What data we collect and for what purpose

We collect data that you voluntarily provide when filling out contact forms, subscribing to newsletters, or requesting personalized offers. This includes your name, email address, phone number, and the message you send.

We may also automatically collect technical information such as IP address, browser type, operating system, and pages visited, using cookies and similar technologies. This data helps us improve the user experience and optimize our services.

The main purpose of data processing is managing requests, providing commercial information, and complying with legal obligations. We do not use data for purposes incompatible with those stated without informing you in advance.

Cookies and tracking technologies

Our website uses essential cookies for proper functioning and analytical cookies to understand how visitors interact with the content. You can manage cookie preferences from your browser settings.

Third-party cookies (e.g., Google Analytics) may collect anonymous data about browsing behavior. We do not share personal information with these services without your explicit consent.

• Strictly necessary cookies – ensure basic site functionality.
• Performance cookies – help us measure traffic and improve loading speed.
• Functionality cookies – remember your preferences for a personalized experience.

Your rights and how to exercise them

In accordance with the General Data Protection Regulation (GDPR), you have the following rights: access to personal data, rectification of incorrect information, erasure of data (the "right to be forgotten"), restriction of processing, data portability, and the right to object to processing in certain circumstances.

To exercise any of these rights, you can contact us at info@penolagroup.com or by mail at B-dul. Vlad Țepeș 326. We will respond to your request within a maximum of 30 days.

If you believe your data has been processed unlawfully, you have the right to file a complaint with the National Supervisory Authority for Personal Data Processing.

Data transfer and information security

Your data may be transferred to third-party service providers (web hosting, email marketing platforms) only under contracts that guarantee an adequate level of protection. We do not sell or rent personal data to third parties.

We implement technical and organizational measures to prevent unauthorized access, loss, or disclosure of data. These include connection encryption, firewalls, and strict internal access policies.

This policy was last updated on January 15, 2025. Any substantial changes will be brought to your attention via the website or email.