Privacy policy

1. Data controller

The controller is SC VASILONI SRL, company / VAT number RO5815293, Trade Register number J1994000567386, registered at 149 Calea București, Râmnicu Vâlcea, Vâlcea County, Romania. For personal data questions or requests, use the email, phone or postal address on our Contact and information.

2. What data we use and why

• Partnership enquiries: the contact person's name, company, town or city, phone, email and optional message, to respond, prepare a quotation and continue the discussion.
• Correspondence and complaints: information in the correspondence, to handle the request and, where necessary, establish, exercise or defend legal claims.
• Operation and security: technical information such as IP address, browser type and server requests, processed by technical providers to deliver and protect the service.

When you request a partnership on your own behalf, the basis is taking pre-contractual steps at your request (Article 6(1)(b) GDPR). For company representatives and general enquiries, the basis is our legitimate interest in communicating and managing business relationships (point (f)). Protecting the service and handling complaints rely on the corresponding legitimate interests; legal obligations rely on point (c), where applicable.

Fields marked * are required to handle an enquiry through the form; the message is optional. Without the necessary information we may be unable to respond properly. You may also contact us by phone or email. We do not request sensitive data or copies of identity documents through the form. We do not use enquiries to automatically subscribe you to newsletters or advertising.

3. Who receives the data

Your enquiry is sent through FormSubmit to Vasiloni's designated mailbox. Access within the company is limited to the people handling the enquiry. Form submissions reach the designated mailbox provided by Microsoft (Outlook/Hotmail). Correspondence sent separately to the public email address on the company domain is handled through ROMARG email hosting. The website does not store messages in its own database or in your browser, or automatically subscribe senders to a newsletter.

The website is hosted by SC ROMARG SRL. The provider supplies the website infrastructure and hosting for the company's domain mailbox; see the ROMARG privacy policy. Technical providers may process information needed to supply and protect their services. The form is submitted to FormSubmit, which may request Google reCAPTCHA verification; see the Google privacy policy. The Google Maps link does not embed a Google map on our pages. The stylised county map is served locally using geoBoundaries data; displaying it does not send data to geoBoundaries. Following a source or licence link opens the relevant external website.

International providers may also process data outside the European Economic Area. For information about processing by our providers, see the policies of FormSubmit, ROMARG and Microsoft. For questions about recipients and safeguards applicable to your data, use our contact details. We do not sell personal data. We may disclose it to authorities where legally required.

4. How long we keep data

We retain enquiries and correspondence for as long as needed to respond and continue the discussion. Retention needs are reviewed in light of the enquiry's status, any business relationship and possible complaints. If a contract is concluded, relevant documents are retained according to legal obligations and time limits for defending legal claims. Data no longer needed is deleted.

According to FormSubmit's documentation, the provider archives submissions for 30 days. This period is separate from retention of messages received in Vasiloni's mailbox. Providers' technical data and copies are managed according to the respective service settings and policies.

5. Your rights

Under the GDPR, you may request access, rectification, erasure, restriction of processing and, where applicable, portability. You may object to processing based on legitimate interests, including for reasons relating to your particular situation. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing. Certain legal obligations may prevent immediate erasure.

Send your request using the details on our contact page. We normally respond within one month and will explain any lawful extension. We verify identity only as necessary. You may lodge a complaint with ANSPDCP and seek a remedy before the competent courts.

6. Cookies and updates

The website does not load Google Analytics, Google Ads or marketing pixels, or make decisions with legal effects through automated profiling. Details about storage and external services are in our cookie policy. Any relevant change to this notice will be published here with an updated date.

7. QR code and saving our contact

The QR code opens our quick contact page. The vCard contains Vasiloni's public details and is downloaded from this website. This feature does not give us access to your phone's address book or send us its contents. The website does not ask for your name, email or phone to download the file, or subscribe you to messages or newsletters. Page and file access may appear in the usual hosting logs described above. If you save the contact in a synchronised account, such as Apple or Google, your address book is managed under your chosen service's settings and policies.

8. Automatic language selection

When you open the homepage without a manual language choice in the current tab, the server uses the IP address to estimate the connection country: Romania → Romanian; other countries → English. Links to a specific language and secondary pages are not automatically redirected. Location is approximate; a VPN or intermediary network may indicate another country. You can change the language at any time using the selector.

The lookup runs on ROMARG hosting using an adapted local copy of the DB-IP Lite database. This function does not send the IP address to DB-IP or another external service, does not store the IP address or country in its own database and does not access GPS location. Ordinary hosting access and security logs remain separate. The legal basis is Vasiloni’s legitimate interest in presenting the website in an accessible language (GDPR Article 6(1)(f)); you can override automatic selection using the selector or a link to an explicit language.

Your manual language choice is remembered only in sessionStorage, under the key vasiloni-language, for the current tab. The value is only the code ro, en, fr or es. It is used solely to respect your requested language, not for analytics or advertising, and is normally removed when the tab closes. If storage is blocked, the selector still opens your chosen language but the preference is not remembered.

IP Geolocation by DB-IP · CC BY 4.0