Website realizat cu finanțare prin Planul Național de Redresare și Reziliență (PNRR) Cu sprijinul Uniunii Europene – NextGenerationEU

Program

08:00 - 16:00

PRIVACY POLICY

Privacy Policy

Last update: 15.07.2025

  • This Policy informs you about how we collect, use, transfer, and protect your personal data through the website styleconstruct.ro.

    We process your data in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC ("General Data Protection Regulation" – GDPR), as well as with relevant national data protection legislation.

    This Privacy Policy clearly explains what data we collect, how we use it, for what purposes, with whom we share it, and your rights concerning the processing of your data.

1. Who we are:

  • With over three decades of experience, STYLE CONSTRUCT SRL (hereinafter referred to as "the Company" or "We") is a benchmark in the construction sector in Romania and a trusted partner for investors and clients nationwide. The Company offers road infrastructure solutions, civil and industrial construction at the highest standards.

    The headquarters is located in Bâcu, Joița commune, Giurgiu County – a suburban area near Bucharest experiencing significant industrial growth.

    Activities within STYLE CONSTRUCT SRL integrate cutting-edge technologies and sustainable practices that support environmental protection and sustainable development in the construction field. The Company operates two modern production facilities equipped with state-of-the-art technology, where it develops projects meeting the highest quality standards.

    At these two production centers, the following are manufactured: cement concrete, road concrete, aggregates, paving blocks, and concrete curbs – all certified and compliant with national and international standards, successfully used in infrastructure projects.

    STYLE CONSTRUCT SRL Contact Details:
    📍Registered office address: Bâcu village, Joița commune, Avicolei Street no. 2, postal code 087151, Giurgiu County, Romania.
    📞📩 Contact: phone +40722.294.127, email: office@styleconstruct.ro and dpo@styleconstruct.ro.

  • The Company, acting as the Data Controller, processes the personal data of the data subjects (potential job applicants, individual/legal entity clients, contractual partners and collaborators, as well as other individuals interacting with or engaged in contractual relationships with the Company).

    Personal data are:
    ‣ processed lawfully, fairly, and transparently towards the data subject;
    ‣ collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes;
    ‣ adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed;
    ‣ accurate and kept up to date;
    ‣ stored in a form that permits identification of data subjects no longer than necessary for the purposes of processing;
    ‣ processed securely to ensure adequate protection against unauthorized or unlawful processing, accidental loss, destruction, or damage, by implementing appropriate technical and organizational measures.

  • TYPES OF DATA COLLECTED:

    Depending on your interactions with STYLE CONSTRUCT SRL (e.g., filling out a contact form, requesting a water-sewer contract, submitting a CV for recruitment, browsing the website, etc.), we may collect the following categories of personal data:

    ‣ Identification and Contact Data: Full name, email address, phone number, and any other data voluntarily provided in the "Message" field of the contact form on the "Contact" page.

    Additionally, personal data such as residential address, identity document series and number, personal identification number (CNP), and other relevant contract-related information (property address connected to the network, owner/tenant status, etc.) may be collected. These are usually requested in applications under the Water-Sewer section → Documents (de exemplu, cereri de încheiere contract, cereri de branșare la rețea, etc.), care se pot descărca de pe website, pentru a fi completate fizic, scanate și transmise prin E-mail către compania noastră, la adresa office@styleconstruct.ro. Identification data may also be collected, such as those found in identity documents (series, number, issuer, date of issue), as well as other relevant information necessary for contract conclusion (address of the connected property, ownership or tenancy status, etc.), based on the documents you provide to us.

    ‣ Professional Data (Recruitment): Information provided in CVs and job application forms (e.g., work experience, education, qualifications, cover letter content). These data are collected when you apply for a vacant position via the Careers section of the website, either by uploading your CV online or sending your application by email.

    ‣Technical and Navigation Data: IP address, cookie identifiers, and other information automatically collected via cookies and similar technologies while browsing our website. This may include browser type, operating system, language preferences, and pages visited. Please refer to our Cookie Policy for details. Note that IP addresses can be considered personal data as they may indirectly identify a user.

