Privacy policy

Last updated: 19.10.2026

1. Who we are

The controller of your data is:

VELOMED S.R.L.
Email: velomed.srl@gmail.com
Phone: +40 744 501 422

For any question about your personal data, write to us at velomed.srl@gmail.com.

2. What data we collect and why

When you send us a form or ask for a quote. Your name, email, phone number and message. We use them to reply and send you the quote you asked for. The legal basis is Art. 6(1)(b) of Regulation (EU) 2016/679 (GDPR): steps taken at your request before a possible contract.

When you call us or write by email or WhatsApp. Your phone number or email address and what you tell us, for the same purpose and on the same basis.

Website security. The server hosting the site keeps technical logs for a short time (IP address, browser, requested page, time), so we can stop attacks and abuse. Our forms are protected by Google reCAPTCHA, which checks that a submission comes from a person and not from a bot. The legal basis is our legitimate interest in keeping the site secure (Art. 6(1)(f) GDPR).

We make no automated decisions about you and do no profiling with legal effects. We don't ask for sensitive data. The site is not aimed at children under 16.

3. How long we keep data

• Form messages and conversations about quotes: up to 12 months after the last contact, if no contract follows. Then we delete them.
• Contracts, orders and accounting documents: as long as the law requires, usually 10 years.
• Cookies: the lifetime of each is listed in the Cookie policy.
• The record of choices made in the cookie banner: 2 years. It holds only a random code, the date and the choice, with no IP address or other data about you.

4. Who we share data with

We don't sell or rent data to anyone. It can be seen only by:

• our staff handling your request, as far as they need it;
• providers that help us operate, under contract and only on our instructions: the hosting company, the email provider, the company that maintains the site and our accountant;
• public authorities, only when the law requires it.

5. Your rights

You have the right:

• to know what data we hold about you and get a copy (Art. 15 GDPR);
• to have wrong data corrected (Art. 16);
• to have your data deleted (Art. 17);
• to restrict processing (Art. 18);
• to receive your data in a commonly used format or have it sent to another company (Art. 20);
• to object to processing based on our legitimate interest (Art. 21);
• not to be subject to a decision based solely on automated processing (Art. 22);
• to withdraw consent at any time. Withdrawal does not affect what was done before.

To exercise your rights, write to us at velomed.srl@gmail.com. We reply within one month, free of charge. We may ask you to confirm your identity, so we don't give your data to someone else.

If you are not happy with our reply, you can complain to the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, sector 1, Bucharest, anspdcp@dataprotection.ro, www.dataprotection.ro.

6. How we protect data

• The site only works over an encrypted connection (HTTPS).
• Only people who need it have access to the admin panel and email, each with their own account.
• We update the site software regularly.

7. Changes

If we change this policy, we publish the new version here, with the date of the update.