This information explains what happens to your personal data when you use services provided by the website.

The operator Abac Proiect Energie S.R.L. processes personal data within this website in compliance with Regulation (EU) 2016/679 and the applicable legal provisions and with a desire to support your rights to the protection of personal data.

You can contact us using one of the methods here.

What categories of personal data do we collect?

On the one hand, your data is collected when you provide it to us. This could be, for example, data you enter in a contact form.

Other data is automatically collected by our IT systems when you visit the website. These are technical, traffic data, collected automatically when accessing pages on the site or filling out forms on the site.

Why do we collect the data?

  • To ensure the security of the electronic system and its smooth functioning
  • To provide our services by providing support and answers to your questions submitted using the contact form.

You will not be contacted for marketing purposes if you send us messages via the contact form.

We do not send your data to other parties.

Contact form

The data transmitted by the data subject, over 18 years old, through the contact form are processed according to the following legal grounds:

  • if the data refer to the execution of a contract or the fulfillment of pre-contractual tasks, Article 6 paragraph 1 letter b)
  • if you have been asked and given your consent (which you can revoke at any time), Article 6 paragraph 1 letter a)
  • in any other case, we apply Article 6 paragraph 1 letter f) as it is our legitimate interest to process requests addressed to us, ensuring that we take measures to guarantee a balance between the interests of the operator and the fundamental rights and freedoms of the data subject .

The data entered will be kept, in compliance with any applicable legal provisions regarding data retention periods:

  • until the processing of your request is completed or if the purpose of data storage is no longer applicable
  • until the data subject requests to delete them or revoke consent


The website stores personal data in cookies, according to the cookie policy.

The website operator has a legitimate interest in the storage of cookies necessary for the technically error-free and optimized provision of its services.

If consent has been requested for the storage of cookies and comparable recognition technologies, the processing is carried out exclusively on the basis of this consent (art. 6 para. (1) letter a) of the Regulation); consent can be revoked at any time by deleting cookies from the browser or accessing the link Cookie Policy and following the instructions there.

Server log files

Data on page accesses on the website are automatically stored:

  • Information about the client used to access (browser type and version, operating system type and version used; host name of the accessing computer)
  • Referrer URL (HTTP referrer)
  • IP address from where the page is accessed
  • Requested URL and time of request (request).

These websites may collect data about you, use cookies, embed additional tracking from third parties, and monitor your interaction with embedded content, including tracking your interaction with embedded content if you have an account and are logged in in that website.

This data will not be merged with other data sources.

This data is collected based on our legitimate interest to ensure the proper functioning and continuous optimization of the site.

Embedded content from other websites

The site does not embed content from other websites. Fonts from external sources are used.

Security measures are applied to implement policies to block content from sources other than by establishing appropriate access rules.

How long we keep your data

We will keep your personal data for the period of time necessary to comply with the legal obligations specific to our field of activity or according to the applicable statute of limitations, to comply with the archiving obligations imposed by the applicable legislation (for example, that specific to the financial-accounting field) or according our legitimate interests (for example, for evidentiary purposes).

What rights do you have regarding your data?

Regulation (EU) 2016/679 offers data subjects a series of rights:

To exercise these rights it is necessary to send us a request using our contact details in this policy.

We recommend that you send us the request to our email address, and we will also respond electronically.

To these requests in accordance with the Regulation, received from the persons concerned, we aim to respond free of charge and without undue delay and within a maximum of one month from the receipt of the request. In exceptional or complex cases, we will communicate relevant information regarding the delay within one month, as well as a new deadline in compliance with the response times provided by law for extensions.

If the request is manifestly unfounded or excessive, for example repetitive, then we have the right to charge or refuse to process such a request.

Depending on the type of request, to protect the confidentiality of personal data, if we have reasonable doubts about the identity of the person who submitted the request, we will request additional information to confirm the identity before processing the request.

In the processing for which consent has been expressly expressed, the data subject can revoke it at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to opposition (art. 21)

Data subjects may object to the processing of their data for particular reasons when the data is processed in our legitimate interest and the interests, rights and freedoms of the data subject prevail over this interest and the data is not necessary for legal action.

You can also object at any time, without reason and free of charge, to processing for direct marketing purposes (including the creation of profiles created for this purpose).

