Privacy Policy

The controller of personal data is WINEX ADVANCE S.R.L., Tax ID RO43676104, Trade Register J27/149/2021, registered office: Str. Mihai Eminescu, Bl. 10, Sc. C, Et. 3, Ap. 56, Roman, jud. Neamț, România, email: office@winex.ro, phone: +40 766 231 632.

• Contact and quote request forms: name, email, phone (optional), message content and the language of the page. Purpose: replying to your request and preparing a quote. Legal basis: pre-contractual steps at your request and our legitimate interest (Art. 6(1)(b) and (f) GDPR).
• Newsletter: email address and language. Purpose: sending commercial communications. Legal basis: your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time. Subscription uses double confirmation: you receive an email with a confirmation link and no communications are sent until you confirm. Unconfirmed requests are deleted automatically after 30 days; we keep the confirmation date as proof of consent.
• Anonymous site statistics: pages visited, clicks on buttons and links, device type, country, language and traffic source. We use no cookies and store nothing on your device. The visitor identifier is an anonymous code recalculated every day that cannot be used to identify you. We respect the “Do Not Track” and “Global Privacy Control” signals. Purpose: understanding and improving the site. Legal basis: legitimate interest. Detailed events are deleted after 3 days; only aggregate totals remain.
• Technical data: your IP address is used temporarily for security and abuse prevention (rate limiting). Legal basis: legitimate interest.
• Spam and bot protection: the contact form uses a signed, time-limited security token, a hidden trap field and rate limiting by IP address (kept only in memory, for a short time). If enabled, Cloudflare Turnstile checks that the request comes from a person. Legal basis: legitimate interest in keeping the website and our mailbox safe.

Data is processed by service providers acting as processors:

• Convex, Inc. — storage of messages, subscribers and anonymous statistics;
• Resend, Inc. — sending and delivery of emails;
• our web hosting provider;
• Cloudflare, Inc. — Turnstile anti-bot check on the contact form, only if enabled;
• OneSpec — only if you use the online configurator, under its own policy.

Some providers may process data outside the European Economic Area; transfers rely on Standard Contractual Clauses and/or the EU–US Data Privacy Framework, as applicable.

Contact messages: up to 24 months from the last interaction, unless a contract is concluded. Newsletter: until you withdraw consent. Data arising from contractual relationships: as required by law (including accounting and tax obligations).

You have the right of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent. You can write to us at office@winex.ro. You also have the right to lodge a complaint with your national data protection authority or with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP).

We use encrypted connections (HTTPS), restricted access to data and technical measures against abuse. We do not sell your data.

We may update this policy; the current version is always the one published on this page.