    ‣ User Account Data: Our website allows you to create a user account (on the WATER-SEWERAGE page), where your service requests/documents, contracts with the Company, water meter readings, issued invoices, and online payment options are managed. Data collected for account creation include username (or email used as username), email address, password (stored securely and not accessible in plain text), and optional profile information.

    Note: Our website does not directly aim to collect sensitive data (such as health information, religious/political beliefs, or criminal convictions) nor data relating to children under 16 years of age. Please do not provide us with such data through the forms. In the event that we do receive such information, we will treat it confidentially and in accordance with applicable legal provisions.

  • DATA COLLECTION METHODS:

    We primarily collect data directly from you through:

    ‣ Contact and Complaint Forms: When you contact us via the contact form (available on the Contact page) or the customer complaint form (on the Water - Sewerage page), you provide data such as name, surname, phone number, email, and any additional relevant information in the message/complaint field. These data are collected to respond to your inquiries, questions, or complaints and to communicate with you.

    ‣ Service Request Forms: To conclude water-sewer supply contracts or obtain permits (location, connection, authorizations), you are required to fill in specific forms downloadable as PDFs from the Water-Sewerage → Documents section. These forms contain personal data fields as described above. Once completed, forms can be sent via email or submitted physically at our office. We process this data for service requests and contract execution.



    ‣ Job Applications: On the Careers page, you can apply directly online (filling in the application form and optionally uploading a CV) or by sending documents to our indicated email address. We collect your data to evaluate your application and communicate with you during recruitment.

    ‣ Cookies and Similar Technologies: When browsing our site, certain data are collected automatically via cookies stored in your browser. These collect information such as IP address, browsing behavior, visited pages, language preferences, or unique identifiers. For details and options, see our Cookie Policy.

    ‣ Direct Communication: We may also receive your data through other direct communication channels (e.g., phone calls, emails outside the website forms, or physical visits where you fill out paper forms). In such cases, we inform you about data processing at the time of collection (for example, via a GDPR information note in physical or electronic form).

  • We process your personal data only for legitimate and clearly defined purposes, based on a legal ground according to GDPR. Below, we detail the main purposes for which we collect and use your data, along with the corresponding legal bases:

    ‣ Provision of requested services ( Water – Sewerage ➡ Documents ): We collect data from contract conclusion forms, connection requests, permits, etc., to process your application and to conclude/execute a contract for water and sewerage services. For example, we require identification data (name, address, personal numeric code, ID series) to draft the contract and verify eligibility, as well as contact details to communicate service-related information. The legal basis for this processing is the performance of a contract to which the data subject is party or to take steps at their request prior to entering into a contract (Art. 6(1)(b) GDPR). Additionally, in some cases, processing such data may be necessary for compliance with legal obligations (Art. 6(1)(c) GDPR) – for example, retaining contracts and financial data in accounting records, according to financial and tax legislation.

    ‣ Communication with clients and handling requests: The data provided through the contact or customer complaint forms are used to respond to your questions, complaints, technical support requests, or inquiries about our services. The purpose is to ensure effective communication with you and to resolve reported issues. The legal basis for processing these data is our legitimate interest (Art. 6(1)(f) GDPR) to provide customer support and ensure their satisfaction, as well as, where applicable, contract performance (if the request relates to an existing contract) or your consent when you voluntarily complete the form and send us your data (Art. 6(1)(a) GDPR for situations where you contact us on your own initiative without a contractual obligation).

    ‣ Recruitment and personnel selection: The information collected during the job application process (CVs, contact details, information provided in interviews or tests) is processed for recruitment purposes — namely evaluating candidates’ qualifications and skills, organizing interviews, communicating with you throughout the selection process, and actual hiring for the applied position (if applicable). The primary legal basis is the pre-contractual measures taken prior to entering into an employment contract (Art. 6(1)(b) GDPR) — for example, we review your CV at your request (applying for a job is a request from you to enter into an employment contract). When we collect and store your CV for future opportunities or ask for your consent to keep your data in our candidate database, the basis will be your explicit consent (Art. 6(1)(a) GDPR). You may withdraw your consent for data retention at any time, and we will delete your data without affecting the legality of processing carried out prior to withdrawal.

