Home / Privacy policy
Legal information
Privacy policy
How we collect, use and protect the data sent through the site.
Contents
- Who operates the site
- What this policy covers
- Terms used in this document
- What data we collect
- How data reaches us
- For what purposes and on what basis we process data
- How long we keep data
- Who we disclose data to
- Transfers outside the European Economic Area
- How we protect data
- Your rights
- How to exercise your rights
- Automated decisions and profiling
- Minors
- Links to other sites
- Changes to this policy
- Contact
Who operates the site
The site dotarisportive.ro is operated by MAG CONSULTING PROJECT S.R.L. (VAT RO 36290819, Trade Register J40/9309/2016), with its registered office at Str. Luigi Cazzavillan no. 9, ground floor, apt. 1, Sector 1, Bucharest, 010783, Romania, trading under the brand Dotari Sportive. You can contact us at contact@dotarisportive.ro or on the telephone number +40 743 884 884.
What this policy covers
This policy explains how personal data is collected, used, stored and protected when you visit the site, when you send us a quote request through the form, by e-mail, by telephone or via WhatsApp, or when you hold a commercial discussion with us about a project.
This document applies together with the cookie policy and with the terms and conditions for use of the site. It does not apply to other sites to which the links published here lead.
We process data in accordance with Regulation (EU) 2016/679 (GDPR), with Law no. 190/2018 on measures implementing the Regulation, and with the other legal provisions applicable in Romania.
The operator’s full fiscal identification details (legal name, unique registration code, trade register number and full registered office address) are published in this document. Until they are published, any communication regarding personal data, the terms of use or cookies is made through the e-mail address and telephone number given in the /en/contact-us/ section.
Terms used in this document
- personal data – any information that can be linked to an identified or identifiable natural person, such as name, e-mail address or telephone number;
- processing – any operation performed on data: collection, storage, consultation, transmission, erasure;
- operator – the entity that decides why and how data is processed, in this case the operator of the dotarisportive.ro site;
- processor – the provider that processes data for the operator, on the operator’s instructions, for example the hosting or e-mail provider;
- consent – your freely given, specific and informed consent;
- ANSPDCP – the National Supervisory Authority for Personal Data Processing.
What data we collect
We collect only the data needed to answer your request and to run a possible equipment project. Depending on how you contact us, this may be:
- identification and contact data: first and last name, company or institution name, job title, e-mail address, telephone number;
- project data: the type of sports venue, capacity, desired configuration, deadlines, description of the requirement, and any technical documents you send us by e-mail (technical specification, plans, photographs of the site);
- technical data: IP address, device and browser type, pages visited, date and time of access, recorded in the logs of the server hosting the site, for security and error diagnosis;
- correspondence data: the content of the messages you send us and the history of discussions related to the offer or the contract.
We do not ask, through the form, for your personal identification number, bank details, health data or other special categories of data, and we do not intentionally collect such information. Please do not include in the messages you send personal data that is not necessary for the project.
How data reaches us
Most data is sent to us directly by you, through the contact form, by e-mail, by telephone or via WhatsApp. Other data may come from discussions held during a project, from contractual documents or, in the case of public procurement procedures, from the documentation made available by the contracting authority through the electronic public procurement system.
We do not buy databases and do not collect personal data from social networks for marketing purposes.
For what purposes and on what basis we process data
We process data for the purposes below, each with the corresponding legal basis, in accordance with art. 6 of the GDPR:
- responding to quote requests and preparing the technical and commercial proposal — basis: pre-contractual steps taken at your request, art. 6(1)(b);
- performance of the contract: delivery, installation, acceptance and warranty interventions — basis: performance of the contract, art. 6(1)(b);
- legal obligations that fall to us, including invoicing, bookkeeping, archiving and running public procurement procedures — basis: legal obligation, art. 6(1)(c);
- site security and preventing automated requests or unsolicited messages — basis: our legitimate interest in keeping the site functional and secure, art. 6(1)(f);
- defending our rights in the event of complaints or disputes — basis: the legitimate interest of making and defending claims, art. 6(1)(f);
- commercial communications, if we choose to send them: only with your consent or, for existing clients, for similar products and services, with the possibility of objecting at any time.
How long we keep data
We keep data only for as long as is necessary for the purpose for which it was collected, according to the following markers:
| Data category | Retention period |
|---|---|
| Quote requests that did not lead to a contract | 24 months from the last communication |
| Correspondence by e-mail, telephone or WhatsApp | 24 months from the last communication |
| Contracts, orders and delivery documents | the duration of the contract, plus the legal retention period for financial and accounting documents |
| Invoices and accounting documents | 10 years, in accordance with financial and accounting legislation |
| Public procurement documentation | the duration of the procedure, plus the legal archiving periods |
| Technical server logs | maximum 12 months |
| The cookie choice | until the site data is cleared from the browser |
When the periods expire, the data is deleted or anonymised, and data forming part of accounting documents is kept in the form required by law. The periods above are internal retention markers and may change where the law requires otherwise.
