Privacy Policy

Privacy Policy | prestari-servicii.ro

Last updated: 30 June 2026
Version: PRIVACY-EN-2026-06-30-v1.0

1. General information

This Privacy Policy explains how prestari-servicii.ro collects, uses, stores and protects the personal data of persons who access the website, submit requests, contact us by telephone, WhatsApp, e-mail or forms, as well as the personal data of service providers, collaborators or partners contacted through the platform’s systems.

The website prestari-servicii.ro is operated by [OPERATOR NAME], with its registered office at [OPERATOR ADDRESS], registered with [TRADE REGISTER], having tax identification code / CUI [CUI], hereinafter referred to as the “Operator”.

Contact details for data protection requests:

• E-mail: contact@prestari-servicii.ro
• Phone: 0772 091 450

This policy is complemented by the Terms and Conditions, the Cookie Policy and the notices displayed or provided when certain communication channels are used, including audio notices regarding call recording.

2. Who this policy applies to

This policy applies to the following categories of persons:

1. website visitors;
2. users / clients who submit requests through the website, by telephone, WhatsApp, e-mail or other channels;
3. persons who call or are called through the platform’s telephone systems;
4. service providers, collaborators, partners or other persons contacted for receiving or performing a request;
5. representatives of legal entities that interact with the platform;
6. persons who submit complaints, reports, GDPR requests or other communications to the Operator.

3. What data we may collect

3.1. Identification and contact data

We may collect first name and last name, telephone number, e-mail address, city/locality, district, area or intervention address, company/PFA or other organisational form details, as well as the capacity in which the person interacts with the platform: user, client, service provider, company representative, collaborator and so on.

3.2. Data regarding the submitted request

We may process the category of requested service, description of the problem, degree of urgency, area or location where the service is requested, desired intervention time slot, information regarding access to the location, working conditions, as well as images, documents, video clips or other materials voluntarily sent for clarifying the request.

Please do not send sensitive data or excessive information that is not necessary for analysing the request.

3.3. Data about service providers, collaborators and partners

For service providers, collaborators or partners, we may process name, role or capacity, company/PFA/other legal form name, contact details, covered areas, service categories, availability, fees or commercial rules communicated by the provider, history of allocated or proposed requests, agreements, arrangements, operational status, feedback, complaints or incidents.

3.4. Technical and website usage data

We may collect IP address, date and time of access, pages visited, user-agent, browser type, operating system, device information, server technical logs, data regarding errors, security or suspicious access, as well as cookie preferences and consents expressed in the cookie banner.

3.5. Data from telephone calls, WhatsApp and other communication channels

Conversations and communications managed through the platform’s numbers, call centre, systems or channels may include audio recordings of calls, transcripts, summaries, notes or tags generated manually or automatically, calling and called telephone numbers, date, time, duration and direction of the call, request category, information about the problem discussed, data about the contacted service provider, estimates, appointments, availability, fees communicated or intervention conditions.

4. Recording, monitoring and analysis of calls

For receiving requests, clarifying details, routing to the appropriate service provider, checking service quality, preventing abuse, resolving complaints and protecting the rights of the parties involved, telephone conversations carried out through the platform’s numbers and systems may be recorded, monitored, transcribed, summarised, analysed or tagged by the Operator, by members of its team and/or by automated systems, including tools assisted by artificial intelligence.

This rule applies both to conversations with users and to conversations with service providers, collaborators or partners contacted through the platform’s systems.

Recordings and associated data may be used to evidence submitted requests, verify details regarding prices, travel, appointments, acceptances or refusals, check the quality of interactions, train and improve the team’s activity, improve automated systems and intake flows, prevent fraud, abuse, spam or false requests, investigate incidents, handle complaints and defend the rights and legitimate interests of the Operator, users or service providers.

Call recordings are retained for a maximum period of 12 months from the date of the call, except where a longer retention period is necessary for establishing, exercising or defending a right, resolving a complaint, investigating a security incident, fraud or abuse, or complying with a legal obligation. When the purpose for which they were collected is no longer necessary, recordings may be deleted or anonymised earlier.

