Privacy and Personal Data Protection Policy
Last updated: 27 August 2026
The protection of your personal data is important to us.
This Privacy Policy explains how POP INDUSTRY S.R.L., the operator of the website www.p-air.ro, collects, uses, stores and protects the personal data of persons who access the website, request information or quotes, or get in touch with P-AIR Systems.
Data are processed in compliance with Regulation (EU) 2016/679 on the protection of personal data (“GDPR”), Law No. 190/2018, and the other legal provisions applicable in Romania.
1. Who is the data controller
The website www.p-air.ro and the brand P-Air Systems are operated by:
POP INDUSTRY SRL
Registered office: Str. Cireașov nr. 12, Mun. Slatina, Jud. Olt, Romania
Tax Identification Code (CUI/CIF): RO6759221
Trade Register No.: J1994001637284
E-mail: office@popind.ro
Telephone: +40 747 118 824
P-Air Systems contact details:
E-mail: comenzi@p-air.ro
Telephone: +40 769 224 921
For the purposes of the GDPR, POP INDUSTRY SRL is the controller of the personal data processed through the website p-air.ro and in the course of the commercial relationships conducted under the brand P-Air Systems.
For any request concerning the protection of personal data or the exercise of the rights provided for by the GDPR, you may contact us at office@popind.ro.
2. What personal data may we collect?
Depending on how you interact with the website or with P-AIR Systems representatives, we may process the following categories of data:
Identification and contact data- the company or organisation represented.
Data provided through requests
We may process the information submitted through:- other channels through which you communicate with P-AIR Systems.
This information may include details about the project, the product requested, dimensions, quantities, the intended use of the products, technical requirements, delivery deadlines and other information you decide to provide to us.
We recommend that you do not submit through the website forms any personal data that are not necessary for handling your request and, in particular, special categories of personal data.
Commercial and contractual data
If you request a quote or become a customer, we may process, as applicable:- information about the products or services requested;
- the history of quotes and communications;
- data necessary for invoicing and delivery;
- information about the performance of the contract;
- information about warranties, complaints or after-sales services.
Technical and website usage data
Depending on the cookie preferences you have expressed and the technologies used, we may collect:- browser type and version;
- the source from which the website was accessed;
- online identifiers and cookie identifiers;
- information about interaction with the website.
For more information, please see the
Cookie Policy available on the website.
3. How do we collect data?
Data may be collected:
Directly from you
When you:- fill in the contact form;
- contact us by telephone or e-mail;
- request information about P-AIR Systems products or services;
- start or conduct a commercial relationship with us.
Automatically
Certain technical data may be collected automatically while you use the website, through servers, log files, cookies and similar technologies.
Cookies that are not strictly necessary will be used according to the consent options expressed through the cookie management platform.
4. For what purposes do we use data and what is the legal basis?
4.1. Information requests and quote requests
We use data to:- identify the appropriate product or solution;
- prepare and send a quote;
- request additional information necessary for the project;
- organise any technical or commercial discussions.
Legal basis:
In the case of natural persons, processing may be necessary in order to take steps at the request of the data subject prior to entering into a contract – Art. 6(1)(b) GDPR.
In the case of persons who contact P-AIR Systems as representatives or employees of a company, we may rely on our legitimate interest – Art. 6(1)(f) GDPR – in communicating and developing B2B commercial relationships.
4.2. Conduct of commercial and contractual relationships
If a contract is concluded following a request, we may use data for:- production and configuration;
- organising transport and delivery;
- communications regarding the project;
- warranties and complaints;
- management of the commercial relationship.
Legal basis: performance of the contract or taking pre-contractual steps – Art. 6(1)(b) GDPR.
For contact persons and representatives of customers that are legal entities, processing may be carried out on the basis of the parties’ legitimate interest in managing the commercial relationship – Art. 6(1)(f) GDPR.
4.3. Compliance with legal obligations
Certain information must be processed in order to comply with the legal obligations applicable to POP INDUSTRY S.R.L., including obligations:- relating to responding to certain requests from the competent authorities.
Legal basis: Art. 6(1)(c) GDPR – compliance with a legal obligation.
4.4. Website security and incident prevention
We may process technical data, including IP addresses and information from server logs, in order to:- ensure the security of the website;
- detect attempts at unauthorised access;
- prevent fraud and cyber attacks;
- investigate security incidents;
- maintain the proper functioning of the website.