Who we disclose data to
We do not sell, rent or pass your data to third parties for marketing purposes. Data may be accessed, to the extent necessary, by:
- the web hosting and technical maintenance providers of the site, acting as processors;
- the e-mail service provider through which we receive and archive messages;
- accounting, legal or consultancy service providers, where necessary to run the project;
- competent public authorities, courts and contracting authorities, where there is a legal obligation or where this is necessary for taking part in a public procurement procedure.
All processors are contractually obliged to process data only in accordance with our instructions and to ensure an adequate level of protection. The updated list of processors can be requested at the contact address.
Transfers outside the European Economic Area
We make efforts to store the data collected through the site on servers within the European Union. Where a service provider involves a transfer outside the European Economic Area, it takes place only if there is an adequacy decision of the European Commission or appropriate safeguards, such as standard contractual clauses.
You can request information about the safeguards applicable to a particular provider at the e-mail address in the contact section.
How we protect data
The site is accessed over an encrypted HTTPS connection. Access to the administration area is limited to people who need it, with individual accounts and strong passwords, and data is stored on updated servers with periodic backups.
We apply the minimisation principle: we ask only for the information needed to answer the request and to run the project. In the event of a security incident that presents a risk to your rights, we notify the supervisory authority within the deadline set by the GDPR and inform you where the risk is high.
No IT system can be considered impossible to compromise. Please report to us, at the contact address, anything that seems suspicious to you.
Your rights
In relation to the data we process, you have the following rights, set out in art. 15–22 of the GDPR:
- the right of access – to find out whether we process data about you and to receive a copy of it;
- the right to rectification – to have inaccurate data corrected or incomplete data completed;
- the right to erasure – to have the data erased where there is no longer a basis for keeping it;
- the right to restriction of processing – to have processing restricted while a complaint is being checked;
- the right to portability – to receive the data in a structured, commonly used format, for data processed on the basis of consent or contract;
- the right to object – to object to processing based on our legitimate interest, including commercial communications;
- the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal;
- the right not to be subject to a decision based solely on automated processing, with legal effects on you.
If you consider that the processing infringes the legislation, you have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP), with its registered office at Bd. G-ral Gheorghe Magheru no. 28-30, sector 1, Bucharest, postal code 010336, telephone +40.31.805.9211, e-mail anspdcp@dataprotection.ro, www.dataprotection.ro. Please write to us before approaching the authority — most situations are resolved directly.
How to exercise your rights
Send the request to contact@dotarisportive.ro, marked “personal data request”, stating which right you wish to exercise and the details that help us identify your request (for example the e-mail address you used previously).
We reply within one month of receiving the request at the latest. The deadline may be extended by up to two months where the request is complex or where we receive several requests, in which case we will inform you of the reason for the delay. Exercising your rights is free of charge; we may charge a reasonable fee only for manifestly unfounded or excessive, repeated requests.
To protect the data, we may ask you for additional information confirming your identity before acting on the request.
Automated decisions and profiling
We do not take decisions producing legal effects on you based solely on automated processing, and we do not use data collected through the site for commercial profiling. Requests received are reviewed by members of our team, who prepare the reply.
Minors
The site is addressed to professionals and institutions involved in sports projects and is not intended for children. We do not intentionally collect personal data of persons under 16. If we learn that we have received such data, we delete it without delay. If you are a parent or guardian and believe that a minor has sent us data, please write to us.
Links to other sites
The site may contain links to third-party websites, for example public procurement platforms or manufacturers’ sites. We do not control the content and practices of those sites and are not responsible for how they process data. We recommend that you read their privacy policies.
Changes to this policy
We update this policy when the services we use, the legal requirements or the way we work change. The applicable version is the one published on this page, and the date of the last update is shown at the start of the document. Significant changes will be announced on the site.
Contact
For any question about the processing of personal data, you can write to us at contact@dotarisportive.ro or call us on +40 743 884 884. If the operator appoints a data protection officer (DPO), their /en/contact-us/ details will be published in this section.
Company details
| Legal name | MAG CONSULTING PROJECT S.R.L. |
|---|---|
| VAT / fiscal code | RO 36290819 |
| Trade Register no. | J40/9309/2016 |
| Registered office | Str. Luigi Cazzavillan no. 9, ground floor, apt. 1, Sector 1, Bucharest, 010783, Romania |
| contact@dotarisportive.ro | |
| Phone | +40 743 884 884 |
The “Dotări Sportive” trade name is operated by the company above.