Privacy Policy

Last updated: November 2026 (English version; see also the Romanian page /politica-confidentialitate)

1. Introduction

Driatheli Group SRL (operating the Infinitrade Romania brand) is committed to protecting the confidentiality of your personal data. This policy explains what personal data we collect through this website and in the course of our business relationship, why we collect it, on what legal basis, how long we keep it, with whom we share it and what rights you have. It is provided in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Romanian Law no. 190/2018.

This website is a presentation site for a business-to-business supplier of industrial equipment. It has no online shop, no customer accounts and no online payment; the only data you can submit are those in the quote-request / contact form.

2. Data controller

The controller of your personal data is:

Driatheli Group SRL
Registered office: Calea Lugojului nr. 47/B, Hala nr. 3, Ghiroda, Timiș County, Romania
Trade Register no. J2009002195350 · Tax ID RO26209397
Email: secretariat@infinitrade-romania.ro

3. Personal data we collect

We process the following categories of personal data:

• Identification data: first name, surname, job title/role
• Contact data: email address, telephone number, postal address (the latter usually from correspondence or contracts, not from the website form)
• Company data: company name, tax ID, trade register number (these identify the business you represent; some may also identify you if you are a sole trader)
• Technical data: IP address, browser type and version, device type, pages visited (see section 9 and the Cookie Policy)

Through the quote-request form we collect: your name, email address, telephone number, company (optional), your role (optional), the equipment categories you are interested in, your message, the products you added to the quote list and, if you choose, an attached file (parts list, document or a photograph of the equipment nameplate). Please do not include in the message or attachment personal data that are not needed for the quote.

Data about you received from others (Article 14 GDPR). If a colleague or your employer names you as the contact person for a request, order or delivery, we receive your business contact details from them. We use those data only for the purposes described below, and this policy serves as the information notice in that case.

Is providing data mandatory? No. Providing your data is neither a statutory nor a contractual requirement. However, without at least a name, an email address (or telephone number) and a description of what you need, we cannot answer your request or prepare a quote.

4. Purposes of processing

We process your data to:

• respond to your requests for quotation and to your questions;
• prepare commercial documents (quotations, order confirmations, invoices, contracts);
• communicate with you about your request, quotation, order and delivery;
• improve our services and this website;
• automatically analyse incoming quote requests so as to determine the order in which they are handled and the colleague who answers (see section 9);
• prevent abusive automated submissions (spam) through the form;
• comply with our legal obligations (accounting, tax, responding to lawful requests from authorities);
• establish, exercise or defend legal claims where necessary.

5. Legal bases

6. How long we keep your data

• Quote requests are kept in our system for 3 years from the last communication with you, after which they are deleted, except for requests that led to an order.
• Orders and the related commercial and accounting documents are kept for the period required by Romanian accounting and tax legislation (currently 5 years for supporting documents, counted from 1 July of the year following the financial year, and 10 years for annual financial statements; see Law no. 82/1991 as amended).
• IP addresses used for anti-spam protection are kept for no more than 15 minutes.
• Data sent to our automated-analysis provider (section 9) are deleted by that provider within 30 days of receipt.
• Analytics data (Vercel Web Analytics): the visitor hash used to count sessions is discarded after 24 hours; only aggregated statistics remain.

Where the law requires us to keep certain data for longer (for example in the event of a dispute), we keep them for as long as necessary for that purpose.

7. Your rights

Under the GDPR you have the following rights:

• Right of access – to obtain confirmation that we process your data and a copy of them;
• Right to rectification – to have inaccurate data corrected;
• Right to erasure – to have your data deleted, where the conditions of Article 17 GDPR are met;
• Right to restriction of processing – to limit the processing in the cases provided by Article 18 GDPR;
• Right to data portability – to receive the data you provided to us in a structured, commonly used, machine-readable format;
• Right to object – you may object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests, and at any time to processing for direct marketing purposes;
• Right to withdraw consent – at any time, where processing is based on consent, without affecting the lawfulness of prior processing;
• Right not to be subject to a decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you – we do not take such decisions (see section 9);
• Right to lodge a complaint with the supervisory authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 Bucharest, Romania, www.dataprotection.ro, anspdcp@dataprotection.ro – and the right to an effective judicial remedy.

We respond to requests within one month of receipt; in complex cases this may be extended by a further two months, in which case we will tell you within the first month. Details on how to exercise your rights are on our GDPR page.

8. Data security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or destruction, including encrypted connections (HTTPS/TLS), access restricted to the staff who need the data, and regular backups.

9. Recipients of your data and international transfers

Your data are accessed by the Infinitrade sales team. To operate the website and the form we use the following service providers, which process data only on our behalf and on our instructions, under a data processing agreement (Article 28 GDPR):

• Vercel Inc. (USA) – website hosting and aggregated visit statistics (Vercel Web Analytics), without third-party cookies;
• Supabase (Supabase Pte. Ltd., Singapore, and Supabase, Inc., USA) – the database in which quote requests are stored;
• Plus Five Five, Inc. ("Resend") (USA) – delivery of the quote request by email to our team (not to you);
• Anthropic, PBC (USA) – automated analysis of the request (summary, products identified, priority). The result is used internally only, to decide the order in which we reply; no automated decision with legal or similarly significant effects on you is taken. Your data are not used to train the provider's models, and are deleted by the provider within 30 days;
• Upstash, Inc. (USA) – limiting the number of submissions per IP address (anti-spam protection);
• Google LLC (USA) – the map on the Contact page, loaded only when you click "Show map", and Google Analytics, only if we enable it and only with your consent.

We do not send automated emails, newsletters or promotional messages: the email generated by the form goes only to our team, and the reply is sent to you directly by a colleague from sales.

We do not sell your data and do not pass them on for advertising purposes. We disclose data to public authorities only where the law requires it. We may also share data with our professional advisers (accountants, lawyers, auditors) bound by confidentiality, and with carriers and manufacturers to the extent needed to deliver an order.

Transfers outside the European Economic Area. Some of these providers process data outside the EEA, in particular in the United States. Transfers are made on the basis of:

• the EU–U.S. Data Privacy Framework (Commission adequacy decision (EU) 2023/1795) for providers that are certified under it (Vercel, Resend, Upstash, Google), and
• the standard contractual clauses adopted by the European Commission (Decision (EU) 2021/914), incorporated in the data processing agreements (Supabase, Anthropic and, as a fallback, the other providers).

You may ask us for information about these safeguards at the address below.

10. Children

This website and our services are intended for businesses and professionals. We do not knowingly collect personal data from children under 16.

11. Changes to this policy

We may update this policy when our processing or the applicable law changes. The current version is always published on this page, with the date of the last update at the top.

12. Contact

To exercise your rights or for any question on data protection:

Email: secretariat@infinitrade-romania.ro
Address: Driatheli Group SRL, Calea Lugojului nr. 47/B, Hala nr. 3, Ghiroda, Timiș County, Romania

This page is an English translation of the Romanian page. In the event of any discrepancy, the Romanian version prevails.