This policy explains what personal data the arva.ro website collects, why we use it, how long we keep it and what rights you have.
1. Who we are
The data controller is ARVA METALS & STEELS S.R.L., VAT number RO10667185, Trade Register no. J2012001254236, with its registered office at Sat Cornetu, Comuna Cornetu, Str. Trandafirilor nr. 82, Ilfov County, postcode 077070, Romania.
Operational site: Măgurele, DN1A, Prahova, postcode 107345.
We have not appointed a data protection officer. For any question or request about personal data, you can write to us at office@arvamet.ro or call us on +40 21 448 00 52.
2. What data we collect and why
Quote request form
When you fill in the form on the Contact page, we receive: your name (required), email address (required), phone number (optional) and your message.
We use this data to answer your request and to prepare and send you a quote.
The legal basis is Article 6(1)(b) of Regulation (EU) 2016/679 (GDPR): steps taken at your request before entering into a contract. For follow-up correspondence with business contacts, the legal basis is our legitimate interest, under Article 6(1)(f) GDPR.
Messages sent through the form are delivered by email to office@arvamet.ro. This mailbox is hosted on Microsoft 365.
Direct contact by email or phone
If you write to us or call us directly, we use the data you give us (for example your name, email address, phone number and the content of your message) for the same purposes and on the same legal bases as for the form.
Server logs
Our web hosting provider, PidginHost, with servers in the European Union, keeps technical access logs: IP address, date and time, the page requested and the browser type.
These logs are used for website security and troubleshooting, based on legitimate interest under Article 6(1)(f) GDPR. They are kept for no more than 90 days and then deleted.
The server's security system may temporarily block IP addresses that behave abusively.
Google Maps
The Contact page contains two embedded maps from Google Maps. The maps load only after you accept cookies in the website banner or after you click the button to show the map.
Once a map is loaded, Google (Google Ireland Limited and Google LLC) may set cookies and receives your IP address. Data may be transferred to the United States under the EU-US Data Privacy Framework. The legal basis is your consent, under Article 6(1)(a) GDPR.
More information is available on Google's pages:
Analytics and advertising: Google Analytics and Google Ads
If you accept cookies in the banner, we use Google Analytics 4 for usage statistics and Google Ads to measure campaign results. We collect the pages visited, the source of the visit, the device and browser type, the IP address (used for approximate location) and actions such as sending the quote form or tapping the phone number.
The data is not used for individual profiling and is not combined with any other data of ours. The legal basis is your consent, under Article 6(1)(a) GDPR, and consent can be withdrawn at any time from the "Cookie settings" link in the site footer.
Without consent, these tools are not loaded and no analytics or advertising cookie is written.
What we do not do
We do not use tracking pixels from other networks and we do not send newsletters. Visitors cannot create accounts and comments are disabled. The fonts are hosted on the site, so no requests are made to Google Fonts.
3. How long we keep data
We keep data from quote requests and correspondence for as long as needed to answer the request and for any business relationship that follows.
If no contract is concluded, the correspondence is kept for no more than 3 years and then deleted. If a contract is concluded, the legal retention periods for accounting documents apply.
Server logs are kept for no more than 90 days.
Google Analytics data is kept for 14 months and then deleted automatically.
4. Who we share data with
We do not sell or rent personal data. Data may only be received by:
- our web hosting provider (PidginHost), which stores the website and the server logs;
- Microsoft, which hosts the office@arvamet.ro mailbox;
- Google (Google Ireland Limited), for the maps on the Contact page and, if you accept, for Google Analytics and Google Ads;
- public authorities, where disclosure is required by law.
5. How we protect data
The website uses an encrypted connection (HTTPS). Access to data is restricted to authorised staff, and the website software is updated regularly.
6. Your rights
Under the GDPR, you have the following rights:
- the right of access to the data we hold about you;
- the right to have inaccurate data corrected;
- the right to erasure of your data;
- the right to restrict processing;
- the right to data portability;
- the right to object to processing based on legitimate interest;
- the right to withdraw your consent at any time, without affecting processing carried out before the withdrawal.
You can change your cookie choice at any time using the "Cookie settings" link in the website footer.
To exercise your rights, write to us at office@arvamet.ro. We will reply within one month of receiving your request.
You have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest.
7. Cookies
Details about the cookies used on the website are available in our cookie policy:
8. Changes
We may update this policy when the way we process data changes. The current version is always published on this page.
Last updated: 18 September 2026