Privacy policy

Last updated: May 16, 2026

1. Who we are

The ePlug.ro website is owned and operated by PLUG IT SOLUTIONS S.R.L., with its registered office in Brașov, 5 Marte St., block 11, entrance B, apt. 12, Romania, registered with the Trade Register Office under no. J8/1482/2023, having Fiscal Code (CIF) 43278648, contact e-mail: office@eplug.ro, hereinafter referred to as "ePlug" or "the Data Controller".

Within the meaning of data protection legislation, ePlug acts as the data controller for the processing operations described in this Policy.

2. Purpose of this policy

This Privacy Policy explains how ePlug processes the personal data of individuals who interact with the ePlug.ro website, request quotes, place orders, contract installation services, or contact the company.

The policy applies to processing carried out through the website, via e-mail, phone, and within the commercial or pre-contractual relationship between ePlug and its customers.

3. What personal data means

"Personal data" means any information relating to an identified or identifiable natural person, according to the GDPR.

4. What categories of data we may process

Depending on how you interact with us, we may process the following categories of data:

a) Identification and contact data

  • first and last name;
  • phone number;
  • e-mail address;
  • delivery / installation address;
  • billing address.

b) Order or quote request data

  • requested products or services;
  • details about the installation location;
  • technical information necessary for project evaluation;
  • order history;
  • order value;
  • payment status;
  • correspondence related to the order or quote.

c) Contractual relationship data

  • data from contracts, quotes, invoices, statements/protocols, delivery or receipt documents;
  • information regarding the requested support;
  • any complaints or notifications.

d) Data of legal entity representatives

If you act on behalf of a company, we may process your name, position, professional contact details, and any other data communicated in the context of the commercial relationship.

e) Technical and website usage data

  • IP address;
  • information about the browser, device, and operating system;
  • accessed pages;
  • visit duration;
  • data generated through technical modules and cookies.

This data is processed under the conditions described in the Cookie Policy.

5. From what sources we collect data

We collect data:

  • directly from you, when you fill out forms, submit a quote request, place an order, or contact us;
  • from documents and information provided within a contractual relationship;
  • automatically, through website use, via technologies such as cookies and technical logs;
  • from contractual partners, to the extent that this is necessary for order execution, delivery, installation, or billing.

6. For what purposes and on what legal bases we process data

The GDPR provides that processing must be based on a legal ground, such as the performance of a contract, a legal obligation, a legitimate interest, or consent, as applicable.

ePlug may process data for the following purposes:

a) Managing quote requests

We process data to analyze your request, contact you, and send a quote.

Legal basis: taking steps at the request of the data subject prior to entering into a contract.

b) Conclusion and performance of contracts

We process data for order processing, issuing commercial documents, organizing delivery, installation, and commissioning, as well as for managing the contractual relationship.

Legal basis: performance of the contract.

c) Fulfillment of legal obligations

We process data for billing, accounting records, tax obligations, archiving, and other applicable legal obligations.

Legal basis: legal obligation.

d) Customer communication and support

We process data to respond to requests, handle complaints, and offer technical or commercial support.

Legal basis: performance of the contract, pre-contractual steps, or legitimate interest, as applicable.

e) Defense of our rights and legitimate interests

We may process data for the establishment, exercise, or defense of a legal claim, incident management, fraud prevention, or the protection of our commercial activity.

Legal basis: legitimate interest.

f) Website administration and security

We process certain technical data for the functioning, securing, and improvement of the website.

Legal basis: legitimate interest and, for certain non-essential cookies, consent, under the conditions of the Cookie Policy.

g) Marketing communications

In the event of sending newsletters or other commercial communications, data will be processed only under the conditions of the applicable law and, where necessary, based on consent.

Legal basis: consent or legitimate interest, within the limits permitted by law.

7. Provision of data

In certain situations, providing data is necessary for analyzing a request, placing an order, delivery, installation, or billing.

If you do not provide us with the necessary data, we may not be able to send the quote, process the order, provide the services, or respond appropriately to the request.

8. To whom we may disclose data

We may transfer data, to the extent necessary, to:

  • IT service providers, hosting, and website maintenance;
  • payment processors;
  • couriers and carriers;
  • suppliers / partners involved in delivery, installation, or support;
  • legal, tax, accounting consultants, or auditors;
  • public authorities, if a legal obligation exists;
  • courts, bailiffs, lawyers, or other entities involved in defending our rights.

When we use data processors or partners, processing must be done under GDPR conditions and with adequate security measures.

9. Transfers outside the European Economic Area

In principle, we aim to use suppliers and partners who process data within the European Economic Area.

If, exceptionally, certain data were to be transferred outside the European Economic Area, this will be done only under the conditions provided by the GDPR, with appropriate safeguards, such as adequacy decisions or standard contractual clauses, as applicable. The GDPR expressly regulates the conditions of these transfers.

10. How long we keep data

We keep data only for the duration necessary to fulfill the purposes for which it was collected, as well as subsequently, if there is a legal obligation or a justified legitimate interest.

In practice, we may keep data:

  • for the duration of analyzing a quote request and a reasonable period thereafter;
  • for the duration of contract performance;
  • for the period provided by accounting, tax, and archiving legislation for supporting documents;
  • for the duration necessary for the resolution of complaints, disputes, or the exercise of our rights.

Exact retention periods may be detailed later in an internal retention annex.

11. What rights you have

The GDPR recognizes for data subjects, depending on the situation, the right of access, rectification, erasure, restriction, objection, portability, and the right not to be subject to a decision based solely on automated processing, including profiling.

Specifically, you have the following rights:

  • the right to obtain confirmation that we are processing your data;
  • the right of access to data;
  • the right to rectification of inaccurate or incomplete data;
  • the right to erasure of data, under the conditions of the law;
  • the right to restriction of processing;
  • the right to object, when processing is based on legitimate interest;
  • the right to data portability, to the extent applicable;
  • the right to withdraw consent, when processing is based on consent;
  • the right to lodge a complaint with the ANSPDCP.

To exercise your rights, you can write to us at: office@eplug.ro.

You also have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP), the competent supervisory authority in Romania.

12. Data Security

ePlug adopts appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, alteration, or unauthorized disclosure. The GDPR requires controllers and processors to implement security measures appropriate to the risk.

However, no system can guarantee absolute security.

13. Data of minors

The ePlug website and services are not directly intended for minors. We do not intentionally collect data from minors in the absence of a lawful basis and applicable legal conditions.

14. Cookies and similar technologies

The website may use cookies and similar technologies. Information regarding cookie categories, their purposes, duration, and your options will be detailed in a separate Cookie Policy.

15. Amendments to the policy

We reserve the right to update this Privacy Policy whenever necessary. The updated version will be published on the website.

Last updated: May 16, 2026

16. Contact

For any questions regarding data protection or to exercise your rights, you can contact us at:

PLUG IT SOLUTIONS S.R.L.

Brașov, 5 Marte St., bl. 11, entrance B, apt. 12, Romania

E-mail: office@eplug.ro

Phone: +4 0724 024 095