    ‣ Improving services and website experience: Certain browsing data and user feedback may be used to analyze how our website functions, fix potential errors, and enhance the quality of the services provided. For example, we may use traffic analysis tools (such as Google Analytics or others) to understand which pages are most visited and how users interact with the site. This analysis and statistics purpose is based on our legitimate interest to manage and improve the website (Art. 6(1)(f) GDPR). Data used for this purpose are generally aggregated and anonymized so they do not directly identify individuals. When we use non-essential cookies (e.g., traffic analysis cookies) that may involve processing personal data, we obtain visitors’ consent via a cookie banner in compliance with applicable law.

    In all cases, we ensure that we process data legally, fairly, and transparently, only for the declared purposes and only as long as necessary to achieve those purposes. We do not use data in a way incompatible with the original purposes and will request your consent before using them for other purposes (if any arise). Additionally, we do not carry out automated processing aimed at making decisions that significantly affect you, nor do we perform automated profiling without your explicit consent or a legal basis permitted by the GDPR.

  • We store your personal data only for the period necessary to fulfill the purposes for which they were collected or as required by applicable laws. The retention period may vary depending on the nature of the data and the purpose of processing, as follows:
    ‣ Data collected for the conclusion/execution of water and sewerage contracts: will be retained for the duration of the contractual relationship and thereafter according to legal requirements. For example, data from contracts and invoices must be kept for at least 10 years in accordance with financial-accounting legislation. After the legal archiving obligation expires, this data will be securely deleted or anonymized.

    ‣ Data from application/approval forms not resulting in a contract (e.g., you submitted a connection request but did not finalize the contract): we will retain this data for the period necessary to process the request and for a reasonable time thereafter (for example, 1 year) in case you return or the procedure is resumed, after which we will delete the data if no longer needed.

    ‣ Contact details and messages from contact/complaint forms: will be retained as long as necessary to resolve the request/complaint and for an additional period of up to 1–2 years after resolution, to allow reviewing communication history in case of follow-ups or disputes. If the correspondence indicates a need for longer retention (e.g., for defending a right in court), we may keep the relevant data until the situation is definitively resolved.

    ‣ Recruitment data (CVs, job applications): If you are hired, these become part of your personnel file and are subject to internal retention rules (usually for the duration of the contract and thereafter according to legal archiving obligations for human resources). If you are not hired but applied for a job, we will keep your data for the duration of the recruitment process. Afterward, if we do not have your consent to retain them longer, we will delete or anonymize these data within 6-12 months after the recruitment ends (depending on internal policy). If you have given consent for us to keep your CV for future opportunities, the retention period will be as communicated at the time of consent (e.g., 1 year); you can withdraw your consent at any time, in which case we will delete the data earlier.

    ‣ Technical and navigation data (cookies): are stored for the lifespan of the cookies, which may vary. For example, session cookies are deleted when you close your browser, while persistent cookies (e.g., Google Analytics) may remain valid for several months or years unless you delete them earlier. Details about the duration of each cookie used can be found in your browser settings or in the dedicated Cookie Policy. After the applicable storage period expires, we will either securely delete or irreversibly anonymize the data, so that they can no longer be associated with an identified person. We base retention periods both on legal requirements and the data minimization principle — we will not keep data longer than necessary for the declared purposes.

  • We respect your data privacy and do not sell, rent, or disclose your personal data to third parties for direct marketing purposes without your explicit consent. However, in certain situations, we may transfer or grant access to some personal data to third parties—but only under the conditions provided by law and with appropriate confidentiality safeguards:

    ‣ Service providers (processors): We may engage trusted third parties to provide various operational or technical services (e.g., website and database hosting, IT maintenance, email services or newsletter platforms, document archiving or destruction, web traffic analysis, etc.). These third parties act as processors, handling data exclusively on our behalf and following our instructions.
    We ensure that all our service providers are pre-vetted, contractually bound to comply with GDPR data protection requirements, and implement appropriate security measures. By law, any processor is obligated to treat data confidentially and use it strictly for the purposes agreed with us.
    Examples include: the company hosting our web servers may access log data (including IP addresses) for infrastructure management; a recruitment platform provider (if used) may process CVs on our behalf, etc.

