1. Who processes the data
The controller of the personal data collected through the website is:
KRONTAB ELECTRIC S.R.L.
Tax Identification Number (CUI): 40261803
Trade Register No.: J2018002910085
Registered office: 17 Fântânii Street, Brașov, Brașov County, Romania
Email: contact@krontab.ro
Phone: +40 745 067 665
For questions regarding data protection, you may use the following address: contact@krontab.ro.
The GDPR requires that the individual be informed, among other things, about the controller, the purposes and legal bases of processing, the recipients of the data, the retention period and their rights.
2. What data we may collect
When you use the general contact form, we may collect your first and last name, company, email address, telephone number, subject of the request and the message submitted. These are the fields provided on the Contact page of the website.
Through the quotation request form, we may collect information such as the company, contact person, telephone number, email, role/position, requested service, application area, type of switchboard, estimated deadline, project location, description of the requirement, installed power/current rating, comments and uploaded technical documents.
We may receive the same types of information when you contact us directly by email or telephone.
With your consent to analytics cookies, we may also receive technical and website usage data through Google Analytics and Microsoft Clarity.
3. For what purposes we use the data
The data submitted through the quotation request form is used to analyse the project, communicate with the contact person, request the necessary clarifications and prepare a potential technical and commercial proposal.
The legal basis is mainly Article 6(1)(b) GDPR — taking steps at the request of the data subject prior to entering into a contract.
The data from the general contact form is used to manage questions, collaboration requests and communications addressed to KRONTAB. Depending on the nature of the request, the processing may be based on pre-contractual steps or KRONTAB’s legitimate interest in managing the commercial and administrative communications received.
Data required to comply with legal obligations may be processed on the basis of Article 6(1)(c) GDPR.
Data relating to website security and technical logs may be processed on the basis of the legitimate interest in ensuring the security and operation of the systems.
Data collected through Google Analytics and Microsoft Clarity is processed on the basis of the user’s consent, Article 6(1)(a) GDPR.
The legal bases provided for in Article 6 GDPR include consent, the performance or preparation of a contract, legal obligation and legitimate interest.
4. Technical documentation submitted
Documents uploaded through the quotation form are used to assess the project requirements and prepare the response or quotation.
They may contain technical, commercial information and, incidentally, personal data.
Users are asked not to include personal data that is not necessary for the analysis of the project.
The person submitting the documents must ensure that they have the right to provide them to KRONTAB ELECTRIC.
If, for the preparation of a quotation or technical solution, the involvement of a manufacturer, supplier or technical partner is necessary, the relevant documentation may be disclosed to them only to the extent necessary and in compliance with the applicable confidentiality and data protection obligations.
Here I want Adrian’s confirmation: if KRONTAB never sends the client’s documentation to suppliers/manufacturers during the quotation stage, we remove the last paragraph.
5. Who we may disclose the data to
The data may be accessed only to the extent necessary by authorised KRONTAB personnel and, where applicable, by providers that support the operation of the website and the company’s activity, such as the hosting provider, email provider, IT/web maintenance providers and analytics platforms used with the user’s consent.
The data may be disclosed to authorities or other entities where such disclosure is required by law.
KRONTAB does not sell databases containing information received through the website forms.
6. Google Analytics
With the user’s consent, we use Google Analytics 4 to measure and improve the website.
The standard implementation may collect statistics about users and sessions, approximate location and information about the browser and device. For EU traffic, Google states that individual IP addresses are not logged or stored in Google Analytics.
For KRONTAB, I recommend configuring a GA4 retention period of 14 months.
7. Microsoft Clarity
With the user’s consent, we use Microsoft Clarity to understand how users navigate the website and to identify UX issues.
Clarity may analyse interactions such as clicks, scrolling, mouse movement, page size and other events required to analyse the user experience.
Form fields are masked by Clarity, and for KRONTAB forms we will additionally apply explicit masking to containers that may display personal or technical information.
Microsoft currently indicates a retention period of 30 days for session playback and up to 9 months for certain aggregated data, heatmaps and tagged sessions.
8. Transfers outside the European Economic Area
Some providers used to operate the website may also process data outside the European Economic Area.
In such situations, the mechanisms provided by data protection legislation are used, including adequacy decisions, the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses, as applicable. Google and Microsoft publish information about the mechanisms used for these transfers.
9. How long we retain the data
For KRONTAB, I would establish the following internal rule:
Data from general enquiries and quotation requests that do not result in a contractual relationship will normally be retained for a maximum of 24 months from the last relevant communication.
Technical documentation submitted as part of a request that does not result in a collaboration will be retained for a maximum of 24 months from the closure of the request, except where there is a legitimate reason for a different period.
If the request leads to a contractual relationship, the relevant data may be retained for the duration of the relationship and afterwards for as long as necessary to comply with legal, accounting, tax or contractual obligations or to defend the company’s rights.
Technical and security logs of the website may be retained for a limited period, usually up to 90 days, except where security incidents need to be investigated.
The GDPR requires that data not be kept in an identifiable form for longer than is necessary for the purpose for which it was collected.
10. Data security
KRONTAB applies reasonable technical and organisational measures to protect data against unauthorised access, loss, alteration or unauthorised disclosure.
The GDPR requires a level of security appropriate to the risks associated with the processing.
However, no method of electronic transmission or storage can guarantee an absolute level of security.
11. Rights of the data subject
Under the conditions provided by the GDPR, the data subject may request access to their own data, rectification of inaccurate data, erasure of data, restriction of processing, data portability where applicable, or may object to certain types of processing.
Where processing is based on consent, consent may be withdrawn at any time, without affecting processing lawfully carried out before withdrawal. Withdrawal must be as easy as giving consent.
Requests may be sent to:
The data subject also has the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing — ANSPDCP, if they believe that their data protection rights have been violated.
12. Automated decisions
KRONTAB ELECTRIC does not use data collected through the website to make exclusively automated decisions that produce legal effects or similarly significant effects on the user.
13. Children’s data
The KRONTAB website is intended primarily for a professional and B2B audience and is not designed for the intentional collection of children’s data.
14. Changes to the policy
The policy may be updated to reflect changes to the website, the services used, KRONTAB’s practices or legal requirements.
The date of the latest update will be indicated at the top of the page.