1. Who we are and how to contact us
Societatea de Reparații Locomotive „CFR – SCRL Brașov” S.A. (“SCRL”, “we”, or “the company”) is the personal data controller for information collected through this website (Regulation (EU) 2016/679 – GDPR).
For any privacy-related questions, contact us by email at office.scrlbrasov@cfr.ro or in writing at: Fundătura Hărmanului nr. 2, Brașov, Romania.
2. Categories of personal data we process
We collect the information below in two main ways: data you provide actively, and data collected automatically:
a) Data you provide directly:
- When you use the contact form, we temporarily process your full name, email address, phone number, and any other information included in your message in order to respond.
b) Data collected automatically (only with consent):
- If you accept optional cookies via the consent banner, analytics tools may process partially anonymised data such as a fragment of your IP address, performance metrics, pages visited, and browser details, solely to improve how the site works.
3. Purposes and legal basis
Why and on what legal basis we process data:
- To respond to contact / business requests: Operating the contact form (including anti-spam checks).
Legal basis: steps prior to contract at the data subject’s request (Art. 6(1)(b) GDPR) and/or legitimate interests (Art. 6(1)(f) GDPR) in responding to enquiries. - Website performance monitoring: Aggregated statistics about usage.
Legal basis: consent given via the cookie preferences (Art. 6(1)(a) GDPR). Without consent, optional analytics remain disabled.
4. Sharing data with third parties
We do not sell your data or use it for third-party marketing. Data may be processed by processors who support our IT operations, for example:
- Hosting or cloud infrastructure used to run the website.
- Email delivery providers (e.g. Resend) so messages from the form are transmitted securely to our mailbox.
5. Retention
We keep personal data only as long as needed to handle your request. Messages that are no longer required and are not subject to other legal retention duties may be deleted periodically or at the end of the calendar year.
6. Your rights under GDPR
You have the following rights regarding your personal data:
- Right of access: to know whether we process your data and to obtain a copy on request.
- Right to rectification: to correct inaccurate name or contact details.
- Right to erasure (“to be forgotten”): to request deletion of stored information, where applicable.
- Right to restriction / data portability: under the conditions set out in the GDPR.
- Right to withdraw consent: you can change cookie preferences using the banner on the site.
To exercise your rights, please use the contact details above. You may also lodge a complaint with the Romanian supervisory authority: ANSPDCP (dataprotection.ro).