Legal basis: the legitimate interest of POP INDUSTRY S.R.L. in protecting the website, the IT infrastructure and users’ data – Art. 6(1)(f) GDPR.
4.5. Statistics and analysis of website usage
With your consent, we may use analytics tools to understand:- how many people access the website;
- which pages are accessed;
- which products are of interest;
- which sources visitors come from;
- how the browsing experience can be improved.
Where these activities involve the use of cookies or similar technologies that are not strictly necessary, they are activated only in accordance with the preferences expressed through the cookie management mechanism.
Legal basis for the processing of personal data: consent – Art. 6(1)(a) GDPR, where required.
You may withdraw your consent at any time by changing your cookie preferences.
4.6. Marketing and commercial communications
If you validly give your consent to receiving commercial communications, we may use your contact details to send:- information about products;
Legal basis: your consent – Art. 6(1)(a) GDPR and the legislation applicable to commercial communications.
Consent to marketing is separate from the processing of a quote request and is not a condition for requesting information or for contracting our products.
You may withdraw your consent at any time, without the withdrawal affecting the lawfulness of processing carried out before its withdrawal.
4.7. Protection of the company’s rights and interests
In certain situations, we may retain or use information for:- the establishment, exercise or defence of rights;
- the resolution of complaints;
- the management of disputes;
- demonstrating compliance with contractual or legal obligations.
Legal basis: legitimate interest – Art. 6(1)(f) GDPR and, where applicable, compliance with legal obligations.
5. Is the provision of data mandatory?
Providing the data marked as mandatory in the contact form is necessary in order for us to identify the request and to be able to reply to you.
If you do not provide us with these data, we may be unable to process the request or prepare the requested quote.
Data used exclusively for marketing or non-essential cookies are optional, and refusing to give consent does not affect your ability to use the essential functions of the website or to request a quote.
6. To whom may we disclose data?
Personal data are not sold to third parties.
To the extent necessary for conducting our business, data may be accessible to or disclosed to certain categories of recipients, such as:- hosting and IT infrastructure providers;
- software maintenance and development providers;
- e-mail and cloud service providers;
- online analytics and marketing service providers, depending on the consent given;
- logistics, transport or courier service providers;
- financial and accounting service providers;
- legal, tax or technical advisers;
- partner companies or subcontractors involved in the performance of a project, where necessary;
- public institutions and authorities, where disclosure is required by law.
Where a provider processes data on our behalf, it will be engaged under the conditions laid down by data protection legislation and, where applicable, on the basis of a data processing agreement.
7. Transfer of data outside the European Economic Area
In conducting our business, we may use technology service providers that operate internationally.
In certain situations, this may involve the transfer of data to, or access to data from, countries outside the European Economic Area.
Where such a transfer takes place, it will be carried out only in accordance with the provisions of the GDPR, using, as applicable:- an adequacy decision issued by the European Commission;
- the EU-U.S. Data Privacy Framework, in the case of eligible providers;
- standard contractual clauses approved by the European Commission;
- other legal mechanisms provided for by the GDPR.
8. How long do we keep data?
Data are kept only for as long as they are necessary for the purpose for which they were collected or for as long as there is a legal obligation or a justified legitimate interest in keeping them.
In general:
Information requests and quote requests
Data may be kept for the period necessary to handle the request and, thereafter, for a reasonable period for the continuation of commercial communication, the history of quotes and the protection of the company’s rights.
Where no contract is concluded, the information is reviewed periodically and will be erased or anonymised when it is no longer necessary.
Contracts and commercial relationships
Data are kept for the duration of the contractual relationship and thereafter for the period necessary to comply with legal obligations and the applicable limitation periods.
Financial and accounting documents
Documents falling within the scope of financial and accounting legislation are kept for the period laid down by law.
Under the accounting legislation in force, mandatory accounting records and supporting documents are, as a general rule, kept for 5 years calculated from 1 July of the year following the end of the financial year in which they were drawn up, except where another rule requires a different period.
Marketing
Data used on the basis of consent are processed until consent is withdrawn or until the purpose for which they were collected no longer exists.
Cookies and analytics data
Their duration varies depending on the type of technology used and is set out in the Cookie Policy.
