Personal Data Protection (GDPR)
1. Who is the data controller
The data controller is Davalex SRL, based in Cristești, Mureș County, Romania, trading under the commercial brand Stone Line. For any request regarding your personal data, you can reach us at stoneline.office@yahoo.ro.
2. What data we process
We process the data you voluntarily provide through the contact form on this website:
- Name
- Email address
- Phone number
- Project type and any details you mention in your message
We do not collect any other categories of personal data through the website (we do not use user accounts and do not run our own website-traffic analytics).
3. Purpose and legal basis for processing
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Responding to your request for a quote or consultation | Consent, given by submitting the form |
| Preparing, and where applicable performing, a service contract | Performance of a contract / pre-contractual steps taken at your request |
3a. Website analytics data
In addition to the form data, this site uses Google Analytics 4 to measure traffic and how the site is used. This data is collected only after you give consent through the cookie banner.
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Website usage statistics, in order to improve the site | Consent, given through the cookie banner |
The site implements Google Consent Mode: until consent is given, storage for analytics, personalisation and advertising is denied by default. We have additionally enabled advertising data redaction and disabled passing identifiers through the URL. You can withdraw your consent at any time from the cookie banner.
4. Who we share data with
The contact form is processed through Netlify Forms, this website's hosting provider, which acts as a data processor on behalf of Stone Line.
For traffic analytics and consent management, we work with:
- Google Ireland Ltd. / Google LLC — Google Analytics 4, Google Maps, Google Fonts. Data transfers to the United States take place under the EU–US Data Privacy Framework.
- Microsoft Ireland Operations Ltd. / Microsoft Corporation — Microsoft Clarity (session recording and interaction heatmaps). Data transfers to the United States take place under the EU–US Data Privacy Framework.
- Usercentrics / Cookiebot — cookie consent management.
We do not sell or rent your data to third parties for marketing purposes.
5. How long we keep your data
We keep contact-form data for as long as necessary to respond to your request and, if a collaboration follows, for its duration plus the retention period required by applicable accounting and tax legislation. After that, the data is deleted.
6. Your rights
Under Regulation (EU) 2016/679 (GDPR), you have the right to:
- request access to your personal data;
- request correction of inaccurate data;
- request erasure of your data ("the right to be forgotten");
- request restriction of processing;
- object to processing;
- request data portability;
- withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
To exercise any of these rights, contact us at stoneline.office@yahoo.ro.
7. Right to lodge a complaint
If you believe the processing of your data breaches applicable law, you have the right to lodge a complaint with Romania's National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro.