Last updated: [06 May 2026]

SC RIGZEN GROUP SRL / RigZen Group respects your privacy and is committed to protecting personal data processed through this website and through our communication channels.

This Privacy Policy explains what personal data we collect, how we use it, the legal basis for processing, how long we keep it, who we may share it with, and what rights you have under the General Data Protection Regulation (GDPR).

The GDPR is based on principles including lawfulness, fairness and transparency, purpose limitation, data minimisation, storage limitation, accuracy, integrity and confidentiality, and accountability.

1. Data Controller

The data controller for personal data processed through this website is:

SC RIGZEN GROUP SRL
Trading name: RigZen Group
Address: Oituz 94, Săcele 505600, Brașov, Romania
CUI / VAT: 51594820
Registration No.: J2025025364003
Website: www.rig-zen.com
Email: info@rig-zen.com
Phone: +40 736 336 895 / +40 745 050 688

For privacy-related questions or requests, please contact us at:

info@rig-zen.com

2. What Personal Data We Collect

We may collect personal data when you use our website, contact us, request a quotation, send project details, or communicate with us by email, phone, WhatsApp, or website forms.

Depending on your interaction with us, we may collect:

• name and surname

• company name

• job title or department, if provided

• email address

• phone number

• project location

• service requested

• message content

• photos, drawings, documents, or project files you choose to send

• information about site conditions, access restrictions, hazards, or project requirements

• communication history with RigZen

• technical website data, such as IP address, browser type, device type, pages visited, cookie identifiers, and similar usage data, where cookies or analytics tools are active

Please do not send unnecessary personal, confidential, or sensitive information through website forms.

3. How We Collect Personal Data

We may collect personal data:

• when you complete a contact or quotation form

• when you email, call, or message us

• when you send project photos, drawings, or documents

• when you request a quotation or service discussion

• when you interact with our website

• when cookies or analytics tools collect technical website data, subject to the website settings and cookie consent requirements

4. Why We Use Personal Data

We process personal data for the following purposes:

• responding to inquiries

• preparing quotations or service discussions

• reviewing project requirements, photos, drawings, site information, or access conditions

• communicating with clients, suppliers, partners, and project contacts

• planning and delivering agreed services

• managing safety, access, technical, and operational communication related to projects

• maintaining business, contractual, tax, accounting, and administrative records

• improving website performance and user experience

• protecting the security of our website, systems, communications, and business operations

• complying with applicable legal obligations

5. Legal Basis for Processing

We process personal data only where we have a lawful basis under GDPR.

Depending on the situation, the legal basis may include:

Pre-contractual steps or contract performance
When we respond to a quotation request, discuss a project, prepare an offer, or provide agreed services.

Legal obligation
When we must keep or process certain information for accounting, tax, legal, or regulatory reasons.

Legitimate interests
When processing is necessary for normal business communication, responding to inquiries, managing client relationships, protecting website security, improving services, or handling project-related administration, provided your rights and interests do not override those interests.

Consent
Where consent is required, such as for certain cookies, analytics, optional marketing communication, or other consent-based processing.

The European Commission explains that individuals have rights over their personal data under GDPR, and organisations must inform people clearly about how their data is processed.

6. Project Files, Photos, and Drawings

If you send project photos, drawings, documents, or technical information, we use them only for the purpose of reviewing your request, preparing a quotation, discussing the project, planning the service, or performing the agreed work.

Please make sure you have the right to share any files you send to RigZen, especially if they include personal data, third-party information, site security details, confidential drawings, or client-owned documents.

We may share project files only where necessary with team members, partners, subcontractors, professional advisers, or service providers involved in reviewing or delivering the requested service.

7. Cookies and Similar Technologies

Our website may use cookies and similar technologies for:

• website operation

• security

• remembering preferences

• analytics and performance measurement

• improving user experience

• marketing or advertising tools, if enabled

Some cookies may be necessary for the website to function. Other cookies, such as analytics or marketing cookies, may require your consent depending on the tools used and applicable law.