Persons who do not wish to continue a telephone conversation under these conditions may use, where available, an alternative communication channel such as e-mail or the contact form, without affecting the rights provided by law.

5. Use of automated systems and artificial intelligence

The platform may use automated systems, including tools assisted by artificial intelligence, for receiving requests, preliminary classification of the type of service, extracting operational information from conversations, summarising calls, identifying the area, urgency or category of provider, proposing available service providers and optimising internal flows.

These systems have an operational and logistical support role. They do not represent a legal decision, a firm commercial offer or a contractual guarantee. Where a situation requires clarification, human intervention or resolution of a complaint, the Operator may manually review the relevant information.

The Operator does not intend to make decisions based solely on automated processing that produce legal effects concerning data subjects or similarly significantly affect them, without complying with the conditions provided by law.

6. Purposes of data processing

Data may be processed for operation of the website, receiving requests, clarifying and routing requests to service providers, contacting service providers, managing relationships with service providers and partners, checking availability, fees, areas and intervention conditions, recording and analysing calls, sending operational replies and notifications, handling complaints, preventing fraud, abuse, spam, cyberattacks, scraping and click fraud, administering the security of the website and information systems, keeping records of cookie consents, defending the rights of the Operator, users or service providers, complying with legal obligations and improving services and automated systems.

Commercial communications are sent only where there is a valid legal basis, for example the data subject’s consent or an existing contractual/professional relationship, in accordance with the law.

7. Legal bases for processing

Depending on the situation, data processing may be based on one or more of the following legal bases:

1. performance of a contract or taking steps at the request of the data subject before entering into a contract;
2. the legitimate interest of the Operator, including for managing requests, checking quality, preventing abuse, defending rights, website security and managing the relationship with service providers;
3. the consent of the data subject, where this is expressly required, for example for certain non-essential cookies or commercial communications;
4. compliance with a legal obligation;
5. establishment, exercise or defence of a legal claim.

8. Data transmitted to service providers and their role

For routing a request, the Operator may transmit to a service provider, collaborator or partner only the information necessary to analyse and, where applicable, perform the request. This may include name, telephone number, intervention area/address, category of requested service, description of the problem, desired appointment and other strictly necessary information.

Independent third-party service providers may act, for their own activity, as independent data controllers. They are responsible for how they process the data received for performing the service, issuing tax documents, communicating with the user and complying with their own legal obligations.

The Operator does not request more data from service providers than is necessary for managing the request and recommends that they keep the received information confidential.

9. Who we may disclose data to

Data may be accessed or transmitted, within the limits of necessity, to members of the Operator’s team, service providers, collaborators or partners, hosting providers, website maintenance and IT security providers, call centre, voice, SMS, e-mail, CRM, helpdesk or communication providers, providers of automated tools, operational analysis, transcription, summarisation or artificial intelligence, analytics or cookie providers, legal, accounting, tax, technical or security consultants, public authorities, courts, investigation bodies or other competent institutions.

The Operator aims to limit access to data to the persons and providers who need it for the purposes described.

10. Transfers outside the European Economic Area

As a general approach, the Operator aims to use providers that process data in Romania or within the European Economic Area. However, certain technical, communication, hosting, e-mail, call-centre, CRM, analysis, security or artificial intelligence services may involve transfers or access to data from outside the European Economic Area. In such situations, the Operator will seek to use appropriate safeguards, such as adequacy decisions, standard contractual clauses or other mechanisms permitted by applicable law.

11. Retention periods

Data is retained only for as long as necessary for the purposes for which it was collected, while observing the applicable legal periods.