Security
Technical logs and data necessary for security are kept for the period necessary to identify and investigate incidents, and may be kept for a longer period where there is an incident, a legal obligation or a need to defend a right.
Once the applicable periods have expired, data will be erased, anonymised or archived under the conditions laid down by law.
9. Cookies and similar technologies
The website www.p-air.ro uses cookies and similar technologies.
Strictly necessary cookies may be used without consent where they are necessary for the functioning of the website.
Analytics, marketing and advertising cookies or other non-essential technologies are used in accordance with the options expressed by the user through the consent management system.
You can:- refuse non-essential cookies;
- select certain categories;
- change your preferences later.
For detailed information on the types of cookies, providers, purposes and storage periods, please see the Cookie Policy.
10. Marketing and profiling
P-AIR Systems does not use data collected through the contact form to automatically send commercial communications without an appropriate legal basis.
Online advertising tools may allow the creation of audiences or the analysis of users’ interactions with the website.
Where such technologies require consent, they will be used only after consent has been given through the cookie management mechanism.
11. Automated decisions
POP INDUSTRY S.R.L. does not, through the website www.p-air.ro, take decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.
12. Data security
We apply reasonable technical and organisational measures to protect personal data against:- accidental or unlawful destruction.
Access to data is limited to the persons and providers who need it in order to perform their duties or the contracted services.
However, no IT system can offer an absolute guarantee of security, which is why the measures used are periodically assessed and improved according to the risks identified.
13. Your rights
Under the conditions laid down by the GDPR, you have the following rights:
Right of access
You may request confirmation as to whether we process data about you and you may receive information about, and a copy of, those data.
Right to rectification
You may request the correction of inaccurate data and the completion of incomplete data.
Right to erasure
In the cases provided for by law, you may request the erasure of personal data.
This right is not absolute and does not apply where retaining the data is necessary, for example, for compliance with a legal obligation or for the defence of a right.
Right to restriction of processing
You may request the temporary restriction of processing in the situations provided for by the GDPR.
Right to data portability
For processing to which this right applies, you may request to receive the data in a structured, commonly used and machine-readable format.
Right to object
You may object to processing carried out on the basis of legitimate interest, under the conditions laid down by the GDPR.
As regards direct marketing, you may object at any time to the processing of data for that purpose.
Right to withdraw consent
Where processing is based on consent, consent may be withdrawn at any time.
Withdrawal does not affect the lawfulness of processing carried out before the time of withdrawal.
Right not to be subject to a decision based solely on automated processing
You have the rights provided for by Art. 22 GDPR regarding decisions based solely on automated processing which produce legal effects or similarly significant effects.
Right to lodge a complaint
If you consider that your data are processed in breach of the law, you have the right to lodge a complaint with the competent data protection authority.
14. How can you exercise your rights?
To exercise your rights or for any question regarding the use of personal data, you may contact us at:
POP INDUSTRY SRL
Str. Cireașov nr. 12, Mun. Slatina, Jud. Olt, Romania
E-mail: office@popind.ro
Telephone: +40 747 118 824
Depending on the nature of the request, we may ask for additional information strictly necessary to verify the identity of the person making the request.
We will respond to requests without undue delay and, as a rule, within one month at the latest, in accordance with the provisions of the GDPR.
15. Supervisory authority
You have the right to apply to:
the National Supervisory Authority for Personal Data Processing – ANSPDCP
Bd. General Gheorghe Magheru nr. 28-30
Sector 1, postal code 010336
București, Romania
Telephone: +40 31 805 92 11
E-mail: anspdcp@dataprotection.ro
16. Data relating to other persons
If you provide us with personal data belonging to another person, please make sure that you are entitled to communicate this information to us and that the person concerned has been duly informed.
17. Data relating to minors
The P-AIR Systems website and the products or services promoted through it are not specifically intended for minors.
We do not intentionally seek to collect personal data of minors through the website.
18. Links to other websites
The website may include links to pages or services administered by third parties.
POP INDUSTRY S.R.L. is not responsible for the way in which those operators process personal data.
We recommend that you read the privacy policy of each external service you access.
19. Changes to this policy
This Privacy Policy may be updated periodically to reflect:- the introduction of new services or technologies;
- changes in the way data are processed.
The updated version will be published on this page, together with the date of the last update.
In the event of significant changes to the way data are processed, we will take the necessary measures to inform data subjects where required by law.