Privacy policy

Data controller

What data we collect

We only collect what we need in order to reply to you. Specifically:

• The details you fill in on the quote form: first and last name, email address, phone number (optional), city (optional), your message and the product you asked about.
• Technical data generated automatically when you visit: IP address, browser and device type, pages viewed and the time of the visit. This ends up in the server and content-delivery logs.
• Your browsing preferences: your cookie consent choice and the currency you selected for prices.

We do not ask for or process special categories of data (health, beliefs, ethnic origin and so on), and we do not collect payment details through this website.

Why we process this data, and on what basis

Every processing activity has a clear purpose and a legal basis under Regulation (EU) 2016/679 (GDPR):

• To answer your quote request and discuss the product you are interested in - basis: steps taken at your request prior to entering into a contract, Article 6(1)(b).
• To keep the site working and secure (technical logs, abuse and spam prevention) - basis: our legitimate interest, Article 6(1)(f).
• To use cookies and similar technologies that are not strictly necessary - basis: your consent, Article 6(1)(a), which you can withdraw at any time.
• To meet our legal obligations, for example in tax or accounting matters - basis: legal obligation, Article 6(1)(c).

How long we keep it

We keep quote requests and the related correspondence for 3 years from our last contact with you, so we can pick the conversation back up if you return. Technical server logs are kept for a short period, normally up to 12 months. Documents with accounting relevance are kept for the period required by law. Once those periods expire the data is deleted or anonymised.

Who we share it with

We do not sell your data and we do not use it for purposes unrelated to your enquiry. The following providers may access it, strictly in order to deliver their services to us:

• Our web hosting provider, whose servers run the site and the database.
• Cloudflare, which the site traffic passes through for security and loading speed.
• Our email service provider, through which we receive quote request notifications.
• Usercentrics, the platform we use to manage and record your cookie choice.
• Google, through Google Tag Manager, used to administer traffic measurement tools - loaded only if you consent.

We may also disclose data to public authorities where the law requires it.

Transfers outside the European Economic Area

Some of the providers above are companies outside the European Economic Area, or may store data outside it. In those cases the transfer relies on the safeguards set out in the GDPR, normally the standard contractual clauses approved by the European Commission or an adequacy decision.

Your rights

In relation to your personal data you have the following rights:

• Right of access - to find out what data we hold about you and receive a copy.
• Right to rectification - to correct inaccurate or incomplete data.
• Right to erasure - to ask us to delete the data, under the conditions set by law.
• Right to restriction of processing - to ask us to limit processing in certain situations.
• Right to data portability - to receive the data in a structured format or have us send it to another controller.
• Right to object - to object to processing based on our legitimate interest.
• Right to withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal.

You can exercise these rights by writing to us at info@wakeboat.ro. We reply within one month at the latest. If you believe we have infringed your rights, you may contact the Romanian National Supervisory Authority for Personal Data Processing (B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 Bucharest, anspdcp@dataprotection.ro) or the courts.

Data security

The site is served exclusively over an encrypted connection (HTTPS). Access to the admin panel, where quote requests are visible, is protected by account and password and limited to the team members who need that information.

Automated decisions

We do not make automated decisions and we do not carry out profiling that produces legal effects concerning you or similarly significantly affects you.

Changes to this policy

We may update this policy when the way the site works changes, or when legal requirements change. The applicable version is always the one published on this page, and the date it was last updated is shown at the top.