact form. You may also lodge a complaint with theRomanian data protection authority (ANSPDCP).

9. Automated decisions and security

We do not profile visitors or make automated decisions based on contact-form data. The site uses HTTPS, server-side validation, anti-spam controls and keeps sensitive configuration outside the public directory. No technical method can guarantee absolute security.