PRIVACY POLICY
of the website www.evaris.ro
Version 1 – effective from 02.11.2026
1. Who we are
The website www.evaris.ro belongs to S.C. EVARIS CONSULTING S.R.L., with its registered office at București, str. Târgu Neamț nr. 2A, bl. B31, sc. B, et. 5, ap. 59, sector 6, J40/12731/03.07.2007, CUI 22043576 (“Evaris”, “we”). Evaris is the controller of the personal data processed through the website.
You can contact us with any questions about your data at office@evaris.ro or by telephone at 0723 335 436.
2. At a glance
– The website does not use cookies and does not use analytics or tracking tools (for example Google Analytics or Facebook Pixel).
– The website does not load resources from third parties: fonts, images and scripts are hosted on our domain.
– The quote request form does not send data automatically: it prepares an email that you send yourself, from your own email application.
– The “Ask Evaris” assistant and the legislation search work only in your browser; the text you enter is not transmitted to us.
3. The quote request
What data: first and last name, company, email address, telephone number (optional), number of employees, location/ company sites, service required and description of activities.
How it reaches us: the form composes the message in your browser. The “Open email” button opens the message in your email application, addressed to office@evaris.ro; the data reaches us only if you send the email yourself. Alternatively, you can copy the message and send it as you wish.
Why: to reply to you and send you a quote for OHS/ emergency preparedness services.
Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR); for the data of a company’s contact persons – our legitimate interest in responding to the requests received (Article 6(1)(f) GDPR).
How long: if a contract is concluded, the data is kept for its duration and afterwards in accordance with legal obligations (for example accounting obligations). If no contract is concluded, the email and the data it contains are deleted no later than 1 year after the last correspondence.
Please do not include data about anyone’s health or private life in the description of activities; we do not need it to prepare a quote.
4. Temporary storage in the browser
If you change the website’s language while completing the quote request, the completed fields are temporarily stored in your browser (sessionStorage), so that you do not lose them. The draft remains only on your device, is not transmitted to us, is used only if it is less than 30 minutes old and is deleted after it has been reloaded. This storage is strictly necessary for the function you requested and is not a cookie.
5. “Ask Evaris” and the legislation search
Questions typed in “Ask Evaris” (maximum 220 characters) and the terms searched in the legislation are processed exclusively in your browser and receive predefined responses. They are not transmitted to Evaris or to an artificial intelligence service and are not stored.
6. Server logs
As with any website, the server hosting www.evaris.ro may automatically record technical data about visits (IP address, date and time, page accessed, browser type), for the website’s operation and security. The basis is our legitimate interest in ensuring the website’s security (Article 6(1)(f) GDPR). This data is kept for the period determined by the settings of the hosting provider Webdev, and is not used to identify or profile you.
7. Who we disclose data to
We do not sell or rent data. It may be disclosed only to:
– the website hosting provider (Webdev) and the email service provider for office@evaris.ro (Google – Google Workspace), who act on our instructions;
– the accounting services provider, if a contract is concluded;
– public authorities, only when the law requires us to do so.
Emails received at office@evaris.ro are hosted by Google, which may also process data outside the European Economic Area, including in the United States. These transfers take place on the basis of the European Commission’s adequacy decision on the EU–U.S. Data Privacy Framework, under which Google is certified, and the standard contractual clauses approved by the European Commission, included in the data processing agreement concluded with Google. No other transfers outside the European Economic Area take place.
8. External links
The website contains links to legislative sources and other websites. When you follow them, you enter websites that have their own privacy policies, for which Evaris is not responsible.
9. Your rights
You have the right of access to data, rectification, erasure, restriction of processing, portability and objection to processing based on legitimate interest. To exercise these rights, write to us at office@evaris.ro; we will reply within one month. You have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (www.dataprotection.ro).
10. The OHS/ emergency preparedness digital platform
This policy concerns only the website. The data processed in the digital platform for training and managing OHS/ emergency preparedness documents is described in the information notice made available to workers by their employer and in the contracts concluded with clients.
11. Changes
We may update this policy when the website’s functions change. The current version and its date are displayed at the beginning of the page.