GDPR policy
Regulation (EU) 2016/679 (General Data Protection Regulation) - Arctic Works Garage SRL
Introduction
Arctic Works Garage SRL fully complies with Regulation (EU) 2016/679 (GDPR) and is committed to protecting the personal data of its customers.
This policy describes how we collect, use, store, and protect your personal information in accordance with GDPR.
Legal bases for processing
We process your personal data on the following legal bases:
Performance of a contract
To deliver dry ice blasting services in accordance with the agreement concluded.
Consent
For marketing activities and promotional communications (only with your explicit consent).
Legitimate interest
To improve our services and ensure the security of our premises.
Legal obligation
To comply with fiscal and accounting obligations required by law.
Your GDPR rights
Under GDPR you have the following rights:
Right to be informed
To be informed about how your personal data is processed.
Right of access
To obtain confirmation that your data is being processed and to receive a copy.
Right to rectification
To request correction of inaccurate or incomplete data.
Right to erasure
To request deletion of your data under certain conditions ("right to be forgotten").
Right to restriction of processing
To request that processing be limited in certain circumstances.
Right to data portability
To receive your data in a structured format and transfer it.
Right to object
To object to the processing of your data in certain circumstances.
Right not to be subject to automated decision-making
Not to be subject to decisions based solely on automated processing.
Exercising your rights
To exercise your GDPR rights you can:
- Contact us directly by email or phone
- Complete the contact form on the site
- Visit our premises in person
Response deadlines:
- We will respond to your request within a maximum of 30 days
- In complex cases the deadline may be extended by a further 60 days
- We will inform you of any extension within 30 days of receiving your request
Security measures
Arctic Works Garage SRL implements appropriate technical and organisational measures to protect personal data:
Technical measures:
- Data encryption
- Secure authentication systems
- Regular backups
- Monitoring and logging
- Security updates
Organisational measures:
- Restricted access to data
- Staff training
- Confidentiality policies
- Incident response procedures
- Regular audits
Data breaches
In the event of a personal data security breach:
- We will notify the supervisory authority within 72 hours
- We will inform you without undue delay if the breach poses a high risk
- We will take immediate steps to limit the impact
- We will document the incident and the measures taken
Contact and complaints
Data controller:
Arctic Works Garage SRL
Address: Sat Mera, Com. Baciu, Nr. 328A, Jud. Cluj
Email: contact@arcticworks.ro
Phone: +40 770 794 523
Right to lodge a complaint:
You have the right to lodge a complaint with the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), the Romanian supervisory authority, if you believe that the processing of your data infringes GDPR.
Frequently asked questions about GDPR
What GDPR rights do I have at Arctic Works?
You have 8 GDPR rights: to be informed, access, rectification, erasure, restriction, portability, objection, and protection from automated decision-making. You can exercise them free of charge by contacting us by email or phone.
Who is responsible for data protection?
Arctic Works Garage SRL, with its registered address at Mera 328A, Cluj county, is the data controller. You may lodge complaints with the ANSPDCP (the Romanian national supervisory authority) if you believe your GDPR rights have not been respected.
How is my personal data protected?
Data is protected through encryption, restricted access, regular backups, and security audits. In the event of a security breach, we notify the ANSPDCP within 72 hours as required by Art. 33 GDPR.
Last updated: March 2026. Arctic Works is operated by