NORTHSTONE HOLDING LTD. Request a quote

GDPR & data protection

Privacy Policy

This Privacy Policy explains how we collect, use, store and protect the personal data of people who access constructiiasi.ro or contact us for information, consulting or quotation requests.

Last updated: 12 June 2026

1. Who we are

Website constructiiasi.ro is the presentation platform for the services offered by NORTHSTONE HOLDING LTD., a company operating in construction services, including analysis, design, construction, materials, windows and doors, facades, curtain walls, road infrastructure, logistics and equipment.

The personal data controller is:

In this Policy, the terms 'we', 'the company', 'the operator' or 'NORTHSTONE HOLDING LTD.' refer to the personal data controller.

2. Who this Policy applies to

This Policy applies to people who:

  • accesses constructiiasi.ro;
  • completes contact or quotation request forms;
  • contact us by email, telephone or other communication channels;
  • request information about our services;
  • represents a company, client, supplier, partner or prospective partner.

3. Personal data we may collect

Depending on how you interact with the website or our team, we may collect the following categories of data:

3.1. Data submitted through the contact or quotation request form

  • full name;
  • company name, where applicable;
  • role or position within the company, if provided;
  • email address;
  • telephone number;
  • project town or area;
  • type of service requested;
  • details about the project, work, deadline, budget or technical requirements;
  • any other information you voluntarily choose to provide.

3.2. Data submitted by email or telephone

  • identification and contact data;
  • content of submitted communications;
  • information about the project for which you contact us;
  • data required to prepare a quotation, commercial discussions or collaborations.

3.3. Technical data collected automatically

When you access the website, certain technical data may be collected automatically by the server, browser, security modules or analytics tools. This may include:

  • IP address;
  • browser type and version;
  • the type of device used;
  • the operating system;
  • pages accessed;
  • access date and time;
  • referring URL, if available;
  • data about interaction with the website;
  • information collected through cookies or similar technologies.

4. Purposes for which we process data

We process personal data only for specified, explicit and legitimate purposes. The main purposes are:

  • receiving and managing quotation requests;
  • responding to enquiries submitted via forms, email or telephone;
  • assessing project requirements;
  • preparing a commercial or technical proposal;
  • scheduling a discussion, visit, consultation or initial assessment;
  • communication with prospective clients, beneficiaries, suppliers and partners;
  • website administration and security;
  • preventing abuse, cyberattacks, spam or unauthorised access;
  • improving the website and user experience;
  • compliance with applicable legal obligations;
  • establishing, exercising or defending legitimate rights or interests.

5. Legal bases for processing

We process personal data on the following legal grounds:

Purpose of processing Legal basis
Responding to requests submitted by form, email or telephone Legitimate interest and/or pre-contractual steps
Preparing a quotation or commercial discussions Pre-contractual steps
Communications regarding the requested project, enquiry or partnership Performance of a contract, pre-contractual steps or legitimate interest
Website administration and security Legitimate interest
Preventing fraud, spam and cyberattacks Legitimate interest
Compliance with legal obligations Legal obligation
Sending unsolicited commercial communications Consent, where required

6. Contact and quotation request forms

If you complete a contact or quotation request form on the website, the information submitted will be used to assess your request and respond. It may also be used for further clarification, preparing a quotation, scheduling a discussion or initially assessing the project.

Please do not submit information through the form that is unnecessary for your request, such as sensitive data, medical data, confidential financial information or documents unrelated to the project.

7. Email and telephone communications

If you contact us by email or telephone, we will use the information you provide to respond to your enquiry, clarify project details or continue a commercial or technical discussion initiated by you.

We do not sell or rent your data to third parties.

8. Cookies and similar technologies

The website may use cookies and similar technologies for correct page operation, security, statistical analysis and improving user experience.

Cookies may be:

  • strictly necessary cookies - required for the website to function;
  • security cookies - used for protection against abuse, spam or cyberattacks;
  • analytics cookies - used for website usage statistics;
  • marketing cookies - used only where such tools are implemented and the required consent has been obtained.

You can control or delete cookies through your browser settings. Blocking certain cookies may affect the operation of some sections of the website.

For detailed information about cookies used on the website, see the page Cookie Policy.

9. Traffic, security and server log data

For website security and the correct operation of online services, the server may automatically record certain technical data, such as the IP address, access date and time, page viewed, browser used and any technical errors.

