Website Privacy Policy

1. Responsibility for data and scope of this policy

VOLTRELLI S.R.L., with its registered office at Municipiul Arad, Str. Cuza Vodă nr. 53, județul Arad, Romania, Trade Register number J2026037586003, unique registration code 54858667, is the controller of data processed to administer voltrelli.com and handle enquiries addressed to the company through this website. For enquiries, use the contact form. The controller’s email address and other contact details are available in the Legal Notice.

This policy concerns the website; it does not describe mobile application use or charging-session processing in detail. Those services have their own notices and conditions for the relevant provider and usage context. Visiting the website does not require a driver account or disclosure of charging-session data.

2. Data we process

Forms and correspondence may provide us with your name, email, telephone number, company, enquiry subject and message, together with other information you choose to send. If you contact us about recruitment, we may receive professional information relevant to that enquiry.

Operating and protecting the website involves processing technical data such as IP address, browser and device information, server requests, access time and anti-abuse signals. Language preferences and authentication data for authorised administrative users are processed when those functions are used.

Fields marked as required are necessary to handle the enquiry; without them we may be unable to respond. Do not send full card details, passwords, identity documents or sensitive information that is unnecessary for your enquiry.

3. Purposes and legal bases

We use enquiry data to respond, prepare information, quotations or demonstrations, and manage correspondence. The legal basis is taking steps you request before entering into a contract, where you are the prospective contracting party, or our legitimate interest in communicating and managing professional relationships, including with company representatives.

For website operation, access control, abuse prevention and troubleshooting, we rely on our legitimate interest in maintaining a secure, functional service. Where processing is required by law, the basis is the relevant legal obligation. For optional functions or communications requiring consent, we request it separately; submitting a form is not consent to marketing.

4. Where data goes and who may receive it

Form enquiries may be recorded in the website database and handled through correspondence. Access is intended for authorised people who need the data for the purposes above.

We use technical services for hosting, databases, communications and security. Website infrastructure includes Hostinger and Supabase, and the form includes Cloudflare Turnstile, which processes technical signals to detect automated traffic. Cloudflare separately describes processing to improve Turnstile in its privacy notice.

Relevant data may be shared with an identified distributor or partner where you specifically request contact with it or this is necessary for your enquiry, with appropriate information provided to you. Data may also be shared with advisers, authorities or courts where necessary and permitted by law. A partner that determines its own processing purposes is responsible for that activity under its own notice.

5. International providers

Using international providers may involve access to or processing of data outside the European Economic Area. Such processing must comply with the rules governing international transfers, including, as applicable, an adequacy decision or standard contractual clauses and necessary supplementary measures.

You may request information about recipients, processing locations and safeguards applicable to your data through the contact form. Selecting a website language or region does not, by itself, determine where data is processed.

6. Cookies, preferences and external content

The website uses technologies for functionality, preferences and security. The language preference may be stored in the voltrelli_lang cookie, configured for up to one year from when it is set; you can delete it in your browser. Administrative areas may use session mechanisms for authentication.

Maps, videos and other external resources may transmit your IP address and technical data to the relevant provider when loaded. For non-essential technologies requiring consent, a choice must be offered before activation. Browser settings let you control cookies, although blocking certain functions may affect website use. This policy does not itself constitute consent to optional technologies.

7. How long we retain data

Retention depends on purpose: for enquiries, the time needed to resolve them and follow up relevant correspondence; for any resulting contractual relationship, the period needed for performance and related legal obligations; and for complaints or disputes, the time needed to resolve them and the applicable legal time limits.

Technical and security data is retained only as necessary for operation, troubleshooting and incident investigation. Retention criteria apply to all relevant copies, including the database, email and backups. When no purpose or obligation justifies retention, data must be deleted or anonymised. You may ask for clarification of the period applicable to your enquiry.

8. Your rights

Subject to the GDPR, you may request access, rectification, erasure, restriction of processing or portability, and object to processing based on legitimate interests. These rights apply within the limits and circumstances provided by law. You may withdraw consent at any time without affecting lawful processing before withdrawal.

You may submit your request through the contact form, stating in your message that it concerns personal data, or through the email address published in the Legal Notice or by post to the company’s registered office. Use of the form is not mandatory and no account is required. Where there are reasonable doubts about your identity, we may request the additional information necessary to verify it. We respond without undue delay and within one month of receiving the request; where the complexity or number of requests justifies a lawful extension of up to two additional months, we inform you within the first month and explain the reason.

You may complain to ANSPDCP or another supervisory authority competent under the GDPR. Contacting us does not require you to waive other remedies.

9. Security and updates

We apply technical and organisational measures proportionate to risk to protect data and access to it. No transmission or infrastructure can be guaranteed entirely risk-free.

This policy may be updated to reflect changes to the website or legal requirements. The date of the published version will be displayed, and additional information or consent will be provided or obtained where required. For questions about this policy, use the contact form. Alternative contact details are available in the Legal Notice.