Last updated: November 11, 2025

This policy explains how DRIVION collects and uses personal data received through contact forms and newsletter subscription forms, in accordance with Regulation (EU) 2016/679 (“GDPR”).

Data Controller

The data controller is SC DRIVION SRL, with its registered office at Str. Toamnei 14, Ostratu, Ilfov, Romania, e-mail: salut@drivion.ro.

What data we collect

Through the Website, we may collect:

• Contact data (first name, last name, email address, message content);
• Newsletter subscription data (name, email address);
• Technical data (IP address, cookies, browser type) – collected automatically for website functionality.

Purpose of processing

The data is used for:

• responding to requests submitted via the contact form;
• sending periodic newsletters to subscribers, based solely on expressed consent;
• analyzing and improving the performance of the Website.

Legal basis

Processing is based on:

• DRIVION’s legitimate interest (for responding to contact requests);
• the explicit consent of the data subject (for newsletter subscriptions);
• legal obligations applicable to the Controller (where required).

Data retention period

Data is retained:

• until the request is resolved, in the case of contact forms;
• until consent is withdrawn, in the case of newsletters;
• in accordance with legal retention periods for automatically collected data (cookies, logs, etc.).

Data subject rights

You have the right to:

• request access to your personal data;
• request rectification or deletion (“right to be forgotten”);
• restrict processing;
• object to processing (including for marketing purposes);
• withdraw your consent at any time (via the unsubscribe link included in each newsletter);
• lodge a complaint with the Romanian Data Protection Authority (ANSPDCP) at www.dataprotection.ro.

Data security

We implement appropriate technical and organizational measures (e.g., SSL encryption, restricted access) to protect collected data. However, data transmission over the Internet may involve risks that cannot be completely eliminated.

Data disclosure

Data may be shared with service providers offering web hosting or email marketing services, strictly based on agreements compliant with GDPR.

Changes to the Privacy Policy

This policy may be updated periodically. The updated version will be published on the Website, along with the date of the latest revision.