Privacy policy

Dear visitors

Thank you for your visit on our site. To feel safe when you visit our site, we would like to inform you about how we process your personal data.

Who we are

This site is managed by SC Metalbac & Farbe SRL.

When the term “us” is used in this privacy policy, it refers to SC Metalbac & Farbe SRL.

Sphere of action

This privacy policy applies to all personal information we collect about you as a site visitor, customer, vendor, business partner or, in general, as an interested party to find out how we process your personal data.

SC Metalbac & Farbe SRL is responsible for the operation of this website.

Depending on the specific circumstances of data collection and processing, the legal entity responsible for the processing of personal data according to Art. 4 (7) GDPR is Metalbac & Farbe SRL.

E-mail / phone / contact form / request form request / social networking / other means of communication

Purpose of data processing / legal basis:

The personal information you provide to us by e-mail / telephone / contact form / offer request form / social networks / other means of communication will certainly be treated as confidential. We use your personal information for a specific purpose to process your request. The legal basis for data processing is Article 6 1 b), c), or f) GDPR. A legitimate interest in the processing of data according to Art. 6 paragraph 1 f) GDPR from our company results from the interest in responding to your requests as customers, business partners, etc., thus maintaining our business relationship and promoting customer satisfaction.

For this purpose, when we use the contact form, we need your name, phone number, email address, country information, and some technical data or image (where necessary). You may also voluntarily provide us with

– Storage duration / Criteria for defining storage:

In principle, we store your personal data for as long as it is necessary for the purpose for which it was collected. All personal data you provide to us through your requests will be deleted or made anonymous within 365 days from the final response from you. The 365 days storage period is due to the fact that you might contact us again for an answer on the same subject and we may do reference to the previous correspondence. Experience has shown that, after 365 days, there are usually no questions about our previous answers.

Business data processing

– Purpose of data processing / legal basis:

As part of our business relationship with you as a customer, business partner, vendor, etc., we process personal data such as your name, address, e-mail address, telephone / fax number, VAT number, (where necessary), the place or date of birth, your nationality data, and other data you have voluntarily provided to us. Processing is realize for the purpose of  identifying, concluding a contract, executing, managing and processing contracts, assessing creditworthiness and warranties, preparing statements and repayments, administering and executing claims, complying with legal regulations, data security and Customer Service.

The legal basis for data processing is Article 6 1 b), c) and f) GDPR.

– Storage duration / Criteria for defining storage:

We store your personal data as long as it is necessary for the purpose for which it was collected. Unless there are other legal storage obligations, the storage of the data required in each case always takes place throughout the business relationship with you and until the expiration of the applicable prescription period for any claims arising out of the business relationship.

Processing of contact data

– Purpose of data processing / legal basis:

Our company processes personal contact information from customers, stakeholders, vendors, and other business partners for email, telephone, fax, and mail communication. The legal basis for data processing is Article 6 1 b) or f) GDPR. The legitimate interest according to Art. 6 par. 1 f) GDPR comes from the interest to lead or initiate a business relationship with customers, stakeholders, suppliers and other business partners, and maintain a relationship with our contacts.

– Storage duration / Criteria for defining storage:

Personal data are stored for business purposes as long as there is a legitimate interest in them.

Data processing for marketing purposes

– Purpose of data processing / legal basis:

SC Metalbac & amp; Farbe SRL uses personal data for marketing purposes, especially for e-mail and telephone advertising. The purpose of data processing within marketing measures is to inform interested parties about SC Metalbac & Farbe SRL. The legal basis for sending mail by mail or e-mail is Art. 6 paragraph 1 f) GDPR. The legitimate interest derives from our interest in sending to customers and stakeholders information about products and services. The legal basis of the marketing measures by e-mail or telephone is given by your consent to the processing of personal data. Marketing measures to existing customers (for example, e-mail advertising) may be allowed under certain circumstances and without prior consent under art. 6 par. 1 f) GDPR.

You can object to receiving marketing communications at any time by writing a message to compliance@metalbacfarbe.com or by accessing the link http://www.metalbacfarbe.com/administrare-date-personale and filling in the form.

– Storage duration / Criteria for defining storage:

In principle, we store your personal data as long as it is necessary for the purpose for which it was collected. If you object to receiving marketing communications, we will stop processing the data immediately and then we will delete your data unless it’s stored for other legitimate purposes.

Disclosure of personal data to third parties:

In principle, data will not be shared with other third parties outside SC Metalbac & Farbe SRL. We may disclose your personal data to third parties only if you have given your prior express consent or if we are required to do so by law. The legal basis of this data processing is Article 6 1 a) GDPR in case of consent or art. 6 par. 1 c) GDPR in case of a legal obligation.

We may also disclose your personal information if disclosure is necessary to protect vital interests or if we are authorized by applicable laws and regulations.

SC Metalbac & Farbe SRL does not sell / provide your information to other people or third parties.

International Data Transfer:

SC Metalbac & Farbe SRL does not transfer personal data outside the European Economic Area.

