Privacy policy
Last updated: 31 October 2026
This page explains what personal data TopRox Project SRL processes through the toproxproject.com website, why, how long we keep it and what rights you have under Regulation (EU) 2016/679 (GDPR).
Who the controller is
TopRox Project SRL, based in Sibiu, Romania. For any question about personal data, contact us at toproxproject@gmail.com.
What data we collect and why
We only collect the data you send us through the contact form: your name, email address, phone number (optional), subject and message. We use it solely to reply to you and, if you wish, to prepare a quote.
The legal basis is the steps you take before a possible contract (Art. 6(1)(b) GDPR) and our legitimate interest in replying to the requests we receive (Art. 6(1)(f) GDPR).
Who else has access to the data
The form message is sent through the EmailJS service and arrives in the company’s mailbox. The website is hosted by Cloudflare, which may log technical data (such as the IP address) to run and secure the service. We do not sell data or share it for marketing purposes.
Some of these providers may process data outside the European Economic Area; in that case, the transfer relies on the safeguards provided by the GDPR, such as standard contractual clauses.
How long we keep the data
We keep messages received through the form for no more than 2 years after the last contact, so that we can follow up on your request and any collaboration that follows. After that we delete them. We do not build contact lists or use the data for any other purpose.
Cookies and tracking
This website uses no cookies, traffic analytics or advertising. The fonts are hosted on the site itself, not by third parties. The EGIE demo report loads interactive maps from OpenStreetMap and CARTO, which receive the visitor’s IP address only if you open that report.
Your rights
You have the right of access, rectification, erasure, restriction of processing, objection and data portability. To exercise any of them, write to us at toproxproject@gmail.com; we reply within one month.
You also have the right to lodge a complaint with the Romanian data protection authority (ANSPDCP), www.dataprotection.ro, or with the supervisory authority in your own EU country.