This data is used for:

  • diagnosing technical issues;
  • protection against cyberattacks;
  • preventing abuse and unauthorised access;
  • maintaining the security and stability of the website.

10. Parties to whom we may disclose data

Where necessary, your data may be accessed or processed by the following recipient categories:

  • hosting and technical service providers;
  • website maintenance, IT security or server administration providers;
  • email and communications service providers;
  • consultants, lawyers, accountants or auditors, if necessary;
  • technical partners or collaborators involved in assessing a request, only where necessary;
  • public authorities or competent institutions, where required by law;
  • courts, regulatory bodies or other entities authorised by law.

In all cases, we disclose only the data required for the relevant purpose and take measures to protect its confidentiality.

11. International data transfers

NORTHSTONE HOLDING LTD. has its registered office in Malta, a Member State of the European Union. We generally seek to ensure data is processed within the European Union or European Economic Area.

Where data is transferred to providers or services outside the European Union or European Economic Area, we will seek to ensure that the transfer is based on appropriate safeguards in accordance with applicable data protection law.

12. How long we retain data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations or defend our legitimate rights and interests.

Data category Indicative retention period
Requests submitted through the contact form Up to 24 months after the last communication if no contract is concluded
Data relating to quotations and commercial negotiations For the duration of negotiations and subsequently in accordance with applicable statutory periods or legitimate interests
Data relating to contracts and commercial documents In accordance with applicable legal accounting, tax and contractual obligations
Email communications For the period required to manage the request and subsequently according to legitimate interest or legal obligations
Technical logs and security data For as long as required for website security and administration
Data processed on the basis of consent Until consent is withdrawn or the purpose for which the data was collected expires

13. Data security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration or unauthorised disclosure.

These measures may include, where applicable:

  • the use of secure HTTPS connections;
  • restricting data access to authorised persons only;
  • security measures for the server and website;
  • technical updates and periodic maintenance;
  • protection against spam, automated attacks and unauthorised access;
  • backups and recovery procedures, where applicable.

Although we make every effort to protect data, no method of electronic transmission or storage can be guaranteed to be completely risk-free.

14. Your rights

Under applicable data protection law, you have the following rights:

  • Right to information - the right to receive clear information about how we process your data.
  • Right of access - the right to request confirmation that we process your data and receive a copy.
  • Right to rectification - the right to request correction of inaccurate data or completion of incomplete data.
  • Right to erasure - the right to request deletion of data under certain conditions.
  • Right to restriction of processing - the right to request restriction of how we use your data in certain circumstances.
  • Right to object - the right to object to processing based on legitimate interest or direct marketing.
  • Right to data portability - the right to receive data in a structured, commonly used and machine-readable format where the legal conditions are met.
  • Right to withdraw consent - where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before its withdrawal.
  • Right to lodge a complaint - the right to contact a competent supervisory authority if you believe your data is being processed unlawfully.

15. How to exercise your rights

To exercise your rights, you can contact us at:

To protect data confidentiality, we may request additional information to confirm the identity of the person making the request.

We will respond within the period prescribed by applicable law. For complex or multiple requests, this period may be extended as permitted by law.

16. Right to lodge a complaint

If you believe that your personal data is being processed in breach of applicable legislation, you have the right to lodge a complaint with a competent supervisory authority.

For individuals in Romania, the supervisory authority is:

National Supervisory Authority for Personal Data Processing
Website: www.dataprotection.ro

For matters concerning the operator established in Malta, the relevant supervisory authority is:

Office of the Information and Data Protection Commissioner - Malta
Website: idpc.org.mt

We encourage you to contact us first at office@constructiiasi.ro, so that we can review and resolve your request directly and efficiently.

17. Children's data

constructiiasi.ro is not intended for minors and we do not knowingly collect personal data from people under 16.

If we learn that we have accidentally collected a minor's data without the legally required consent, we will take reasonable steps to delete it.

18. Links to other websites

Our website may contain links to other websites, platforms, services or external pages. We are not responsible for the privacy policies, content or practices of those websites.

We recommend reviewing the privacy policy of every external website you access.

19. Changes to the Privacy Policy

We may periodically update this Privacy Policy to reflect legislative, technical or operational changes or changes to our services.

The updated version will be published on this page together with the date of the latest update. We recommend checking this page periodically.

20. Data protection contact

For questions about this Privacy Policy, how we process data or exercising your rights, contact us at:

Categories