Privacy Policy

1. Data controller

The controller of personal data processed through this website is GEVA GAS & OIL S.R.L.

2. Personal data we may process

When you use the contact form, we may process the following information provided directly by you:

• your name;
• your email address;
• your telephone number, if you choose to provide it;
• the content of your message.

The website may also process technical data strictly necessary for the security and operation of the contact form, including session-related data, CSRF security tokens and information required for automated request rate limiting.

3. Purposes of processing

Personal data submitted through the contact form is used to:

• receive and review your inquiry;
• communicate a response to you;
• provide the requested commercial or technical information;
• prepare a quotation or take requested steps prior to entering into a contract, where applicable;
• protect the contact form and website infrastructure against abuse and automated requests.

4. Legal basis for processing

Depending on the nature of your inquiry, processing may be necessary in order to take steps at your request prior to entering into a contract or for the performance of a contract.

For managing communications, securing the website and preventing abuse, processing may be based on the legitimate interests of Geva Gas & Oil S.R.L. in administering and protecting its online services and business communications.

5. Providing your data

Your name, email address and message are required in order to process an inquiry submitted through the contact form. Your telephone number is optional. If the required information is not provided, the inquiry cannot be submitted through the form.

6. Recipients of personal data

Messages submitted through the contact form are delivered to Geva Gas & Oil S.R.L. through the company’s email infrastructure.

Personal data may be accessible to technical service providers that provide hosting, administration or operation of IT and email infrastructure, to the extent necessary to provide those services and subject to applicable data-protection obligations.

Personal data may also be disclosed to public authorities where such disclosure is required by law.

7. Data retention

Personal data is retained for as long as necessary to manage your inquiry and related communications. Where an inquiry results in a contractual or commercial relationship, relevant information may subsequently be retained for the periods required to comply with contractual, accounting, tax or other applicable legal obligations. The web server may record technical log information such as the IP address, date and time of access, requested resource, HTTP response status, referring page and browser information (User-Agent). Under the current configuration, these logs are rotated daily and retained for approximately 14 days for security, diagnostics and technical administration purposes.

8. Data security

Geva Gas & Oil S.R.L. uses technical and organisational measures designed to protect personal data. The contact form uses mechanisms designed to protect against unauthorised and automated requests, including CSRF tokens, request rate limiting and a secured technical session.

9. Cookies and technical session

The website uses a PHP session required for the operation and security of the contact form. The session cookie is a technical cookie used for security functions and abuse prevention. In the website’s current configuration, it is not used for advertising, profiling or marketing analytics.

Read our Cookie Policy →

10. Your rights

Subject to the conditions provided by Regulation (EU) 2016/679, you may have the following rights, where applicable:

• the right of access to your personal data;
• the right to rectification of inaccurate data;
• the right to erasure;
• the right to restriction of processing;
• the right to data portability, where applicable;
• the right to object, on grounds relating to your particular situation, to processing based on legitimate interests;
• the right not to be subject to a decision based solely on automated processing in the circumstances provided by law.

To exercise your rights or ask questions about personal data processing, please contact us at office@gevagas.ro.

11. Right to lodge a complaint

If you believe that the processing of your personal data infringes applicable data-protection law, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) or another competent supervisory authority, as provided by law.

12. Changes to this policy

This policy may be updated when website functionality, processing activities or applicable legal requirements change. The current version will be published on this page.