Last updated: 7 August 2026
This policy explains what personal data SC METAL KLS SRL collects, why we collect it, how long we keep it and what you can ask us to do about it. It covers this website and the ordinary business contact we have with clients, main contractors and suppliers. It is written to be read, not to be survived.
Who we are
The controller of your personal data is: SC METAL KLS SRL str. Șesul de Sus nr. 34A/22, 407280 Florești, județul Cluj, Romania Commercial register: J12/1988/2012, ONRC Cluj VAT number: RO30470780 Email: team@metalkls.com Telephone: +33 782 470 187 We are not required to appoint a Data Protection Officer and have not appointed one. Data protection questions go to team@metalkls.com and are handled by our management.When you send us an enquiry
The contact form on this site asks for your name, your email address, your message, and optionally your telephone number. We use it to answer you, to price the work you are asking about, and to keep a record of what was discussed. Our legal basis is Article 6(1)(b) GDPR — taking steps at your request before entering into a contract — and, where your enquiry is made on behalf of a company rather than yourself, Article 6(1)(f), our legitimate interest in responding to business enquiries and keeping a record of them. The checkbox on the form asks you to confirm you have read this policy. It is an acknowledgement, not a consent: we do not rely on your consent to answer an enquiry you sent us, and ticking it does not give us permission to do anything beyond what is described here. Enquiry emails reach team@metalkls.com and are read by the people who price and plan the work. We do not sell enquiry data, and we do not use it to market anything to you unless you separately subscribe to our newsletter.When you subscribe to the newsletter
If you enter your email address in the newsletter box, we use it to send you occasional updates about our projects and services. Our legal basis is your consent, Article 6(1)(a) GDPR. The subscriber list is held and the messages are sent by Brevo, an email marketing service based in France. Brevo also records whether a message was delivered and opened, so that we can tell whether anyone is reading what we send. Nothing more is inferred from it, and we do not use it to build a profile of you. You can withdraw that consent at any time, either through the unsubscribe link in any message or by emailing team@metalkls.com. Withdrawing consent does not affect anything sent before you withdrew it. We keep a minimal record that you unsubscribed, so that we do not add you again by mistake.If you are a contact at a client, main contractor or supplier
When we quote, contract for or deliver work, we process the business contact details of the people we deal with — name, job title, employer, work email, work telephone — together with the correspondence, site instructions and documents exchanged during the project. Our legal basis is Article 6(1)(b) where you are the counterparty personally, Article 6(1)(f) where you are an employee of the counterparty and our legitimate interest is performing the contract with your employer, and Article 6(1)(c) for the records we are required by Romanian accounting and tax law to keep.Cookies and analytics
A cookie is a small file a website stores on your device. This site uses two kinds. Necessary cookies keep the site working — they remember your cookie choices and, if you have an account here, that you are signed in. They are set without asking you, because the site cannot function without them and the law does not require consent for them. Analytics cookies are set by Google Analytics 4, which we use to see which pages are read and how visitors arrive. These are set only if you accept them in the cookie banner, and you can change your mind at any time. Google Analytics places cookies named_ga and _ga_<property>, which last up to two years and record a randomly generated identifier for your browser, not your name. We hold analytics data for 14 months, after which Google deletes it.
We do not use advertising or retargeting cookies, we run no advertising pixels, and we do not build profiles of individual visitors.
You can also delete or block cookies in your browser settings. Blocking necessary cookies may stop parts of this site working.
Who else handles your data
We keep the list of parties short on purpose. At present it is:- ROMARG SRL (Romania) — hosts this website and its database, on servers in Romania.
- Zoho Corporation B.V. (Netherlands) — provides our email service, so any message you send us is delivered to and stored in a mailbox on their European data centres.
- Brevo (Sendinblue SAS, France) — holds our newsletter subscriber list and sends the newsletter. Only used if you have subscribed.
- Google Ireland Limited — Google Analytics 4 and Google Search Console, used to measure and maintain this site, and Google Fonts, which serves the typefaces the site displays.
Where your data is kept
The website and its database are hosted in Romania. Our email and our newsletter list are hosted on European data centres. Everything we hold about you is therefore inside the European Economic Area. Google may process analytics data outside the EEA, including in the United States. Where that happens, the transfer relies on the European Commission’s standard contractual clauses together with Google’s certification under the EU–US Data Privacy Framework. You can ask us for details of the safeguards in place.How long we keep things
- Enquiries that do not lead to work — 24 months from the last contact, then deleted.
- Enquiries that become projects — kept with the project file for the duration of the contract and for 10 years afterwards, which is the period Romanian accounting law requires for the underlying records and covers the limitation period for construction claims.
- Newsletter subscriptions — until you unsubscribe.
- Analytics data — 14 months.
- Server access logs — up to 30 days, held by our host for security and troubleshooting.
Your rights
Under the GDPR you can ask us to:- give you a copy of the personal data we hold about you;
- correct it if it is wrong or incomplete;
- delete it, where we have no continuing reason to keep it;
- restrict what we do with it while a dispute about it is resolved;
- hand it over to you or another company in a machine-readable format, where we hold it on the basis of consent or a contract;
- stop processing it where we rely on legitimate interests, unless we have compelling grounds that override your objection;
- withdraw your consent at any time, where consent is what we relied on.