Privacy Policy

01 Who we are

The controller of your personal data — the one who decides why and how it is used — is:

We are not legally required to appoint a Data Protection Officer. For any question on this subject, write directly to office@ely-bass.ro.

02 What data we collect

a) Data you give us through the quote form

This is the only personal data this website actively collects. The form on the Contact page includes:

• Required: full name, phone number, email address, the service you are interested in, project details;
• Optional: estimated area, town of the project and any files you choose to attach (drawings, photos, documentation).

b) Data you give us when you write or call directly

If you contact us by email, phone or through our social media pages, we keep the content of the conversation and your contact details, so we can carry the discussion forward.

c) What we do NOT collect

• We never ask for or store payment data (card, bank account) through this website;
• We do not collect special categories of data (health, beliefs, biometric data);
• There are no user accounts, therefore no passwords;
• We have no newsletter and we build no marketing profiles;
• We set no cookies and use no advertising pixels (no Google Analytics, no Meta Pixel or equivalent). For statistics we use Cloudflare Web Analytics, chosen precisely because it works without cookies and without identifying you — see the next point and the Cookie Policy.

d) Technical data logged automatically by the hosting server

Like any website, the server hosting ely-bass.ro automatically records, in its technical logs, the IP address, the time of access, the page requested and the browser type. These serve exclusively to keep the site running and secure, and are managed by our hosting provider: Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, United States of America.

03 Why we use it and on what basis

The GDPR requires a legal basis for every processing operation. Here they all are:

Publishing projects in the portfolio

Many of our projects stay confidential, at the clients' request. We publish a project only with the client's explicit consent, and that consent can be withdrawn at any time — we remove the material from the portfolio within a reasonable time from the request.

04 Who receives your data

We do not sell or share personal data for commercial purposes. Only the following see it, and only as much as needed:

Transfers outside the European Union

Three of the services above are operated by companies based in the United States: Google, through its fonts service, Cloudflare, which hosts the website and provides the statistics, and Microsoft, which hosts the company mailbox. Transfers rely on the mechanisms set out in Chapter V of the GDPR, namely the European Commission's standard contractual clauses and the EU–US Data Privacy Framework.

Brevo, the service that delivers the form to us, is a French company, so this processing takes place within the European Union.

05 How long we keep it

Exact periods are in the table under point 3. In short:

• Quote request without a contract: 3 years from last contact, so we can pick up the conversation if you return, then we delete it;
• Client: for the whole duration of the collaboration, plus the statutory archiving periods that follow;
• Accounting documents: 10 years, as the law requires — this period cannot be shortened, not even at your request;
• Delivered technical files (point cloud, BIM model, drawings) remain the client's for good. Our archive copy is kept while the project is in the archive, so we can reactivate the virtual tour or extract a drawing on request.

06 Your rights

Under the GDPR you have the following rights. You can exercise them free of charge, with a simple email to office@ely-bass.ro:

• Right of access — to find out whether we hold data about you and to receive a copy of it;
• Right to rectification — to have inaccurate data corrected or incomplete data completed;
• Right to erasure ("right to be forgotten") — to have data deleted, where there is no longer a legal reason to keep it;
• Right to restriction — to have processing paused, for example while we check a complaint of yours;
• Right to data portability — to receive your data in a machine-readable format, or to have it sent to another controller;
• Right to object — to object to processing based on our legitimate interest;
• Right to withdraw consent at any time, where processing is based on consent. Withdrawal does not affect the lawfulness of processing before it;
• Right to lodge a complaint with the supervisory authority — see point 12.

How we respond: we confirm receipt and reply within 30 days at most. If the request is complex, the period may be extended by two months, in which case we tell you within the first month and explain why. So that we do not hand your data to someone impersonating you, we may ask for further information to confirm your identity.

07 How we protect it

• The website is served exclusively over an encrypted HTTPS connection;
• The form is submitted encrypted, and access to the mailbox is password protected;
• Only the people in the company who need the data for the work have access to it;
• Project files are kept on equipment and storage with controlled access;
• We work only with suppliers who provide data protection guarantees.

No system is perfect. If a data breach occurs that may affect your rights, we notify the authority within 72 hours and inform you directly, where the law requires it.

08 Cookies and tracking

The full explanation, including what happens when you click a link to YouTube, Facebook or to a virtual tour, is in the Cookie Policy.

09 Minors

Our services are addressed to companies, institutions and adults. We do not target children and we do not knowingly collect data from people under 16. If you learn that a minor has sent us personal data, write to us and we will delete it.

10 Automated decisions

We take no automated decisions with legal effects on you and we carry out no profiling. Every quote is reviewed and drawn up by a person.

11 Changes to this policy

We update this document whenever the way we handle data changes — for example if we add a web analytics tool. The version and effective date are shown at the top of the page. For significant changes, we announce them with a visible notice on the website.

12 Contact and complaints

For any question or request regarding your data:

• Email: office@ely-bass.ro
• Phone: +40 743 337 982
• Post: ELY BASS SRL, Buznea village, Ion Neculce commune, Iași County, Romania

If you believe we have not respected your rights, please write to us first — most matters are settled directly. You always have the right to address the supervisory authority:

If you are resident in another EU member state, you may also lodge a complaint with your local supervisory authority. You also have the right to bring the matter before the competent courts.