GDPR Privacy Policy

1. General information

This Privacy Policy describes how SC OGAUS TECHNOLOGY SRL collects, uses, stores and protects the personal data of persons who access the website www.ogaus.com, contact us through the website, by e-mail, by telephone or through other means of communication, as well as the data of representatives of beneficiaries, partners, collaborators or potential clients.

We process personal data lawfully, fairly and transparently, in accordance with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“GDPR”), as well as with the applicable national legislation.

2. Data controller

The personal data controller is:

SC OGAUS TECHNOLOGY SRL
Registered office: Calea Radnei no. 149bis, Arad, Romania
Business office: Strada Pastorului no. 1C, Arad, Romania
VAT no.: RO36296927
Trade Register no.: J02/890/2016
E-mail: office@ogaus.com
Website: www.ogaus.com

3. Personal data we may process

Depending on how you interact with us, we may process the following categories of data:

• Identification and contact data: first name, last name, position, name of the company or institution represented, e-mail address, telephone number and professional address.
• Data submitted through requests: message content, requests for quotation, information about projects, documents or data voluntarily communicated by you.
• Contractual and pre-contractual data: data required for quotations, contracting, contract performance, invoicing and technical, administrative or commercial correspondence.
• Technical data regarding website use: IP address, browser type, device type, operating system, pages accessed, date and time of access and cookie preferences.
• Data collected through cookies or similar technologies: according to the Cookie Policy available on the website.

4. Purposes and legal bases of processing

We process personal data only for specified, explicit and legitimate purposes. The main purposes and legal bases are presented below:

5. Source of the data

In general, data is obtained directly from you when you contact us, submit a request, use the website, send us documents or interact with us within a professional, contractual or pre-contractual relationship. In certain situations, data may also come from the company, institution or organization you represent, from partners involved in a project or from legitimate public sources.

6. Who we may disclose data to

Personal data may be disclosed, when necessary, to the following categories of recipients:

• IT, hosting, website maintenance, e-mail, cybersecurity or electronic storage service providers;
• accounting, tax, legal, consulting, audit or archiving service providers;
• collaborators, consultants, designers, technical reviewers, experts or partners involved in project delivery;
• public authorities, institutions or control bodies, when disclosure is required by law;
• courts, enforcement officers, lawyers or other entities involved in defending the rights and legitimate interests of the company.

7. Transfers of data outside the European Economic Area

As a rule, we aim to process personal data within the European Union or the European Economic Area. If the use of certain providers or technical services involves transferring data outside the European Economic Area, we will take the necessary measures to ensure that the transfer is carried out in accordance with GDPR, through appropriate legal mechanisms such as adequacy decisions, standard contractual clauses or other safeguards provided by the applicable legislation.

8. Cookies and similar technologies

The website www.ogaus.com uses cookies and similar technologies for the proper operation of the website, to remember cookie preferences and, where applicable, for traffic analytics and website improvement.

Essential cookies are necessary for the operation of the website. Non-essential cookies, including analytics cookies, are used only based on your consent where required. Detailed information is available in the Cookie Policy.

9. Data retention period

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or for the period required by applicable legislation.

• data submitted through contact requests or quotation requests is retained for the time necessary to resolve the request and subsequently for a reasonable period, depending on the nature of the communication;
• data related to contractual relationships is retained for the duration of the contract and afterwards according to the applicable legal retention periods for financial-accounting, tax, commercial or technical documents;
• data from professional correspondence may be retained for as long as necessary to manage relationships with beneficiaries, partners or collaborators and to protect the company’s rights;
• technical data and website security logs are retained for limited periods necessary for the operation and security of IT systems;
• data collected through cookies is retained according to the Cookie Policy and the preferences expressed by the user.

10. Rights of data subjects

Under the conditions provided by GDPR, you have the following rights:

• the right of access to personal data;
• the right to rectification of inaccurate or incomplete data;
• the right to erasure of data, in the cases provided by law;
• the right to restriction of processing;
• the right to data portability, where the legal conditions are met;
• the right to object to certain processing activities;
• the right to withdraw consent, where processing is based on consent;
• the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly affects you.

To exercise your rights, you can send us a request at office@ogaus.com, mentioning “Data protection / GDPR”. We will analyse the request and respond within the period provided by the applicable legislation.

11. Right to lodge a complaint

If you believe that the processing of your personal data infringes the applicable legislation, you have the right to lodge a complaint with the competent supervisory authority:

Romanian National Supervisory Authority for Personal Data Processing
Website: www.dataprotection.ro

12. Data security

We apply reasonable technical and organizational measures to protect personal data against unauthorized access, accidental or unlawful loss, destruction, alteration, unauthorized disclosure or other unlawful forms of processing. These measures may include limiting access to data, using secure systems, account access controls and measures to protect electronic communications.

13. Minors’ data

Our website is not intended for minors and we do not intentionally collect children’s personal data. If we identify that we have received such data without an appropriate legal basis, we will take measures to delete it.

14. Automated decision-making

We do not use personal data for decisions based solely on automated processing, including profiling, that produce legal effects concerning the data subject or similarly significantly affect them.

15. Policy updates

This Privacy Policy may be updated periodically, depending on legislative, technical or operational changes. The updated version will be published on this page, indicating the date of the latest update.

16. Contact

For any questions about this Privacy Policy or the way we process personal data, you can contact us at office@ogaus.com.