Privacy Policy and Personal Data Protection

What is GDPR?

GDPR (General Data Protection Regulation) is a binding legislative act designed to protect individuals with regard to the processing and free movement of their personal data. It establishes new rights and strengthens existing ones under Directive 95/46/EC, which was repealed on May 25, 2018. Any organization that collects or processes personal data must comply with these new requirements and transparently inform individuals about how their data is used.

Why do we process your data?

Your personal data (name, surname, email address, phone number, address) is processed solely for the purpose for which it was collected — to successfully manage our relationship with you, such as sales, delivery, communication, notifications, and promotion of our products and services. Any data processing for purposes other than those stated below will be performed only with your prior consent.

What categories of data do we process and when are they collected?

Personal data such as your name, surname, phone number, email address, or physical address is processed by Buzesti Office only if you enter it in designated fields on the website or send it to us by email.

Newsletter data:

By ticking the corresponding box, you consent to periodically receiving direct marketing messages from us. Through these communications, we send information about our newest products and services, special offers, and promotional campaigns. Although we wish to keep you informed, you can unsubscribe at any time by clicking the “Unsubscribe” button or by sending an email to our contact address.

Additional data required for the sales process:

Personal data collected and stored will be processed to fulfill contracts and respond to your requests. After your request, sale, or contract is completed, your data will be retained according to legal and fiscal requirements, or as long as necessary to protect the operator’s rights.

Data collected through the contact form:

The minimum information you must provide includes: name, email address, phone number, and of course, your message. By completing and submitting the form, you consent to us collecting and using this data to respond to your inquiry.

What is the legal basis for processing this data?

The legal basis for collecting, processing, and storing this data is our legitimate interest in ensuring the proper functionality of our website, executing a contract or responding to your request, our commercial interest when you purchase our products, and your consent when you register your information.

Your rights under GDPR

Definitions:

“Personal data” means any information relating to an identified or identifiable natural person (“data subject”). An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.

“Processing” means any operation performed on personal data, whether by automated means or not — such as collection, recording, organization, storage, adaptation, consultation, use, disclosure, restriction, erasure, or destruction.

“Controller” means the entity that determines the purposes and means of the processing of personal data.

Your rights

Under GDPR, you are entitled to several rights regarding your personal data:

• Right of access — to know if we process your data and to obtain a copy of it;

• Right to data portability — to receive your personal data in a structured, machine-readable format or transfer it directly to another controller;

• Right to object — to the processing of your data based on our legitimate interest;

• Right to rectification — to correct inaccurate data without undue delay;

• Right to erasure (“right to be forgotten”) — to request deletion of your data when it is no longer necessary, consent is withdrawn, or processing is unlawful;

• Right to restriction — to limit processing under specific circumstances, such as contesting data accuracy or pending a legal claim.

Response time

We will respond to your request within 30 days from receipt, as required by GDPR. If needed, this period may be extended by up to two additional months depending on the complexity and number of requests, and you will be informed accordingly.

Data sharing with third parties

1. For newsletter services, Buzesti Office uses the Brevo.com platform (France), which complies with EU GDPR standards. Their privacy policy can be found here: https://www.brevo.com/gdpr/

2. Our marketing agency partner, Smart Focus Consulting SRL (based in Cluj-Napoca, Romania), manages client inquiries and online campaigns. They access cookie data for ad optimization via Google and Facebook. No personal data is stored on their own servers; it is secured on Google’s infrastructure (GDPR compliant). Details: https://business.safety.google/compliance.

Data disclosure to authorities

Buzesti Office discloses personal data to public authorities, courts, or law enforcement only when required by law.

Social media

Our website uses plugins from social networks (Facebook, Instagram) to connect our website with our official accounts. We do not collect personal data through these plugins.

Google Analytics / Google Ads

Our website uses Google Analytics and Google Ads to analyze visitor behavior and improve online visibility. Your anonymized IP address may be processed by Google on our behalf for statistical reporting. This data is not associated with any other personal information.

You can refuse cookies or install the free Google Analytics Opt-out Browser Add-on. Please note that these settings will affect all websites you visit, not just ours.

Thank you for taking the time to read our Privacy Policy. By submitting your personal data on our website, you consent to its collection and processing by Buzesti Office under this policy and in compliance with GDPR.

Privacy Policy Updates

Buzesti Office may update this Privacy Policy in accordance with EU Regulation 679/2016 (GDPR). We have implemented physical, electronic, and managerial procedures to safeguard and secure the information we collect online.