1. Who we are
SC SM WOOD PRODCOM SRL, headquartered in Floresti, Ferma 9, Hala 8A, 407280, Cluj, VAT no. RO10001186, registered with the Trade Register under J12/2002/1997, is the controller of the personal data collected through the website www.smwoodprodcom.ro.
- Email: s.m.wood.prodcom@outlook.com
- Phone: +40740647877
We do not have a Data Protection Officer (DPO) – we are a small company, and the law does not require us to appoint one. For any request regarding personal data, the contact details above are sufficient.
2. What data we collect and where it comes from
Data you provide directly, through the contact form or quote request:
- First and last name
- Email address
- Phone number
- Your message or request details
Data collected automatically when you visit the website, through Umami Analytics:
- Browser type and operating system
- Device used (desktop, mobile, tablet)
- Pages visited and duration of the visit
- Traffic source (Google, direct link, social media)
- Country of origin – derived from the IP at the time of access, but the IP itself is not stored
- We do not collect IP addresses. Umami Analytics does not use cookies and does not create individual user profiles.
We do not collect sensitive data – health data, ethnic origin, political or religious beliefs.
3. Why we use data and the legal basis
Purpose Legal basis
| Purpose | Legal basis under GDPR |
|---|---|
| Responding to your quote request or technical question | Art. 6(1)(b) GDPR – pre-contractual steps |
| Website traffic analysis through Umami Analytics | GDPR does not apply – Umami does not collect personal data and does not use cookies |
| Legal obligations (accounting, document archiving) | Art. 6(1)(c) GDPR – legal obligation |
4. Who we share data with
We do not sell or transfer your data to anyone for commercial purposes. Data may only be accessed by:
- Hosting provider – servers in the EU or with standard contractual clauses approved by the European Commission
- Umami Analytics – anonymized traffic statistics, no cookies, no personal data stored
- Company accountant – only for financial documents where required by law
- Public authorities – if required by Romanian law (ANAF, courts)
5. Transfers outside the EU
We do not transfer personal data outside the European Union. Umami Analytics does not store personal data, so there is no data transfer within the meaning of the GDPR.
6. How long we keep data
| Data type | Retention period |
|---|---|
| Contact form data, without an order | 2 years from the last communication |
| Data related to orders and contracts | 10 years – legal accounting obligation |
| Umami traffic statistics | Aggregated and anonymized – no personal data included |
Note: When the retention period expires, we delete or anonymize the data.
7. Your rights regarding personal data
Under the GDPR (Art. 15-22), you have the right to:
- Find out what data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of data if there is no longer a legal basis for keeping it
- Restrict processing in certain situations provided by law
- Receive your data in electronic format (portability), if the processing is based on consent
- Object to processing based on our legitimate interest
- Withdraw consent at any time, without affecting what has already been processed on that basis
- How to do this: send an email to s.m.wood.prodcom@outlook.com. We respond within a maximum of 30 days.
If you believe your rights have not been respected, you may file a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP): www.dataprotection.ro
8. Cookies
This website uses only strictly necessary technical cookies for the proper functioning of the pages (session, security). We do not use analytics, marketing or tracking cookies.
For traffic statistics we use Umami Analytics – a tool that does not place any cookie in your browser and does not collect personal data. We do not have a cookie banner because there are no cookies that require your consent.
9. How to withdraw consent
The only consent you may withdraw is the one given through the contact form (if you contacted us and no longer want us to stay in touch). Send us an email at s.m.wood.prodcom@outlook.com and we will delete your data.
10. How we protect data
We use an HTTPS/SSL connection across the entire website. Access to contact data is restricted to the people in the company who need it. Email and hosting accounts are protected by passwords and two-factor authentication.
11. Updates to this policy
If we change anything important in the way we process data, we will update this page. The current version is always the one published on the website.