    ‣ Public authorities or other entities, in accordance with legal obligations: When we have a legal obligation or receive a legitimate request, we may disclose certain data to state authorities (e.g., law enforcement agencies, public utilities regulators, courts, the National Supervisory Authority for Personal Data Processing, etc.). Additionally, in the context of providing water and sewerage services, we may need to share information with local authorities or institutional partners (e.g., the City Hall or regional water operator) when necessary to serve customers (such as sharing subscriber lists for inspections, reporting water supply data to authorities, or emergency situations). In all these cases, we ensure that there is a legal basis for disclosure and that the request is legitimate.

    ‣ Business transfers: In the unlikely event of a reorganization, merger, acquisition, or other corporate transaction involving the transfer of assets, personal data may be transferred to successor entities. We will ensure that any such transfer respects confidentiality and, where required by law, that data subjects are notified in advance.

  • Normally, we store and process data within the EU/EEA and do not transfer your data to third countries (outside the European Economic Area) in our regular operations. Our servers and IT infrastructure are located within the EU or in countries that ensure an adequate level of data protection. However, if it becomes necessary to transfer personal data to a country outside the EU/EEA (for example, if we use a cloud service provider with servers in the USA), we will carry out this transfer only in compliance with the legal provisions of the GDPR. This means that we will ensure either that the respective country has been recognized by the European Commission as providing an adequate level of protection, or that additional safeguards are implemented (such as standard contractual clauses approved by the European Commission, binding corporate rules, certifications under approved schemes, etc.). We will inform the data subjects prior to any potential transfer and ensure that their data rights and security are properly protected.

    We reiterate that we do not share personal data with third parties except in the situations mentioned above, which are necessary for the operation of our activities or required by law. Under no circumstances will we disclose more data than necessary for the respective purpose, and we will maintain control over the data transmitted to third parties through contractual provisions and technical/organizational measures.

  • Our company has implemented appropriate technical and organizational measures to protect data against unauthorized access, loss, destruction, alteration, or unauthorized disclosure. These measures include, but are not limited to: access control to systems and locations where data is stored (only authorized and trained personnel have access to the necessary information), IT security measures (firewalls, antivirus, encryption for transmitting sensitive data, regular backups), internal privacy policies, and employee training on data protection. Physical documents containing personal data are stored in secure areas (locked filing cabinets, archives accessible only to authorized personnel).

    Additionally, any third parties processing the data (processors) are contractually obligated to ensure an adequate level of security and to protect the confidentiality of the data in accordance with GDPR. We regularly monitor these partners for compliance and their ability to safeguard the information.

    However, you should be aware that no data transmission over the internet is 100% secure. We make significant efforts to protect your data but cannot guarantee absolute security of the data transmitted to our site; any transmission is done at your own risk. Once we receive the data, we apply strict security standards to prevent unauthorized access. In the unlikely event of a security incident (data breach) that may affect your rights and freedoms, we will act in accordance with legal notification obligations (to the Supervisory Authority and/or the data subjects, as applicable) within the deadlines established by the GDPR.

  • As a data subject whose personal data we process, you benefit from all the rights guaranteed by the GDPR. These rights are not absolute and may be subject to certain legal conditions; however, we assure you that you will be able to exercise them. Your rights include, but are not limited to, the following:

    ‣ Right of access – you have the right to obtain confirmation as to whether we process your personal data and, if so, access to such data along with information on how it is processed.

    ‣ Right to rectification – you have the right to request correction or completion of inaccurate or incomplete personal data concerning you to ensure we hold up-to-date and accurate information.

    ‣ Right to erasure (“right to be forgotten”) – in legally defined situations (e.g., if the data is no longer necessary for the purposes collected, you have withdrawn consent and there is no other legal basis for processing, data was processed unlawfully, etc.), you may request deletion of your data from our records. We will comply with your request to the extent that legal conditions are met.

