Privacy Policy
Privacy Policy
PRIVACY POLICY
USA ROLLS EUROPEAN DIVISION SRL
usarolls.eu
Effective date: 30.04.2026
Last updated: 30.04.2026
1. Introduction
USA ROLLS EUROPEAN DIVISION SRL (“we”, “us”, “our” or “the Company”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share, and safeguard personal data when you visit usarolls.eu (the “Website”) or interact with us through any of the forms made available on the Website.
This Policy is issued in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the General Data Protection Regulation, hereinafter “GDPR”) and Romanian Law no. 190/2018 on measures implementing the GDPR.
Please read this Policy carefully. By using our Website or submitting personal data through it, you confirm that you have read and understood the practices described herein.
2. Who We Are — Data Controller
The data controller responsible for the processing of personal data collected through this Website is:
USA ROLLS EUROPEAN DIVISION SRL
Registered office: Str. Cluj nr. 45, Cam. 3, Sector 1, Bucharest, postal code 011491, Romania
Sole Registration Code (CUI): 48208562
Trade Registry Number: J2023009546409
EUID: ROONRC.J2023009546409
Date of incorporation: 22 May 2023
Email: [INSERT CONTACT EMAIL]
Phone: [INSERT PHONE NUMBER]
For any questions regarding this Privacy Policy or the way we process your personal data, please use the contact details above.
We have not appointed a Data Protection Officer (DPO), as we are not legally required to do so under Article 37 GDPR. All data protection enquiries are handled directly by the Company.
3. What Personal Data We Collect
We only collect personal data that you actively provide to us through the forms on our Website, together with limited technical data automatically logged for security purposes.
3.1. Information you provide through the Contact Form
When you submit an enquiry through the Contact Form, we collect:
- First name
- Last name
- Email address
- Phone number
- Company name
- The content of your message
3.2. Information you provide through the Career Application Form
When you apply for a position with us, we collect:
- Full name
- Email address
- Phone number
- Curriculum vitae (CV) and any additional information you choose to include in it
- The content of your message
Please do not include in your CV any data that is not strictly relevant to the position (for example, sensitive data such as health information, religious beliefs, political opinions, or trade union membership). If such data is included, we will rely on your implicit consent given through voluntary submission, and we will treat it with the same level of protection.
3.3. Technical data automatically collected
When you visit the Website, certain technical information is automatically logged by our servers and our hosting provider, for security and troubleshooting purposes, including:
- IP address
- Browser type and version
- Operating system
- Date and time of access
- Pages visited and referrer URL
We do not currently use web analytics tools, advertising trackers, retargeting pixels, or third-party marketing cookies on this Website. If we introduce such tools in the future, we will update this Privacy Policy and, where required by law, we will request your prior consent through a cookie banner.
4. Purposes of Processing and Legal Basis
We process your personal data for the following purposes and on the following legal grounds:
a) To respond to enquiries submitted through the Contact Form
Legal basis: Article 6(1)(b) GDPR — taking steps at your request prior to entering into a contract; and Article 6(1)(f) GDPR — our legitimate interest in handling business enquiries efficiently.
b) To assess job applications submitted through the Career Form
Legal basis: Article 6(1)(b) GDPR — taking steps at your request prior to entering into an employment contract.
c) To retain CVs beyond the position you applied for, in case other suitable opportunities arise
Legal basis: Article 6(1)(a) GDPR — your explicit consent. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
d) To ensure the security and integrity of our Website and to prevent fraud or abuse
Legal basis: Article 6(1)(f) GDPR — our legitimate interest in protecting our digital infrastructure and the data of our users.
e) To comply with legal obligations
Legal basis: Article 6(1)(c) GDPR — compliance with legal obligations to which we are subject (for example, accounting, tax, archiving, or responding to lawful requests from public authorities).
5. Who Has Access to Your Personal Data
Your personal data is accessed by:
- Authorised personnel of USA ROLLS EUROPEAN DIVISION SRL with a legitimate business need (for example, sales, customer service, human resources, IT).
- Service providers acting as data processors on our behalf, under written agreements that comply with Article 28 GDPR. These may include our Website hosting provider, email and IT maintenance providers, backup providers, and other technical service providers strictly necessary to operate the Website. All processors are bound by confidentiality obligations and are only allowed to process personal data on our documented instructions.
- Public authorities (such as tax authorities, courts, ANSPDCP, or law enforcement bodies), but only when we are legally required to disclose data.
We do not sell your personal data. We do not share it with third parties for marketing purposes. We do not engage in profiling for commercial purposes.
6. International Data Transfers
Your personal data is processed and stored within the European Economic Area (EEA). We do not transfer personal data collected through this Website outside the EEA.
