Privacy Policy

The controller of the personal data collected through this website is GREEN PHEONIX CONCEPT S.R.L., CUI 45667331 (VAT RO45667331), Trade Register No. J2022000195397, registered office Str. Principală Nr. 174, Gura Calitei, Vrancea, 627160, Romania.

This policy applies to all data processed through the greenpheonixconcept.com website, the contact forms and any subsequent communications with us.

The person responsible for data protection: contact@greenpheonixconcept.com.

For any matter concerning your personal data, you may contact us by email or telephone (+40 793 650 902).

A. Data provided directly (contact form)

• Name, email, telephone, message content, business type, estimated budget and the services of interest.
• Legal basis: Art. 6(1)(b) GDPR — pre-contractual steps / performance of the contract, and Art. 6(1)(f) — legitimate interest.

B. Data collected automatically

• Technical data (IP address, browser, operating system, device) — for analytics and security.
• Behaviour (pages visited, duration, scroll, clicks) — via Microsoft Clarity (heatmaps).
• Marketing (tracking for retargeting) — via Meta Pixel and TikTok Pixel.
• Legal basis: Art. 6(1)(a) GDPR — explicit consent through the cookie banner.

• Responding to requests and quoting for services (contract / pre-contractual steps).
• Improving the website through anonymised analytics.
• Personalised marketing through pixels — only with consent.
• Compliance with legal obligations (invoicing, taxation).

We do not sell your data. It may be processed, under strict confidentiality obligations, by:

• Formspree Inc. (USA) — privacy policy — form submission.
• Google LLC (USA) — privacy policy — GA4 Analytics and Google Fonts.
• Microsoft Corp. (USA) — privacy statement — Clarity heatmaps.
• Meta Platforms Inc. (USA) — privacy policy — Facebook/Instagram Pixel.
• TikTok Pte. Ltd. (Singapore) — privacy policy — TikTok Pixel.
• Namecheap, Inc. (USA) — privacy policy — website hosting (server logs: IP address, user-agent, access date and time).
• ANAF and authorities, within the limits of legal obligations.

Formspree, Google, Microsoft and Meta may process data in the USA; TikTok in Singapore. The safeguards applied: Standard Contractual Clauses (SCC) and, where applicable, the EU-US Data Privacy Framework (DPF).

This website is hosted by Namecheap, Inc., with servers in the United States. This involves transferring technical data (IP address, server logs) to the USA, carried out under the Standard Contractual Clauses (SCC) approved by the European Commission, which ensure an adequate level of data protection.

• Right of access (Art. 15).
• Rectification (Art. 16).
• Erasure / "right to be forgotten" (Art. 17).
• Restriction of processing (Art. 18).
• Data portability (Art. 20).
• Objection to processing (Art. 21).
• Withdrawal of consent at any time, without affecting prior processing.
• Complaint to ANSPDCP.

How to exercise them: send an email to contact@greenpheonixconcept.com with the subject "GDPR Request — [type of request]". We respond within 30 days.

For full details about cookies, see the Cookie Policy.

• HTTPS (SSL) across the entire website.
• Limited access to data (Laurențiu Bogdan only).
• Certified processors (ISO 27001 or SOC 2).
• Incident notification within 72h, in accordance with Art. 33 GDPR.

The website is not directed at persons under 16 and we do not knowingly collect data from minors. If you become aware that a minor has provided us with data, please contact us for its deletion.

Updates are notified by email to those affected or through a notice on the website. The current version is marked with the date of the last update, at the top.

• Applicable law: Romanian law.
• For EU consumers, their national law prevails on mandatory matters.
• Competent courts: B2B — Brașov; B2C — the court of the consumer's residence.

• Email: contact@greenpheonixconcept.com
• Telephone: +40 793 650 902
• Address: Str. Principală Nr. 174, Gura Calitei, Vrancea, 627160