Personal data protection policy
Last updated: June 2025
1. Data controller
Lang & Sin S.R.L.
Company registration number (CUI): 14948825
Strada Crișului 16, Brașov, Romania
Email: office@langsin.ro
Phone: +40 722 244 273
2. What data we collect and for what purpose
Contact form / quote request
We collect: name, email address, phone number (optional), company name (optional) and the content of the message. Purpose: processing your request for a quote or technical consultation. Legal basis: performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR), and the legitimate interest of the controller (Art. 6(1)(f)).
Direct communication (phone, email, WhatsApp)
If you contact us directly, we process your contact details and the content of the communication in order to respond to the request and maintain the business relationship. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
Google Analytics 4 (web analytics)
With your consent (given through the cookie banner), we use Google Analytics 4 for website usage statistics. The IP address is anonymized. Legal basis: consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time from the Cookie policy.
3. How long we keep the data
Data submitted through the contact form is kept for as long as is necessary to resolve the request, and thereafter for the period required by the applicable tax and accounting legislation (generally 5–10 years for commercial documents), if the request gave rise to a contractual relationship. Data from correspondence with no commercial outcome is deleted or anonymized within 2 years of the last interaction.
4. Who we pass the data to
Your data is not sold or rented to third parties. It may be passed to:
- Google Ireland Limited — through Google Analytics 4, solely with your consent and with an anonymized IP. Google policy
- Formspree Inc. — contact form processing provider, with servers in the EU/USA (the transfer is covered by the Standard Contractual Clauses). Formspree policy
- Vercel Inc. — web hosting provider, for the technical operation of the site.
- Public authorities, where there is a legal obligation.
5. Your rights
Under the GDPR, you have the right to:
- Access — to request a copy of the personal data we hold about you.
- Rectification — to have inaccurate data corrected.
- Erasure — to request deletion of the data, within the limits provided by law.
- Restriction — to restrict processing in certain circumstances.
- Portability — to receive the data in a structured format, where processing is based on consent or on a contract.
- Objection — to object to processing based on legitimate interest.
To exercise any of these rights, contact us at office@langsin.ro. We respond within 30 days.
You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) — www.dataprotection.ro.
6. Data security
The site is delivered exclusively over HTTPS. The contact form is processed through Formspree, which applies appropriate technical and organizational security measures. We do not store personal data locally on the site's servers.
7. Changes to this policy
This policy may be updated from time to time. The date of the last update is shown at the top of the page. We recommend consulting it periodically.