Privacy Policy
This policy explains what personal data we collect through this website, for what purpose, who we pass it on to, how long we keep it and what rights you have over it.
Controller and contact details
The data controller for the personal data collected through this website is Oraexacta Systems SRL, with its registered office at Str. Sucevei nr. 14/202, Oradea, Bihor County, 410099, Romania. VAT no. RO 25632916, registered with the Trade Register under no. J05/801/2009.
You can contact us by telephone on +40 259 467 439 or by email at office@oraexacta.com. Please use the same contact details for any request concerning your data.
What data we collect
We collect personal data in one place only: the quote request form on the contact page. The form asks for the following mandatory fields:
- The institution or organisation you represent
- The town or city and the county
- The field of the project — one of the six product categories
- The project description
- The contact person
- The email address
- The telephone number
Two fields are optional: your role and the estimated timeframe of the project. Alongside these we record the language you filled the form in, the time of submission and the fact that you ticked the data-processing consent box. We ask you for nothing else.
Please do not include in the project description any personal data we do not need. Describe the work, not the people.
When the form is submitted, the IP address the request comes from is checked automatically, in order to limit the number of submissions per hour and to stop automated submissions. The IP address is not saved in our records and is not sent to us by email. It is used only at the moment of submission.
Purpose and legal basis
We use the data from the form for one purpose only: to review your request and reply with the information, technical options or quote you asked for, and for the subsequent correspondence relating to that same request.
The legal basis is your consent, given by ticking the box in the form, under Article 6(1)(a) of Regulation (EU) 2016/679 (GDPR). Without that tick, the form cannot be submitted.
For the correspondence that follows a request addressed directly to us, the processing is also based on our legitimate interest in responding to a commercial enquiry, under Article 6(1)(f) of the GDPR.
We do not use the data for profiling and we do not take automated decisions based on it.
Who we share the data with
We do not sell your data and we do not pass it on to anyone for marketing purposes. Your request reaches the people in the company who handle quotations.
In order for the website to work, we use suppliers who process the data on our behalf, as processors:
- Vercel — website hosting. The pages run on Vercel's infrastructure, and the form submission is executed there.
- Sanity — the content management system. Every request submitted is saved as a document in Sanity. The document can only be read by authenticated members of our team and is not published on the website.
- An email service provider, through which the request is delivered to our office@oraexacta.com mailbox.
The data may be disclosed to public authorities where the law requires us to do so.
How long we keep the data
We keep quote requests for 3 years from the last correspondence relating to them. This period covers the time in which a request may turn into a contract and in which claims relating to the work may arise.
If a contract results from the request, the contractual and accounting documents are kept for the periods required by tax and accounting legislation, which are longer.
Once the period expires, we delete the request from the content management system and from our email correspondence. You can ask us to delete it sooner.
Your rights
As a data subject, you have the following rights:
- The right of access — to find out what data we hold about you and to receive a copy of it.
- The right to rectification — to correct inaccurate or incomplete data.
- The right to erasure — to ask us to delete the data.
- The right to restriction of processing — to ask us to temporarily stop using the data.
- The right to data portability — to receive the data in a structured, commonly used and machine-readable format.
- The right to object — to object to processing based on our legitimate interest.
- The right to withdraw your consent at any time. Withdrawal does not affect the processing carried out before the withdrawal.
You can send us any request at office@oraexacta.com or to our registered office address. We will reply within one month of receiving the request at the latest.
If you consider that we have infringed your rights, you can lodge a complaint with the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), the Romanian data protection authority, B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, Bucharest, anspdcp.ro. You can also bring the matter before the courts.
Cookies and traffic analytics
The website does not use marketing or tracking cookies and does not display a consent banner. The only cookie we set remembers the language in which you want to read the site.
For traffic statistics we use Vercel Web Analytics. According to Vercel's documentation, the tool does not use cookies and does not identify visitors individually. The details are in the Cookie Policy.
Changes to this policy
We may update this policy when the way the website works changes or when the applicable legislation changes. The version published on this page is the one in force. We recommend that you check it from time to time.
Subscribing to news by e-mail
If you sign up through the “News by email” form in the site footer, we store your e-mail address, the language in which you used the site, the date you signed up and the fact that you ticked the consent box. We use them only to send you news about our projects, articles and products a few times a year. The legal basis is your consent, which you may withdraw at any time: through the unsubscribe link in every e-mail, or by writing to the contact address above. Once you unsubscribe, the address is deleted from the sending list. The data is kept in our content system (Sanity) and, for delivery, at our e-mail provider (Resend).