Privacy Policy

Our business is mainly business-to-business (B2B). We usually process data of people who represent companies: clients, prospective clients, suppliers and partners (for example engineers, buyers or project managers).

The website is not intended for sales to consumers. The online component shop is in preparation and is not yet active.

Data you send us through the contact form or requests for quotation (RFQ): name, business email, phone, the company you represent and the content of your message.

Technical documentation: BOM lists, Gerber files, schematics, firmware or specifications. These files are usually not personal data, but they may contain names, email addresses or other data of your colleagues or third parties. We use them only to evaluate and deliver the project. Please do not include personal data that is not needed.

Technical connection data: IP address, browser type, pages visited, date and time. These are logged automatically by our hosting infrastructure for the operation and security of the website.

Preferences saved in your browser (for example your chosen language). See the Cookie Policy for details.

Answering messages and quotation requests, preparing and performing contracts — Art. 6(1)(b) GDPR (pre-contractual steps and performance of a contract).

Communicating with representatives of companies we work with or plan to work with, website security and abuse prevention — Art. 6(1)(f) GDPR (our legitimate interest in running our business and protecting our infrastructure).

Invoicing, accounting and other legal obligations — Art. 6(1)(c) GDPR.

Consent — Art. 6(1)(a) GDPR, only for optional activities we may introduce later (for example a newsletter or traffic analytics). We do not use such tools today. If we introduce them, we will ask for your consent first, and you can withdraw it at any time.

Messages and quotation requests that do not lead to a collaboration: up to 3 years from the last communication.

Contract and accounting documents: for the period required by law (generally 5 or 10 years, under Romanian Accounting Law no. 82/1991 and archiving rules).

Technical connection data: for the limited period set by our hosting provider, for security and diagnostics.

We do not sell, rent or share your data for marketing. It can only be accessed by providers that help us run the website and our business, acting as processors under data processing agreements (DPA):

• Google Ireland Limited (Firebase Hosting) — hosting and delivering the website.

• Our email and IT service providers — receiving and managing messages.

• Stripe Payments Europe Limited — card payment processing, only after the online shop launches. Card details are entered directly with Stripe; we do not receive or store them.

• Courier companies — only for delivering orders, after the online shop launches.

Data may be disclosed to public authorities only where the law requires it.

Firebase Hosting delivers pages through a global server network. Technical connection data may therefore be processed by Google outside the European Economic Area, including in the United States.

These transfers rely on the European Commission's adequacy decision for the EU–US Data Privacy Framework and on the standard contractual clauses included in the providers' data processing terms. The same mechanism applies to Stripe once the shop launches.

Under Articles 15–22 GDPR you have the right of access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, and the right to object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time.

We do not make decisions based solely on automated processing and we do not profile users.

To exercise your rights, email office@ecas.ro with the subject "GDPR". We reply within one month of receiving your request; for complex requests this may be extended by two further months, and we will let you know.

The website only uses cookies and local data that are strictly necessary for it to work (for example your chosen language). We do not use analytics or advertising cookies. The full list and explanations are in the Cookie Policy.

We apply appropriate technical and organisational measures: encrypted HTTPS (TLS) connections, access to data restricted to people who need it, and regular checks of our infrastructure.

We may update this policy when our services or legal requirements change, for example when the online shop launches. The date of the last update is shown at the top of the page.