Using our site

Privacy is very important for us. For this reason, we designed our site so that it can be used anonymously. We use the information we receive and keep during the visit to our sites for internal purposes only and to improve the design of  Web sites. Exceptions apply if data processing is necessary for the defence and prosecution of attacks that constitute criminal offenses or affect the functionality of our site.

 The usage data

When you visit our site, the so-called usage data is temporarily stored on our web server for statistical purposes as a protocol to improve the quality of our site. This data set consists of:

  • the page from which the file was requested;
  • the file name;
  • the date and time of the query;
  • the amount of data transferred;
  • access status (file transferred, file not found);
  • description of the type of browser used;

We use this information to allow access to the site, to control and administer the systems, and to improve the design of our site. These data are stored anonymously. Creating personal user profiles is thus excluded. No data about people or their individual behaviour is collected.


Cookies are small files stored on a visitor’s hard disk. They allow you to store information for a certain amount of time and identify the visitor’s computer. For better user orientation and individual service presentation, we use permanent cookies. We also use so-called session cookies, which are automatically deleted when you close your browser. You can set your browser to let you know about the placement of cookies. This makes the use of cookies transparent to you.

Using Social Network Plug-ins

Our site uses social networking plug-ins for traffic analysis purposes. However, this data cannot be attributed to a particular person, which means that the user / individual account remains anonymous.


To protect your data from unwanted access, we use an encryption method in most pages. Your details are then transmitted from your computer to our server and back via the Internet using SSL 128 encryption (Secure Socket Layer). You can recognize this by the fact that the locking symbol in your browser’s status bar is closed, and the address line starts with https: //.

No obligation to provide personal information

Unless otherwise provided in the previous chapters, the provision of personal data is not provided by law or contract and is not necessary for the conclusion of a contract, and therefore you are not obliged to provide such data. If you choose not to provide us with your personal information, we may not be able to respond to your request.

Your rights

– Right of access of the data subject (Art.15 GDPR)
Under Art. 15, paragraph 1 GDPR, you have the right to request confirmation of personal data being processed and, if necessary, to receive information about personal data that is in our possession as well as the information specified in art. 15 GDPR.
– Right to rectification and erasure (Articles 16 and 17 of GDPR):
You have the right to modify or correct your personal information (Article 16 GDPR).
You may request the deletion of personal data (for example, if the data are no longer necessary for the purposes intended) if the conditions set out in Art. 17 GDPR are met.
– Right to Restrict Processing (Article 18 GDPR):
You may request that your data be restrained (Article 18 GDPR) if one of the conditions provided in art. 18 GDPR is met, e.g. if you oppose processing during any review of our right to process the data, or if personal data is no longer required for processing but must still be reserved for affirmation, exercise or defence of legal claims.
A limitation on processing means that the data in question can only be processed with your consent or to claim, exercise or defend legal claims in order to protect the rights of another person or for reasons of public interest, the interest of the European Union or a Member State.
– The right to data portability (Article 20 GDPR):
If automatic data processing is based on your consent or processing is required to perform a contract with you or to implement pre-contractual arrangements that occur upon your request, you are entitled to receive personal data that you have provided and that are concerning you in a structured, current and readable electronic format. You also have the right to transmit this data to another personal data operator without being hindered by the operator to whom the data was originally provided. At the same time, you have the right to request direct transmission of these data by us to a third party, if this is technically feasible.
– Right to opposition (Article 21 GDPR):
If the data processing is based on art. 6 par. 1 f) GDPR (Data Processing to Protect Legitimate Interests), you may object to processing at any time for reasons that arise in your particular situation. We will only continue to process your personal data if there are reasons that can be substantiated for further processing that goes beyond your interests, rights and freedoms, or serves to claim, exercise or defend legal claims.
– Right to withdraw consent (Article 7 (3) GDPR):
If the processing of data is based on consent under Art. 6 par. 1 a) or art. 9 par. 2 a) GDPR, you can withdraw your consent at any time with effect for the future. However, such withdrawal does not affect the lawfulness of data processing on the basis of consent prior to its withdrawal.

In order to exercise the aforementioned rights or in the case of open questions, please send us your request here: compliance@metalbacfarbe.com, by visiting https://www.metalbacfarbe.com/manage-personal-data/?lang=en or post to address: DN11, Magura village, Bacău county, Romania.

We will ask you for your identification data in order to provide you with the information requested. We assure you that your request will be treated in a timely and free way, unless a disproportionate effort is required.

Right to file a complaint to a supervisory authority (Article 77 of GDPR):

You have the right to submit a formal complaint to that data protection authority in your jurisdiction if you believe that processing of personal data is in breach of applicable data protection regulations. In particular, the complaint may be filed with a supervisory authority in the EU Member State of the place of residence, place of work or place of suspected violation.

Changes to this privacy policy

We may modify this privacy policy to comply with the applicable legal requirements. The current privacy policy can be found on our site and we therefore encourage you to check it regularly for any changes.

Responsible for data processing in accordance with art. 4 par. 7 GDPR related to the visit to this website:
SC Metalbac & amp; Farbe SRL
DN11, Magura, Bacău county, Romania