1. Introduction
The website https://www.vreauleaduri.ro/, referred to below as “the site” or “the platform,” is operated by Loktar Ogar MH SRL (“Loktar Ogar”), which provides lead-generation, sales process development and implementation, and sales consulting services. Generally, Loktar Ogar works with legal entities, in which case the data collected does not fall under GDPR. However, if our services are accessed by individuals (natural persons), this policy applies.
This privacy policy informs you about Loktar Ogar’s processing of your personal data, either directly or via partners, as part of your relationship as a consumer and “data subject” under the General Data Protection Regulation (GDPR).
Data Controller & Contact
Loktar Ogar MH SRL
Sector 3
Bucharest, Romania
VAT ID: 44976690
Email: hello@vreauleaduri.ro
2. How We Use Your Personal Data
We collect and use your data for the following purposes:
- To understand your preferences when accessing Loktar Ogar’s services
- To collect, analyze, and store information necessary to complete projects requested by clients
- To process contact details submitted via the website’s contact form
- To maintain a database of individuals interested in our services and provide offers
- To communicate about our services or respond to inquiries based on the information in our database
- To keep you informed about new offers, services, and events we organize or participate in
3. What Data We Collect & How
Most of the data we collect is not personal data. When dealing with individuals, we collect only the minimum personal information required—typically submitted via the web form or other agreed-upon channels, to fulfill a specific project request.
Cookies
The platform uses cookies, which are small files stored on your device (computer, smartphone, tablet) to recognize your device and display relevant content. Typical cookie content includes the website name, storage date, and a unique identifier.
Types of Cookies
- Essential cookies
- Identify that you are logged in
- Enable correct site functionality and user experience
- Example:
_dd_s(Datadog monitoring cookie; expires when session ends)
- Google Analytics cookies (GA4)
- Used to analyze site usage (including IP address)
- Transmitted to and stored on Google’s servers in Dublin, Ireland
- Used to evaluate site performance and generate reports
- Example cookies:
GA4(GA4 analytics) lasts 2 years; others to support sessions – 2 years
For more on Google’s use of cookies, please refer to Google’s cookie policy.
- Hotjar cookies
- Used for website performance analysis
- Example: a Hotjar statistical cookie storing a new user ID (expires after 1 year)
4. Data Sources
All personal data is provided directly by you via form submissions or agreed-upon channels. We do not supplement with publicly available information (e.g., LinkedIn profiles).
5. Legal Basis for Processing
We process personal data under the following GDPR legal bases:
- Consent (Art. 6(1)(a)): Required for certain cookies and forms. Consent can be withdrawn at any time via our contact page. Processing up to the withdrawal point remains legal.
- Legitimate interests (Art. 6(1)(f)): Maintaining a client database to send personalised service offers.
6. Data Transfers
We collaborate with partners to fulfill our purposes. We ensure all partners are EU-based or represented in the EU, and that they comply with GDPR. Cloud-hosted data is stored by our Frankfurt-based partner. We never transfer your data outside Romania or the EEA.
In legal circumstances, we may also disclose your data to:
- Regulatory authorities (e.g., telecommunications regulators)
- Courts, prosecutors, or parties in litigation when legally required
- Professional advisors (tax consultants, auditors, lawyers, insurers)
7. Data Retention Periods
We retain personal data for the following periods post-last interaction, unless extended retention is legally required:
| Processing Activity | Retention Period |
|---|---|
| Phone number submitted via form | 1 year from submission date |
| Feedback forms | 1 year from submission |
| Withdrawn consent | Delete within 30 days (unless required otherwise) |
| Written communications (email) | 3 years from resolution or contract termination |
| Contracts signed | 10 years from completion |
| Invoices and financial/accounting records | 10 years from completion |
| Complaints or inquiries | As legally required |
You have rights to:
- Request access, correction, deletion, or restriction of your data
- Ask for data portability
- Object to automated decision-making
- Withdraw consent at any time
- File a complaint with Romania’s Data Protection Authority: ANSPDCP (General Gheorghe Magheru Blvd 28–30, Sector 1, Bucharest, Romania; website: https://www.dataprotection.ro/)
8. Keeping Your Data Accurate
Please inform us of any changes to your personal data through the contact page on our website. We also recommend reviewing this privacy policy periodically, as it may be updated to reflect legislative or business changes.