The right not to be the subject of a decision based exclusively on automatic processing (art. 22)

In automated decision-making processes where the decision produces legal effects concerning or similarly and significantly affects the data subject, the latter has the right to request human intervention in automated decision-making processes (including profiling), to express your point of view and to appeal these decisions.

The right to file a complaint with a supervisory authority (art. 77)

According to art. 12, if you consider that we have not taken the appropriate measures for your request, you have the right to file complaints with the competent authorities and pursue appeals in court.
We hope to be able to resolve any of your requests satisfactorily, but you should be aware that individuals affected by violations of their personal data rights have the right to lodge complaints with the competent supervisory authority. In Romania, the competent supervisory authority is:

National Supervisory Authority for the Processing of Personal Data

G-ral Blvd. Gheorghe Magheru no. 28-30, Sector 1, postal code 010336, Bucharest, Romania
Telephone: +40.318.059.211 or +40.318.059.212;

The right to data portability (art. 20)

The data subjects have the right to request a copy of the data provided to the operator in an electronic format, structured and used only if the processing:

  • is based on consent or is based on a contract
  • and it is done by automatic means

If it is technically feasible, the transmission of data to another operator can also be requested.

Right of access (art. 15)

Data subjects have the right to request us regarding their personal data:

  • confirmation of data processing
  • a copy of this data
  • communication of processing information listed here and contained in this policy

The right to be informed (art. 13 and art. 14)

The persons concerned have the right to be informed about the identity and contact details of the operator and the data protection officer, the purposes and legal grounds of the processing, the legitimate interests pursued by the operator or third parties, the recipients of the data, our intention to transfer the data internationally, the period of data storage, automated decision-making processes, the source of the data and the rights it has.

Right to rectification (art. 16)

Data subjects can request the correction or completion of their data when it is inaccurate.

The right to erasure (“the right to be forgotten” – art. 17)

Data subjects have the right to obtain data deletion, without undue delay, when:

  • the data is no longer necessary to fulfill the purposes of collection or processing
  • the processing was based on consent and consent has been withdrawn
  • the person concerned objects to the processing under conditions provided by law
  • the data was processed illegally
  • deletion is necessary for the operator to comply with its legal obligations

According to the law, no data will be deleted that is necessary for the operator to comply with its legal obligations or if it is necessary in court.

The right to restrict processing (art. 18)

The persons concerned have the right to request the restriction:

  • data processing whose accuracy is contested for a period in which the operator can verify their accuracy,
  • illegal data processing for which the data subject does not wish to be deleted, or
  • data processing that is no longer necessary for the purposes of collection, but is required in court by the data subject
  • processing for which a request to exercise the right of opposition has been submitted and the operator checks which rights and interests prevail.

If restriction of processing is requested, apart from storage, the data may be used:

  • with the data subject’s consent
  • or if they are needed in court
  • or to protect the rights of another natural or legal person.


Our hosting service provider takes the security and smooth operation of hosted sites seriously and holds, among others, ISO 27001, InfoSec and ITIL certifications.

To whom do we transmit the data?

As appropriate, we may transmit or provide access to certain of your personal data to the following categories of recipients:

  • partners (for example, for the execution of subcontractor/collaborator work)
  • IT service providers. In exceptional situations this may be necessary to solve problems.

If we are under a legal obligation or if it is necessary to defend a legitimate interest, we may also disclose certain personal data to public authorities.

We ensure that access to your data by third parties under private law is carried out in accordance with the legal provisions on data protection and information confidentiality, based on contracts concluded with them.

Currently, we store and process your personal data on the territory of Romania and we do not transfer your data either internally or internationally.

Contact Information

Abac Proiect Energie S.R.L.

No. Reg. Com. J23/1170/2012
ID: RO16912291

You can contact us for additional information or with requests:

In writing to the address: Strada Răsăritului no. 38, Buftea, Jud. Ilfov
By phone, at number 021 352 93 74
Electronically at
Or using the contact form

How do we protect data?

We want to ensure the security of personal data by implementing appropriate technical and organizational measures.

This site also uses SSL encryption to protect the privacy of communications between your browser and our servers. You can recognize an encrypted connection by changing your browser’s address line from “http://” to “https://” and by the lock symbol in your browser line.

Periodic updates

The information in this policy will be revised periodically. To stay informed, please consult the content of the privacy policy periodically.

Last update: 30.04.2024