Cookie settings must reflect the actual cookies and tracking tools active on the Wix website. Visitors should be able to manage cookie preferences where required.

8. Who We Share Personal Data With

We do not sell personal data.

We may share personal data only where necessary with:

• website hosting and platform providers, including Wix

• email, IT, cloud, security, communication, or analytics providers

• accounting, tax, legal, insurance, or professional advisers

• project partners, subcontractors, or suppliers where necessary for the requested service

• banks or payment providers where relevant to payments

• public authorities, courts, regulators, or law enforcement bodies where required by law

• client representatives or site/HSE contacts where necessary for project coordination

Each sharing activity should be limited to what is necessary for the relevant purpose.

9. International Data Transfers

Some service providers, including website, hosting, email, analytics, cloud, communication, or business software providers, may process personal data outside Romania or outside the European Economic Area.

Where international transfers occur, they should be handled according to applicable GDPR requirements and appropriate safeguards, such as adequacy decisions, standard contractual clauses, or other lawful transfer mechanisms.

This section should be checked against the actual providers and tools used by RigZen.

10. How Long We Keep Personal Data

We keep personal data only for as long as necessary for the purpose for which it was collected.

Typical retention depends on the data type and context, for example:

• contact inquiries: for the period needed to respond and manage follow-up

• quotation and project communication: for the period needed to manage the commercial or project relationship

• contracts, invoices, and accounting records: for the period required by applicable accounting and tax law

• project documentation: for the period needed for service records, warranty, dispute prevention, legal obligations, or legitimate business needs

• cookie and analytics data: according to the cookie settings and tool retention periods

When personal data is no longer needed, we delete it, anonymise it, or securely archive it where retention is legally or commercially necessary.

RigZen should define exact internal retention periods before final publication.

11. Data Security

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, disclosure, or destruction.

These measures may include access controls, secure communication practices, limited access to project files, platform security tools, and internal handling procedures.

However, no website, email, cloud service, or online transmission method is completely secure. Please avoid sending unnecessary sensitive or confidential information through website forms.

12. Your GDPR Rights

Subject to the conditions and limits under GDPR, you may have the right to:

• receive information about how your personal data is processed

• access your personal data

• request correction of inaccurate or incomplete data

• request deletion of your personal data

• request restriction of processing

• object to certain processing

• request data portability

• withdraw consent where processing is based on consent

• object to automated decision-making or profiling, where applicable

• lodge a complaint with a supervisory authority

The European Commission lists these rights as part of the GDPR data protection rights framework.

To exercise your rights, contact us at:

info@rig-zen.com

We may need to verify your identity before responding to certain requests.

13. Complaints

If you believe your personal data has not been handled properly, please contact us first so we can review your request.

You also have the right to lodge a complaint with the Romanian data protection authority:

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal
ANSPDCP

ANSPDCP states that complaints may be submitted in writing, in Romanian or English, and may be filed at the authority’s registry, by post, by email, or through the online complaint form available on its website.

14. Automated Decision-Making

RigZen does not use website visitors’ personal data for automated decision-making that produces legal or similarly significant effects.

If this changes, this Privacy Policy will be updated.

15. Marketing Communications

RigZen may send marketing communications only where there is an appropriate legal basis, such as your consent or another lawful basis allowed by applicable law.

You can ask us to stop sending marketing communications at any time by contacting:

info@rig-zen.com

If RigZen does not currently send newsletters or marketing emails, this section can be kept as a future-safe clause or removed.

16. Links to Third-Party Websites

Our website may contain links to third-party websites, social media platforms, partner websites, or external resources.

We are not responsible for the privacy practices, security, or content of third-party websites. Please review their privacy policies before sharing personal data with them.

17. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our website, services, tools, legal requirements, or data processing practices.

The latest version will be published on this page with the updated date.

18. Contact

For questions about this Privacy Policy or the processing of your personal data, contact:

SC RIGZEN GROUP SRL / RigZen Group
Oituz 94, Săcele 505600, Brașov, Romania
Email: info@rig-zen.com
Phone: +40 736 336 895 / +40 745 050 688