Your data. Your choices.

This is an English translation of the Romanian privacy policy, which is the reference version.

Who processes the data

The controller is FORTZA.RO SRL, VAT ID RO9947416, trade register no. J32/531/1997. For requests about personal data: online@fortza.ro or office@fortza.ro, phone +40 269 838 450. Contact address: Str. Gării nr. 10, Mediaș, Sibiu County, Romania.

What information we collect

The forms may include your name, email, phone number, locality, company information and project details. We keep your newsletter choices, your confirmations of the terms and the policy, the document versions and the time of submission. We use a pseudonymised technical identifier to limit abuse.

Why, and on what legal basis

We use the data in requests for pre-contractual steps, replies and managing the business relationship. Protecting the forms and preventing abuse are based on our legitimate interest in securing the service. Newsletter messages and the optional visit analytics are based on the person’s separate consent. Tax and archiving obligations apply when a contractual relationship is concluded.

Company checks and commercial prioritisation

For a Romanian tax ID (CUI) that you enter, we may query the public ANAF services for the company name, address and, when available, financial statements. We use indicators such as the average number of employees, turnover, profit and company age for an internal prioritisation of requests. Missing data is marked as insufficient. The score does not automatically reject requests and does not set prices or contractual terms. You can ask for clarification and a human review of the information.

Providers and recipients

Brevo processes the email address and request details to confirm receipt and notify the FORTZA team. Messages are sent from noreply@fortza.ro, with replies going to online@fortza.ro. A newsletter subscription collects your data and consent and only becomes active after you confirm it from the email we send you (the link is valid for 48 hours); the application does not send newsletter campaigns.

The infrastructure uses Vercel for hosting, Supabase for data and authentication, and Cloudflare for Turnstile protection and R2 media storage. Requests and proof of consent may be synchronised to Pipedrive to manage the business relationship. Messages sent to the AI assistant are passed to Anthropic’s Claude API to generate the reply; do not enter sensitive data in the conversation. Google Tag Manager is loaded only after you consent to visit analytics. Search Console is used for search visibility.

Access is limited to authorised staff and to the providers involved in the purposes described. International transfers rely on the applicable safeguards provided in the providers’ contracts. We do not sell contact lists.

How long we keep the data

Data is kept for as long as needed to handle requests, for the business relationship, legal obligations and the defence of rights. Marketing data is used until you unsubscribe. Proof of consent or withdrawal may be kept to show that your choice was respected. Cached ANAF data is refreshed after 24 hours; the copy relevant to a request may remain in the commercial file. For details about the period that applies to your request, contact the controller.

Your rights

Under the law, you may request access, rectification, erasure, restriction, portability, object to processing based on legitimate interest and withdraw consent. Withdrawal does not affect the lawfulness of earlier processing. Write to online@fortza.ro; we may ask for proportionate information to verify your identity. You may also contact the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP).

Unsubscribing and cookies

Newsletters must include a personal unsubscribe link. You can also ask to unsubscribe by email at online@fortza.ro. Preferences for visit analytics can be changed from Cookie preferences. Details about local storage are in the cookie policy.