In short: the only data we ask for is your contact details, and we use them solely to reply to you. We do not sell them, rent them or add them to marketing lists. Below we explain in detail what we collect, why, how long we keep it and what you can ask of us at any time.

1. Who processes the data

The data controller is SlowBear Industries:

We are established in Romania, so the processing described here is governed by Regulation (EU) 2016/679 (GDPR) and Romanian data protection law.

2. What data we collect

We only use your contact details. Through the form on our Contact page we collect:

  • Last name and, optionally, first name — so we know who we are talking to;
  • Phone number — our main way of getting back to you, particularly for emergencies;
  • Email address — so we can send the quote in writing;
  • Service and area, if you choose to select them — so we know from the outset what kind of work is involved and where;
  • Your message — the description of the job, as you write it.

If you call, email or message us on WhatsApp, we process the same categories of data: whatever you choose to tell us in that conversation.

We do not ask for and do not need identity document details, bank details, or any special categories of personal data. Please do not include such information in your message.

3. What we use the data for

3.1. To send you the quote you asked for

This is the main purpose. When you complete the form asking for a quote, we use your details to review the request, contact you with any clarifying questions, arrange a site visit where one is needed, and send you the estimate.

Legal basis: taking steps at your request prior to entering into a contract, and performance of that contract if the work goes ahead (Article 6(1)(b) GDPR).

3.2. To reply to you even if you did not ask for a quote

Not every message is a quote request. Sometimes people write with a technical question, a request for clarification, a possible collaboration, or simply to ask whether we cover a particular area. In those cases we use the contact details you left us to come back to you with an answer to what you wrote.

Legal basis: our legitimate interest in responding to people who contact us (Article 6(1)(f) GDPR). Anyone who sends us a message reasonably expects a reply.

This means we get back to you about the subject of your message. It does not mean we add you to a marketing list, and it does not mean you will receive unsolicited commercial messages afterwards. If you would rather not be contacted at all, tell us and we stop immediately.

3.3. The consent checkbox on the form

The checkbox confirms that you have been informed how we use your data and that you agree to send it for this purpose. We record the wording of that consent and the moment it was given, so we can demonstrate that you were informed. You can withdraw your consent at any time by writing to office@slowbearindustries.com.

What we do not do with your data: we do not sell it, rent it, publish it, pass it to third parties for marketing, build behavioural profiles, or make automated decisions that affect you.

4. Who else may see the data

The data stays with us. Technically, however, it passes through the suppliers who keep our website and email running, acting as processors on our behalf:

  • the website hosting provider and the service that delivers form messages to our inbox;
  • the email provider through which we receive and store correspondence;
  • web analytics and online advertising services (Google), as described in section 6.

These suppliers process the data only to provide us with their service and have no right to use it for their own purposes. We may also disclose data to public authorities where the law requires it.

5. How long we keep the data

  • Enquiries that do not become jobs: we keep the correspondence for a maximum of 2 years, so we have the context if you come back to us about the same problem.
  • Completed work: we keep the data for the duration of the warranty and for the statutory retention periods that apply to accounting and supporting documents.
  • If you ask us to delete it: we delete within 30 days, except for anything we are legally required to keep.

6. Cookies and web analytics

This site uses Google tools (Google Analytics and Google Ads) to understand how many visitors we get, which pages are read, and whether our ads produce real enquiries. These tools may place cookies in your browser and process data such as your IP address, device type and the pages you visit.

The data used for this purpose is statistical and we do not link it to the contact details submitted through the form. You can block or delete cookies in your browser settings, and Google provides an opt-out add-on for Google Analytics.

7. Your rights

Under the GDPR you have the following rights:

  • Right of access — to find out what data we hold about you and receive a copy;
  • Right to rectification — to have inaccurate data corrected or incomplete data completed;
  • Right to erasure — to have your data deleted where there is no longer a legal reason to keep it;
  • Right to restriction of processing — to have processing suspended in a number of situations;
  • Right to data portability — to receive your data in a machine-readable format;
  • Right to object — to object to processing based on our legitimate interest, including asking us not to contact you again;
  • Right to withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

8. How to exercise your rights

Write to office@slowbearindustries.com or call +40 770 988 678. We respond within 30 days at the latest. There is no charge for these requests.

If you are not satisfied with our response, you may complain to the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), at B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest, or through www.dataprotection.ro. If you live in another EU country, you may also complain to your local supervisory authority. You also have the right to seek a remedy through the courts.

9. Data security

The site runs over an encrypted connection (HTTPS), and access to the mailbox where enquiries arrive is limited to the people in the company who handle quoting. We do not store form submissions in a public database and we do not display them on the site.

10. Changes to this policy

If we change how we process data, we update this page and the date at the top of it. We recommend checking it from time to time.

A question about your data?

Write to us and we will answer. If you want your data deleted, tell us and we will do it.

Write to us