FORTZA STEEL / EN
Privacy
Controller, purposes, legal bases and rights concerning information submitted through FORTZA STEEL forms.
Version 2026-11-04
How contact details and technical documents submitted for FORTZA STEEL projects are handled. Document for the new platform, being prepared for launch.
1. Controller and privacy contact
FORTZA STEEL is the metal-processing division of FORTZA.RO S.R.L., Romanian tax ID 9947416, registration J1997000531324 (previously published as J32/531/1997). Registered office: Str. Gării nr. 10, 551010, Mediaș, Sibiu, Romania. Industrial site: Șoseaua Sibiului nr. 31–33, Mediaș, Sibiu. Privacy inquiries: net@fortza.ro. Commercial contact: office@fortza.ro, +40 269 838 450.
2. Information collected
Inquiry forms collect name, email, applicant type, company details for businesses and project description. Phone, country, tax ID, address, registration, technical details and drawings are optional. A valid Romanian tax ID triggers an ANAF lookup cached for 24 hours; company fields remain editable. Newsletter signup separately records email, consent and confirmation. Do not send identity documents or confidential information in chat.
3. Purposes and legal bases
Inquiry processing supports replies and quotations, based on requested precontractual steps for individuals or legitimate interests in B2B relationships. Acknowledging this notice does not authorize marketing. Newsletter and analytics each require separate consent, which may be withdrawn. Newsletter subscriptions activate only after email confirmation. Company prioritization also uses public ANAF status, age, turnover, headcount and financial results, subject to human review. An indicative HOT/WARM/COLD project score helps staff prioritize replies; it does not automatically determine whether a quotation is accepted or its terms.
4. Technical information and security
Infrastructure processes connection information for delivery and security. Rate limits use HMAC identifiers rather than raw IP storage. Cloudflare Turnstile checks submissions; Supabase stores inquiries, acknowledgements and sync states. Technical documents remain separate from public images and downloads are blocked until scanning. Staff review commercial prioritization; no solely automated decisions with legal effects are made.
5. Recipients
Integrated suppliers are Vercel (hosting), Supabase (database and authentication), Cloudflare R2 and Turnstile (files and security), Pipedrive (CRM), Resend (email), Google Tag Manager (measurement after consent) and Anthropic (AI assistant). Chat questions and relevant public site information are sent to Anthropic; this application does not save conversations to its database. Do not include personal or confidential information in chat. Inquiry drawings are not forwarded to AI, Pipedrive or email. Internal access is limited to authorized staff.
6. Processing outside the EEA
Selecting a European region does not establish that all access remains within the European Economic Area. Before suppliers are enabled, contractual entities, locations, subprocessors and transfer mechanisms must be checked. Transfers require an applicable adequacy decision or appropriate safeguards, such as standard contractual clauses and necessary additional measures. Information and copies of relevant safeguards can be requested from the privacy contact. The new platform’s contractual configuration is still being prepared.
7. Retention
For inquiries and commercial correspondence, this working document uses the period published by FORTZA as a reference: no more than five years after the last interaction. Information no longer needed is removed sooner. Data forming part of a contract, statutory record or dispute is retained only for the purpose and period applicable to that case; this does not automatically extend every inquiry. Temporary files and technical logs need separate minimized periods. Enforcement across CRM, storage, logs and backups must be completed before the new platform launches.
8. Your rights
Subject to GDPR conditions, you may request access, correction, erasure, restriction and, where applicable, portability. You may object to legitimate-interest processing. Consent can be withdrawn for processing relying on consent, without affecting earlier lawfulness. Write to net@fortza.ro; only necessary identity checks may be requested. Requests are answered within one month; a permitted two-month extension is notified within the first month. You may complain to the Romanian supervisory authority, ANSPDCP, and seek a judicial remedy. ANSPDCP — submitting a complaint: https://www.dataprotection.ro/?lang=ro&page=Transmiterea_plangerilor_catre_ANSPDCP
9. Required information and updates
Fields marked * are needed to handle the inquiry; the form cannot be sent without them. Optional fields can be left blank. A drawing is not required for initial contact. Updates are published here with a version date. This version describes the new platform being prepared; suppliers, transfers and retention procedures must be finalized before activation.
LET’S MAKE IT HAPPEN
Your next project starts with a conversation.
Share your technical requirements. We will identify the appropriate process together.