Privacy policy
Last updated: October 2026
1. Who we are
S.C. ALYTIM PRIM CONSTRUCT S.R.L., registered at Aleea Expoziției nr. 2, Baia Mare, Maramureș county, Romania, company number (CUI) 37062363, is the controller of the personal data collected through www.alytim.ro, under Regulation (EU) 2016/679 (GDPR).
2. What we collect and how
We only collect data through the contact form and by email. The form fields are:
- full name (required);
- email address (required);
- your message (required);
- company, phone number and type of work (optional).
When you submit, we also record your IP address and the time of sending, only to limit automated submissions and to prove when consent was given.
3. Why we process data
- to answer your request and prepare a quotation;
- to keep correspondence related to a possible contract;
- to meet legal obligations, such as archiving and accounting.
We do not use your data for unsolicited marketing and we do not send newsletters.
4. Legal basis
- Consent, Art. 6(1)(a), for data sent through the form;
- Pre-contractual steps, Art. 6(1)(b), for preparing a quotation;
- Legal obligation, Art. 6(1)(c), for tax documents.
5. Storage and security
Messages arrive in the company mailbox, hosted on the domain’s server. The site is served over HTTPS only. Access to correspondence is limited to the people who prepare quotations.
6. How long we keep data
- at most 3 years after the last contact, for requests that do not become contracts;
- for the legal archiving periods, for documents related to a contract.
7. Your rights
Under the GDPR you have the right:
- to access your data;
- to have inaccurate data corrected;
- to erasure (the “right to be forgotten”);
- to restrict processing;
- to data portability;
- to object to processing;
- to withdraw consent at any time, without affecting processing carried out before.
For any request, write to contact@alytim.ro. We reply within one month. You can also lodge a complaint with the Romanian data protection authority (ANSPDCP): www.dataprotection.ro, or with the authority in your own EU country.
8. Who receives the data
Data may be accessible, strictly as far as needed, to:
- the web and email hosting provider of the domain;
- our accountant or external advisers, for contract documents;
- public authorities, when the law requires it.
We do not sell or rent data. We do not transfer data outside the European Economic Area.
9. Romania, Belgium and the Netherlands
The company has a branch in Belgium and sends teams to Belgium and the Netherlands. Correspondence about work in these countries may be accessed by staff there. All three are EU member states, so processing takes place entirely under the GDPR.
10. Changes
Any change to this policy is published on this page, with the update date at the top.