Privacy Policy

Who processes your data

The data controller is:

Personal data is processed in accordance with Regulation (EU) 2016/679 (“GDPR”) and applicable Romanian legislation.

What data we may collect

Depending on how you interact with Rock Works, we may process information such as:

• your first and last name;
• the company you represent;
• your email address and telephone number;
• information submitted through the contact form;
• information about the project or services for which you contact us;
• subsequent correspondence and communications with Rock Works;
• technical information relating to website use, where such technologies are implemented and permitted in accordance with your cookie preferences.

Please do not submit sensitive personal data or information that is not necessary for us to assess your inquiry through the contact form.

Why we process personal data

We may process personal data for the following purposes:

Who may process personal data on our behalf

To operate the website and our business, Rock Works may use service providers that process personal data on our behalf, including providers of:

• hosting and IT infrastructure;
• email and communication services;
• security and technical maintenance;
• professional services required for our business operations.

Their access to personal data is limited to what is necessary to provide the relevant services and is subject to applicable data-protection requirements.

For messages submitted through the website contact form, we use Resend, a service provided by Plus Five Five, Inc. Information submitted through the form may therefore be processed through this provider's infrastructure.

Data transfers outside the European Economic Area

Some service providers used by Rock Works may process personal data outside the European Economic Area.

In the case of Resend, certain data associated with sending messages, including message content and related technical information, may be stored and processed in the United States.

Where personal data is transferred outside the European Economic Area, transfer mechanisms provided by applicable data-protection law are used where required, such as adequacy decisions or Standard Contractual Clauses approved by the European Commission.

How long we keep personal data

Personal data is retained only for as long as necessary for the purposes for which it was collected.

The applicable period may vary depending on the nature of the interaction, the existence of a contractual relationship, the need to retain correspondence and applicable legal obligations.

When retention is no longer necessary, personal data will be deleted or anonymised unless continued retention is required or otherwise permitted by law.

Control over your personal data

Subject to the conditions established by the GDPR, you may have:

• the right of access;
• the right to rectification;
• the right to erasure;
• the right to restriction of processing;
• the right to data portability;
• the right to object;
• the right to withdraw consent where processing is based on consent.

For direct marketing, you have the right to object at any time to the processing of your personal data for that purpose.

To exercise your rights, contact:

office@rockworks.ro

You also have the right to lodge a complaint with the competent data-protection supervisory authority, including the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP).