Privacy Policy

01 Introduction

Welcome to the website www.spador.ro.

The protection of personal data is a priority for SPADOR FIRST SRL (hereinafter referred to as the “Company”, the “Controller”, “we” or “SPADOR FIRST”).

This Privacy Policy describes how we collect, use, store and protect your personal data when you use our website or contact us to request information about the services we offer.

We are committed to complying with the provisions of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (“GDPR”), as well as all applicable legal provisions in Romania.

By using this website, you confirm that you have read and understood this Privacy Policy.

02 Data Controller

The data controller is:

For any request regarding the protection of personal data, you may contact us using the details above.

03 Scope of Application

This policy applies to all users of the website www.spador.ro and to all persons who transmit personal data through:

• the contact form;
• e-mail;
• telephone;
• other means of communication available on the website.

04 What Data We Collect

Our website is a presentation website and does not require the creation of a user account.

The data we may collect are exclusively those that you voluntarily provide to us, namely:

• first and last name;
• e-mail address;
• telephone number;
• company (optional);
• position (optional);
• the content of the message sent;
• any other information you choose to communicate to us.

We do not intentionally request data concerning health, religious beliefs, sexual orientation, political opinions or other special categories of data.

If such information is voluntarily provided, it will be treated with a high level of confidentiality and solely to the extent necessary to handle the request.

05 Automatically Collected Data

While browsing the website, certain technical information may be collected automatically, such as:

• IP address;
• browser type;
• operating system;
• date and time of access;
• pages visited;
• session duration;
• information about the device used.

This information is used exclusively for the operation, security and improvement of the website.

06 Purposes of Processing

Personal data are processed for:

• responding to received requests;
• providing the requested information;
• communicating with potential clients;
• scheduling meetings or consultations;
• preparing commercial offers;
• managing the business relationship;
• complying with legal obligations;
• defending the rights and legitimate interests of the company;
• preventing fraud and abusive use of the website.

We do not use your data for profiling and do not make automated decisions that produce legal effects.

07 Legal Basis

The processing of data is based on one or more of the following legal grounds:

• the data subject’s consent;
• taking pre-contractual steps;
• performance of a contract;
• compliance with legal obligations;
• the company’s legitimate interest in responding to requests and carrying out its activities.

08 Retention Period

Data are retained only for the period necessary to fulfil the purposes for which they were collected.

Depending on the nature of the relationship with you, they may be retained:

• until the request is resolved;
• for the duration of the contractual collaboration;
• for the period required by tax and accounting legislation;
• as long as necessary to defend the company’s rights.

Upon expiry of these periods, the data will be deleted or anonymised.

09 Data Recipients

Personal data are not sold and are not transferred for commercial purposes to third parties.

In certain situations they may be disclosed to:

• IT service providers;
• hosting providers;
• e-mail service providers;
• website maintenance providers;
• accountants and consultants;
• lawyers;
• public authorities when required by law.

All our partners are contractually obliged to comply with GDPR requirements.

10 International Transfers

Where IT services provided from outside the European Economic Area are used, the transfer of data is carried out only on the basis of the mechanisms provided for by the GDPR, including the Standard Contractual Clauses approved by the European Commission.

11 Information Security

SPADOR FIRST SRL implements appropriate technical and organisational measures to protect personal data.

These measures include, without limitation:

• encrypted HTTPS connections;
• access control to information;
• secure passwords;
• periodic backups;
• monitoring of IT systems;
• continuous updating of software platforms;
• limiting access to authorised persons only.

Although we make every effort to protect the data, no IT system can guarantee absolute security.

12 Rights of Data Subjects

In accordance with the GDPR, you have the following rights:

• the right to be informed;
• the right of access;
• the right to rectification;
• the right to erasure of data;
• the right to restriction of processing;
• the right to data portability;
• the right to object;
• the right to withdraw consent;
• the right not to be subject to an automated decision;
• the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP).

Requests may be sent to the e-mail address indicated in the “Contact details” section.

13 Cookies

The website uses cookies that are strictly necessary for its operation.

If additional services are implemented (Google Analytics, Google Maps, YouTube, Meta Pixel, reCAPTCHA or similar tools), their use will be governed by a Cookie Policy and, where necessary, by obtaining the user’s consent.

14 External Links

The website may contain links to third-party websites.

We do not control their content and policies and do not assume responsibility for the way they process personal data.

We recommend consulting the privacy policies of each website you access.

15 Confidentiality of Communications

All information transmitted to SPADOR FIRST SRL via the contact form or by e-mail is treated as confidential.

Access to this information is limited exclusively to persons who need it in order to handle your requests.

16 Minors’ Data

The website is not intended for persons under the age of 16.

We do not intentionally collect data belonging to minors.

If we become aware that such information has been collected accidentally, it will be deleted without undue delay.

17 Policy Changes

We reserve the right to amend this Privacy Policy whenever necessary to comply with legislative changes or to adapt to changes in the company’s activities.

The updated version will be published on the website and will take effect from the date of display.

18 Contact

For any questions regarding the protection of personal data or the exercise of the rights granted by the GDPR, you may contact us at:

We will respond to your requests within the time limit provided by applicable legislation.