As a guideline, the following periods apply:

1. audio recordings of calls, transcripts, summaries and associated metadata: maximum 12 months, subject to the exceptions mentioned in this policy;
2. requests submitted through forms, e-mail, WhatsApp or other channels: for the time necessary to manage the request and afterwards for a reasonable period necessary for complaint handling, internal checks or defence of rights;
3. data regarding service providers and collaborators: for the duration of the collaboration relationship and afterwards according to applicable legal, contractual, tax or limitation periods;
4. technical logs and security data: for the period necessary to ensure security, prevent fraud and investigate incidents;
5. data regarding cookies and consents: according to the Cookie Policy and the preferences expressed by the user;
6. data required for legal, accounting or tax obligations: according to the periods provided by applicable legislation;
7. data involved in complaints, incidents, investigations or disputes: until the situation is finally resolved and for the period necessary to protect the rights of the parties.

When data is no longer necessary, it will be deleted, anonymised or archived securely, as applicable.

12. Cookies and similar technologies

The website may use cookies and similar technologies for operation, security, preferences, analytics and, where applicable, marketing. Strictly necessary cookies may be used for the operation of the website and retention of essential preferences. Non-essential cookies, such as analytics or marketing cookies, will be used according to the consent expressed through the cookie banner, where the law requires this.

Additional details are available in the website’s Cookie Policy.

13. Data security

The Operator applies reasonable technical and organisational measures to protect data against unauthorised access, loss, alteration, disclosure or unauthorised destruction. These measures may include limiting access to data, passwords and access controls, backups, technical logging, security measures for servers and applications, training persons who have access to data, checking the providers used and measures for preventing and investigating incidents.

No method of electronic transmission or storage is absolutely secure. In the event of a security incident that presents a risk to the rights and freedoms of data subjects, the Operator will act in accordance with the applicable legal obligations.

14. Rights of data subjects

Under the conditions provided by the GDPR and the applicable legislation, data subjects may have the following rights:

1. the right to be informed;
2. the right of access to data;
3. the right to rectification of inaccurate data;
4. the right to erasure of data, in the cases provided by law;
5. the right to restriction of processing;
6. the right to data portability, where applicable;
7. the right to object to processing based on legitimate interest;
8. the right to withdraw consent, where processing is based on consent, without affecting the lawfulness of processing before withdrawal;
9. the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects the person, under the conditions provided by law;
10. the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP).

To exercise rights, you may contact us at contact@prestari-servicii.ro. To protect data, the Operator may request reasonable information to verify the applicant’s identity before responding to a request.

15. Right to object and legitimate interest

Where processing is based on the Operator’s legitimate interest, the data subject has the right to object to the processing on grounds relating to their particular situation. The Operator will review the request and will stop the processing, unless there are compelling legitimate grounds that justify continuing the processing or the data is necessary for establishing, exercising or defending a right.

16. Commercial communications

The Operator may send commercial communications only under the conditions provided by law, for example where the person has given consent or where there is a contractual or professional relationship that allows such communication. Persons who no longer wish to receive such communications may request unsubscribe or cessation of communications through the channel indicated in the message or by contacting the Operator.

17. Minors’ data

The website and the platform’s services are not specifically intended for minors. The Operator does not seek to intentionally collect minors’ data without the consent of the legal representative. If you notice that a minor has submitted personal data through the website or through the platform’s channels without the consent of the legal representative, you may contact us for review and, where applicable, deletion of the data.

18. Complaints, incidents and legal requests

Data communicated in complaints, incidents, reports or legal requests may be retained and analysed in order to resolve the situation, verify the facts, communicate with the persons involved, send replies and defend the rights of the Operator, users or service providers.

In such situations, recorded calls, messages, documents, images, technical logs and other relevant information may also be reviewed.

19. Changes to this policy

The Operator may update this Privacy Policy to reflect legislative, technical or operational changes. The applicable version is the one published on the website on the date of use. Important changes may be signalled by displaying a notice on the website or by other appropriate means, as applicable.

20. Contact

For any question regarding this Privacy Policy or the way in which we process personal data, you may contact us at:

• E-mail: contact@prestari-servicii.ro
• Phone: 0772 091 450

If you believe that your data protection rights have not been respected, you have the right to contact the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), in accordance with the law.