Privacy policy

This page explains what personal data we process through this site, why, how long we keep it and what you can ask of us. Last updated: 25 September 2026.

Who processes the data

The controller is Rosilo, registered office at Bulevardul 15 Noiembrie, nr. 84, Brașov, România, tax ID 38948741, trade register no. J2018000477081.

For anything to do with your data, write to office@rosilo.ro or call 0040732953072.

What we collect, and when

The site asks you for nothing until you fill in the quote form. There are no user accounts, no behavioural tracking and no profiling.

Through the quote form you give us:

• your name and, if you wish, your company;
• your phone number and email address, so we can reply;
• the site location, type of work, capacity and the deadline you have in mind;
• anything else you write in the message field.

The first two are required — without them we cannot come back to you. The rest are optional; they help us estimate faster but are not necessary.

Through the form on the careers page you give us your name, phone number, email address, trade and, if you wish, your years of experience, your availability to travel, a message and your CV file. Everything you write there reaches us; we do not ask for, and we ask you not to send, data about health, beliefs, trade union membership or other special categories.

The web server records, as any web server does, the IP address and the time of the request in its technical logs. These are used only to keep the site running and secure.

Why, and on what legal basis

We use the form data to prepare and send the quote you asked for and to discuss the job. The legal basis is taking steps at your request before entering into a contract — Article 6(1)(b) of Regulation (EU) 2016/679.

We use the careers form data to assess your application and to contact you. The legal basis is again Article 6(1)(b) — steps taken at your request before any employment contract.

Server logs are processed under our legitimate interest in keeping the site running and protecting it from abuse — Article 6(1)(f).

We do not use the data for marketing. We will not add you to a mailing list and will not send you anything you did not ask for.

Who else sees it

We do not sell or rent personal data, and we do not pass it to anyone for marketing purposes.

Access is limited to our own staff who handle quotations and hiring, and to the suppliers who host the site and our mailbox, strictly as far as their job requires. They process the data on our behalf, under contract.

The forms are delivered by FormSubmit, a service that takes what you fill in and sends us the content by email. It shows the data to nobody else and keeps it for 30 days at most, then deletes it. We receive it in our mailbox, and from there the rules below apply.

We may also disclose data to an authority where the law requires it.

How long we keep it

Quote requests that do not lead to a job are deleted 2 years after the last exchange. If we do end up working together, the data moves into the project file and is kept for as long as accounting and tax law require — generally 10 years.

Applications we do not take further are deleted 1 year after the last exchange. If you would like them deleted sooner, write to us and we will do it.

Server logs rotate and are deleted within 12 months at most.

Your rights

In relation to your data, you may at any time request:

• access — to be told what data we hold about you;
• rectification — to have anything wrong corrected;
• erasure — to have it removed, where we no longer have a legal reason to keep it;
• restriction — to have processing paused while something is clarified;
• portability — to receive it in a format you can take elsewhere;
• objection — to object to processing based on our legitimate interest.

Write to office@rosilo.ro and we will reply within 30 days at the latest.

If you are not satisfied with the answer, you may complain to the Romanian data protection authority — dataprotection.ro, B-dul G-ral. Gheorghe Magheru 28-30, Bucharest — or go to court.

Transfers outside the European Union

What you fill in goes through FormSubmit, whose service is not hosted in the European Union. The transfer relies on Article 49(1)(b) of the Regulation — it is necessary to act on your request, because without it the message does not reach us. If you would rather it did not pass through them, write or call us directly; both are on the contact page.

A second case arises if you start a video in an article: the request then reaches YouTube (Google Ireland Limited), which may transfer data outside the EU under standard contractual clauses. Videos do not load until you press play.

Children

This site is aimed at companies and professionals. We do not knowingly collect data from anyone under 16.

Changes

If we change how we handle data, we update this page and the date at the top. This version is dated 25 September 2026.