Should it become necessary in the future to transfer personal data outside the EEA — for example, to service providers based in third countries — we will only do so under appropriate safeguards required by Chapter V of the GDPR (such as an adequacy decision of the European Commission, Standard Contractual Clauses, or another lawful transfer mechanism), and we will update this Privacy Policy accordingly.
7. How Long We Keep Your Data
We retain your personal data only for as long as necessary to fulfil the purposes set out in Section 4, unless a longer retention period is required or permitted by law.
The standard retention periods are summarised in the table below:
Type of personal data | Retention period |
Contact form submissions | 24 months from the date of last interaction, unless a contractual relationship arises (in which case the contractual retention rules below apply) |
Job applications — rejected candidates | 6 months from the conclusion of the recruitment process |
Job applications — retained for future opportunities (with consent) | Up to 12 months from the date consent was given, unless renewed |
Customer / supplier contractual data and supporting documents | Duration of the contract plus 10 years, in accordance with Romanian Accounting Law no. 82/1991 and Tax Procedure Code |
Web server access logs (IP, timestamp, URL) | Up to 12 months for security and troubleshooting purposes |
After the applicable retention period expires, we securely delete or anonymise your personal data, except where applicable law requires us to retain it for a longer period.
8. Your Rights Under the GDPR
As a data subject, you have the following rights in relation to the personal data we process about you:
- Right of access (Article 15 GDPR) — to obtain confirmation of whether we process personal data about you and, if so, to receive a copy of that data, together with information about the processing.
- Right to rectification (Article 16 GDPR) — to have inaccurate personal data corrected and incomplete data completed.
- Right to erasure (“right to be forgotten”) (Article 17 GDPR) — to request the deletion of your personal data in the circumstances set out in the GDPR, subject to overriding legal obligations that may require us to keep certain data.
- Right to restriction of processing (Article 18 GDPR) — to obtain the restriction of processing under specific conditions.
- Right to data portability (Article 20 GDPR) — to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
- Right to object (Article 21 GDPR) — to object, on grounds relating to your particular situation, to processing based on our legitimate interests.
- Right to withdraw consent (Article 7(3) GDPR) — where processing is based on consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.
- Right not to be subject to automated decision-making (Article 22 GDPR) — we do not engage in automated decision-making, including profiling, that produces legal or similarly significant effects on you.
9. How to Exercise Your Rights
To exercise any of the rights described above, please send a written request:
- by email to [INSERT CONTACT EMAIL]; or
- by post to our registered office: Str. Cluj nr. 45, Cam. 3, Sector 1, Bucharest 011491, Romania.
We will respond to your request without undue delay, and in any event within one month of receipt. Where the request is complex or where we receive a high number of requests, we may extend that period by up to two further months. In such cases, we will inform you within the first month of the reasons for the delay.
In order to verify your identity and process your request safely, we may need to ask you for additional information.
Exercising your rights is free of charge. However, where requests are manifestly unfounded or excessive, in particular due to their repetitive character, we may either charge a reasonable fee taking into account the administrative costs, or refuse to act on the request.
10. Right to Lodge a Complaint
If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the Romanian supervisory authority:
Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
Address: B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, Bucharest, postal code 010336, Romania
Phone: +40 318 059 211
Fax: +40 318 059 602
Email: anspdcp@dataprotection.ro
Website: www.dataprotection.ro
You also have the right to seek a judicial remedy before the competent courts.
11. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, alteration, or disclosure. These measures include, without limitation:
- Encryption of data in transit through HTTPS / TLS
- Access controls, authentication, and the principle of least privilege
- Secure backups and recovery procedures
- Regular review of our technical and organisational measures
- Confidentiality obligations imposed on all personnel and processors
In the event of a personal data breach likely to result in a high risk to your rights and freedoms, we will notify you without undue delay and report the breach to ANSPDCP in accordance with Articles 33 and 34 GDPR.
12. Cookies
This Website uses only strictly necessary cookies required for its basic operation. We do not use analytics, advertising, or third-party tracking cookies at this stage. Should we introduce any non-essential cookies in the future, we will request your prior consent through a cookie banner.
For further details about the cookies we use, please refer to our Cookie Policy at usarolls.eu/cookie-policy.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time, in order to reflect changes in our processing activities, in applicable law, or in the services offered through the Website. The “Effective date” and “Last updated” fields at the top of this document indicate the date of the latest revision.
Where the changes are material, we will provide a more prominent notice (for example, by displaying a banner on the Website). We encourage you to review this Policy periodically.
14. Contact Us
For any questions or concerns regarding this Privacy Policy or our data protection practices, please contact us using the details below:
USA ROLLS EUROPEAN DIVISION SRL
Str. Cluj nr. 45, Cam. 3, Sector 1, Bucharest 011491, Romania
CUI: 48208562 | J2023009546409
Email: [INSERT CONTACT EMAIL]
Phone: [INSERT PHONE NUMBER]