Privacy Policy (GDPR)

1. Statement on the processing of personal data

Personal data protection in the online environment has become a legal and mandatory requirement. Every data controller must inform clients or collaborators about the processing of personal data and ensure that such data is stored securely.

As data controller, EXTREME FOREST CLIMBING S.R.L. informs you about the processing and storage of your personal data transmitted through service and product delivery operations.

2. What personal data means

Personal data includes information relating to an identified or identifiable natural person, such as: name, surname, address, e-mail, phone number, signature, financial information, information requested by authorities for service and product delivery, audio-video monitoring resulting from visits to locations where EXTREME FOREST CLIMBING S.R.L. services are provided, audio-video monitoring during technical support services, IP address, and any other information necessary for the company’s activity.

Operations performed on such data may also fall within the sphere of personal data processing, whether directly or indirectly: collection, recording, organization, storage, adaptation, modification, extraction, consultation, use, disclosure to third parties, dissemination, combination, blocking, archiving, deletion, and destruction.

3. Collection of information

Information may be collected from several sources: while using the website and applications of EXTREME FOREST CLIMBING S.R.L., through direct and indirect transactions between EXTREME FOREST CLIMBING S.R.L., partners, and users, and from external sources specific to public institutions.

Personal data can be collected directly, through the user’s browser and traffic data, and through cookies.

4. Direct collection of personal data

When placing a booking or order, with or without an account, we may request first name, last name, address, e-mail and any other data necessary for contracting, invoicing, and delivery. Contractual data may be stored for 3 years and fiscal data for 10 years, according to applicable law. Without this information, services cannot be properly provided.

Within support services, we may ask for your phone number or e-mail address so that we can contact you and resolve your issue. If required, additional personal data may also be requested. Communications within support services may be recorded.

Newsletter subscription requires an e-mail address for personalized communication, and processing stops when consent is withdrawn.

Payments made to us may be processed by banking or payment partners, and the relevant banking data is transmitted to them as needed.

5. Traffic data and cookie collection

During a visit to the website, from any device, information such as IP address, visit time, location, and viewed pages may be collected. External traffic analysis services such as Google Analytics may be used to improve services and maintain website security only after consent has been given for analytics cookies.

Cookies may be used to store passwords, language preferences, usage preferences, filters, and choices related to the browsing experience, as well as to limit or personalize displayed content.

The site also stores your cookie choice through a necessary technical identifier so we do not ask for your preferences on every page and so we can retain proof of the choice you made.

6. Purposes for processing personal data

EXTREME FOREST CLIMBING S.R.L. identifies potential users of its services, monitors operations related to service delivery, carries out surveys and profiles within marketing activities, prepares internal analyses, and handles legal procedures connected to the services provided.

Data may be archived both physically and electronically. Legally regulated Romanian public authorities may request reports containing personal data.

7. Legal grounds for processing

Processing is based on Article 6(1)(b) GDPR for data collected through booking or order forms.

Article 6(1)(c) GDPR applies to mandatory data required for invoicing and compliance with legal obligations.

Article 6(1)(a) GDPR applies when consent is requested for marketing, newsletters, or non-essential cookies.

Article 6(1)(f) GDPR and Romanian Law 506/2004, Article 12(2), support our legitimate interest in securing and optimizing the website.

8. Disclosure and recipients of personal data

Providing personal data is mandatory insofar as it is necessary for delivering services. Refusal to provide it may make service delivery impossible. Users have the right to refuse processing for direct marketing purposes.

Where necessary, EXTREME FOREST CLIMBING S.R.L. may provide limited user data to legal authorities and contractual partners, strictly for the purposes for which the data is needed. Examples of recipients include public authorities, auditors, legal advisors, accountants, and relevant contractual partners.

Under applicable law and Regulation (EU) 2016/679, personal data may in certain cases be transferred outside the country, subject to appropriate legal safeguards.

9. Storage, retention, and security measures

Contractual data may be stored for 3 years and financial data for 10 years, in line with legal obligations. Processing may continue until the purpose for which the data was collected has been achieved, after which the data is archived or destroyed according to internal policies and applicable legislation.

Maintaining data confidentiality is mandatory. Authorized users work with individual usernames and passwords; access, collection, or modification operations may be logged with date, time, and action performed; only authorized users may print invoices, notices, contracts, and other documents containing personal data.

10. Rights of the data subject

You have the right to be informed about data collection, the right of access to processed data, the right to request rectification or deletion, subject to legal exceptions, the right to request restriction of processing, the right to data portability, and the right to object to processing in certain circumstances.

You may withdraw previously given consent, refuse processing for marketing or profiling purposes, and file a complaint with the competent supervisory authority or bring the matter before a competent court if you believe your rights have been infringed.

11. Changes and contact

EXTREME FOREST CLIMBING S.R.L. reserves the right to amend this personal data processing statement without prior notice by publishing the updated version on the website.

Any notification may be sent electronically to office@extremeforest.ro or in writing to: Sat Sub Piatra no. 511A, Sălciua, Alba County, postal code 517651.