    ‣ Right to restriction of processing – you have the right to request suspension of data processing in certain cases (e.g., you contest the accuracy of the data – we restrict processing during verification; or you object to processing – we restrict while we review your objection; or processing is unlawful but you do not want data deletion, etc.). During restriction, data will be marked as “blocked” and will no longer be actively processed but will be securely stored.

    ‣ Right to object – you have the right to object, for reasons related to your particular situation, to processing based on our legitimate interest. If you exercise this right, we will assess your request and, if our interest does not override your rights and freedoms, we will cease the processing concerned. Objection can be made at any time, free of charge, including for direct marketing processing (currently, such processing only occurs with consent, which you can revoke at any time).

    ‣ Right to data portability – you have the right to receive from us the personal data you have provided, in a structured, commonly used, and machine-readable format, as well as the right to request that these data be transmitted directly to another controller where technically feasible. This right applies only to data provided by you and processed by automated means based on consent or for contract performance.

    ‣ Right to withdraw consent – where processing is based on your consent, you have the right to withdraw it at any time without affecting the lawfulness of processing performed before withdrawal. This right relates, for example, to marketing communications or retaining your CV for future recruitment – you can request that we stop processing your data for these purposes at any time.

    ‣ Right not to be subject to automated individual decision-making – you have the right to request not to be subject to a decision based solely on automated processing (including profiling) which produces legal effects or significantly affects you. We confirm that our company does not use such fully automated decision-making processes that significantly impact you without human intervention.

    ‣ Right to lodge a complaint with a supervisory authority – if you consider that we have violated your rights, please contact us directly so we can address the issue. You also have the right to file a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP – www.dataprotection.ro) or the data protection authority in the EU country where you reside. We will not hinder you from exercising this right and assure you of our full cooperation. Furthermore, you may take your case to the competent courts if necessary.
    All these rights can be exercised free of charge at least once per year (subject to legal conditions). For repeated or manifestly unfounded/excessive requests, we reserve the right to charge a reasonable fee or to refuse the request, in accordance with the GDPR.

  • The company has appointed an external Data Protection Officer (DPO), a service provided by AMPLUSNET SRL – GDPRComplet.

    The designated contact person for data protection matters is Ionel Orza.

    For any request related to the protection of your personal data — whether you wish to access, rectify, or delete your data, object to processing, withdraw your consent, or clarify any concerns — you can contact us at any time through the following means:
    ‣ By email: you can write to us at the dedicated data protection address dpo@styleconstruct.ro
    ‣ By phone: you can contact us at the phone number +40745.508.673 (available on working days, from 08:00 to 16:00) for matters related to your personal data.
    ‣ By mail or in person: you can send a written and signed request to our headquarters at Str. Avicolei no. 2, Bâcu, Giurgiu county, marked “For the attention of the Data Protection Officer.”

    We will confirm receipt of your request and respond substantively without undue delay and, in any case, within one month of receipt, in accordance with GDPR. This period may be extended by an additional two months if necessary (depending on the complexity and number of requests), in which case we will inform you of the reasons for the delay. If we have reasonable doubts about the identity of the requester, we may ask you for additional information to verify your identity (for example, a minimum set of identification data or presentation of an ID), to ensure that data is not disclosed to unauthorized persons

    Additionally, our Data Protection Officer (DPO) is available to assist you with any questions or clarifications regarding this Privacy Policy or how our Company processes your personal data.

  • The Privacy Policy may be updated periodically to reflect any changes in our data processing practices or legal requirements. If we make significant changes, we will publish the revised version on this page and update the “Last updated” date at the beginning of the document. We encourage you to review this policy periodically to stay informed about how we protect your data.

    We will consider that by continuing to use our website and services after any updates come into effect, you have acknowledged the changes. If the updates require obtaining a new consent (for example, if we introduce new processing purposes that require your consent), we will explicitly request it from you.

close menu icon

Formular pentru sesizări clienți

Semnalează o problemă!

Acord GDPR