Last updated: 27 October 2026

Privacy Policy

This policy explains what personal data ACO Technic collects through this website, why, and what rights you have under the EU General Data Protection Regulation (GDPR, Regulation 2016/679).

1. Who is responsible for your data

The controller is ACO Technic, Str. Radu Voda 10 D, Berceni, Ilfov, Romania, VAT no. RO49062359.

To contact us about your data, use the contact form and choose “Question”. We usually answer data requests within 1–2 working days, and always within the legal limit of one month.

2. What data we collect

• Contact form: your name, e-mail address, your country, the machine type you choose, and the text you write (a part, a symptom or a question). The message we receive also shows your approximate country, when our network provider can determine it from your connection, and your browser's time zone, so that we know when to reply. We compare it with the country you select, only to spot spam and fraudulent requests. We do not include your IP address in the message.
• ACO Assistant (chat window): a guided version of the contact form with fixed questions. It is not an AI and does not interpret free text. It collects the same data as the contact form, keeps your answers only in your browser's memory until you press send, and sends them the same way.
• Server logs: our hosting provider may record technical data such as IP address, date and time, and the pages requested, to keep the site secure and running. We do not use these logs to identify you.

This website sets no cookies, uses no analytics or advertising trackers and loads no third-party scripts, fonts or embedded content. For that reason there is no cookie consent banner. A small notice tells you this; if you press OK, your browser remembers that choice as one local setting that is never sent to us.

3. Why we use it, and on what basis

• Answering your request (a repair, a spare part, a complete head or a question): your consent, which you give by ticking the box in the form (Art. 6(1)(a) GDPR).
• Preparing and carrying out a contract, if your request leads to a quote or an order: steps taken at your request before a contract and performance of that contract (Art. 6(1)(b)).
• Accounting and tax records, if you become a customer: our legal obligations (Art. 6(1)(c)).
• Security of the site: our legitimate interest in protecting it (Art. 6(1)(f)).

We do not make automated decisions about you and we do not do profiling. We do not sell your data and we do not use it for marketing unless you ask for it separately.

4. Who receives it

Only the people at ACO Technic who handle requests, and the service providers that run the website and our e-mail: our website hosting provider, DataHost (datahost.ro, Romania), and our e-mail provider. They process data on our behalf under a data processing agreement. If a provider is located outside the EU/EEA, the transfer is covered by approved safeguards such as the EU Standard Contractual Clauses. We disclose data to authorities only when the law requires it.

5. How long we keep it

• Requests that do not lead to a contract: for 12 months after our last contact, then deleted.
• Customer records and invoices: for the period required by Romanian accounting and tax law.
• Server logs: for the period set by our hosting provider, DataHost, normally up to 30 days.

6. Your rights

You can ask us at any time to:

• give you access to the data we hold about you, and a copy of it;
• correct data that is wrong or incomplete;
• delete your data (“right to be forgotten”) where there is no reason for us to keep it;
• restrict how we use your data, or object to a use based on our legitimate interest;
• send your data to you or to another company in a common format (portability);
• withdraw your consent. This does not affect what we did before you withdrew it.

To use a right, contact us as described in section 1. We answer within one month. We may ask you to confirm your identity first.

You also have the right to complain to the data protection authority of the country where you live or work, or of the country where we are established: in Romania, the National Supervisory Authority for Personal Data Processing (ANSPDCP), dataprotection.ro.

7. Providing your data is your choice

You do not have to use the form. If you do, we need your name and e-mail address to reply; without them we cannot answer.

8. Security

The form is sent over an encrypted connection (HTTPS) and the messages reach only the mailboxes of the staff who handle requests. We do not keep a separate database of form submissions.

9. Changes

If we change this policy, the new version appears on this page with a new date.