Privacy Policy according to GDPR

Data Protection Overview
General Information

This Privacy Policy provides a clear overview of what happens to your personal data when you visit our website.
Personal data means any information that can be used to identify you personally.

Data Controller

SCG COMPANY & CO S.R.L.
Strada Rozelor 11, 107400 Paulesti, Prahova County, Romania
E-Mail: [email protected]
Phone: +40 733 390 150

SCG COMPANY & CO S.R.L. is subject to the European General Data Protection Regulation (EU-GDPR), as well as the applicable Romanian data protection laws (Law no. 190/2018), German Federal Data Protection Act (BDSG) and Bulgarian Personal Data Protection Act, insofar as cross-border data processing or services are provided within these territories.

How We Collect Your Data
  • Directly from you: when you fill in a contact form, sign up for a newsletter, or communicate with us by e-mail or phone.

  • Automatically: through your browser or device when visiting our website (technical data such as IP address, browser type, operating system, etc.).

Why We Process Your Data

Your personal data is processed for the following purposes:

  • To provide and maintain our website and services

  • To communicate and respond to your requests

  • To ensure IT security and detect abuse

  • To improve user experience and website performance

  • To analyse user behaviour (anonymised statistics)

Data processing is carried out in compliance with Art. 6 GDPR and applicable national implementations (Romania, Germany, Bulgaria).

Your Rights under GDPR and National Laws

You have the following rights under EU GDPR, Romanian Law no. 190/2018, Bulgarian PDPA, and German BDSG:

  • Right of access to your stored data

  • Right to rectification or erasure (“right to be forgotten”)

  • Right to restriction of processing

  • Right to object to data processing

  • Right to data portability

  • Right to lodge a complaint with a data protection authority

Romanian Supervisory Authority (ANSPDCP):
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal
Address: B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 Bucharest, Romania
Web: https://www.dataprotection.ro

German Supervisory Authority Example:
Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI) – https://www.bfdi.bund.de

Bulgarian Supervisory Authority:
Commission for Personal Data Protection (CPDP) – https://www.cpdp.bg

Legal Basis for Processing

Processing of personal data is based on:

  • Your consent (Art. 6 (1)(a) GDPR)

  • Performance of a contract or pre-contractual measures (Art. 6 (1)(b) GDPR)

  • Compliance with legal obligations (Art. 6 (1)(c) GDPR)

  • Legitimate interests of SCG COMPANY & CO S.R.L. (Art. 6 (1)(f) GDPR)

SSL / TLS Encryption

Our website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential information.
You can recognise an encrypted connection by the “https://” prefix and the lock symbol in your browser’s address bar.

Cookies

We use cookies to ensure the functionality, security, and user-friendliness of our website.
You can configure your browser to block cookies. However, some parts of the website may not function correctly if cookies are disabled.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Server Log Files

Our hosting provider IONOS SE (European Union) automatically collects the following technical data:

  • Browser type and version

  • Operating system used

  • Referrer URL

  • Hostname and IP address

  • Time of the server request

These data are processed for system security, server maintenance, and fraud detection, and are not merged with other data sources.

Contact Form

When you contact us via the contact form, your provided data (name, email, message, etc.) will be stored for the purpose of responding to your inquiry.
This data is not shared with third parties without your explicit consent.

Newsletter

If you subscribe to our newsletter, we will store your email address and any optional information you provide.
You may withdraw your consent to receive newsletters at any time via the unsubscribe link or by contacting us directly.

Analytics and Third-Party Services

When you visit our website, anonymised usage data may be analysed using the following services:

1. Google Analytics (IP anonymisation enabled)

Provider: Google Ireland Limited
Used for anonymised statistical evaluation and performance analysis.
Further information: https://policies.google.com/privacy

2. Jetpack by WordPress

Provider: Automattic Inc., USA
Used for website statistics, performance optimisation, and security monitoring.
Privacy Policy: https://jetpack.com/support/privacy

3. Cloudflare (Security & CDN Service)

Provider: Cloudflare Inc., USA / EU
Used to improve website security and speed through content delivery and protection.
Privacy Policy: https://www.cloudflare.com/privacypolicy/

4. Elementor

Provider: Elementor Ltd., Israel (EU-GDPR compliant via SCCs)
Used for building and displaying website content dynamically.
Privacy Policy: https://elementor.com/about/privacy/

Embedded Content and Plugins

Our website may include content from third-party platforms (e.g. YouTube, Google Maps).
When visiting a page with embedded content, a direct connection to the servers of these providers may be established.
We do not control the data collection by these external providers.
Please review the privacy policies of these respective services.

Data Transfer to Third Parties

Personal data is only shared with third parties if:

  • it is necessary for fulfilling a contractual obligation,

  • you have explicitly consented, or

  • there is a legal requirement to do so.

Examples:

  • Website hosting (IONOS SE, EU)

  • Payment processing systems (e.g., Revolut Pay, Stripe, or banking institutions)

All partners are GDPR-compliant and bound by strict data processing agreements (DPAs).

Data Retention

Personal data is stored only as long as necessary to fulfil the intended purpose or as required by legal retention periods according to EU and Romanian law.

International Data Transfers

If personal data is transferred outside the European Economic Area (EEA), it is done under the Standard Contractual Clauses (SCCs) approved by the European Commission and with appropriate data protection safeguards.

Changes to this Privacy Policy

We may update this Privacy Policy at any time to reflect changes in legal requirements or website functionality.
The current version will always be available at https://scggroup.ro/privacy-policy/.

Last Updated

November 2025

Data Controller:
SCG COMPANY & CO S.R.L.
Strada Rozelor 11, 107400 Paulesti, Prahova, Romania
E-mail: [email protected]