Privacy Policy

01Who we are

This website is operated by General Group Groza SRL ("Groza Group", "we", "us"), a European property group active in architecture, construction, modular homes, property maintenance and real estate development, with activities in București, Dublin and Paris.

For any question related to this policy or to your personal data, contact us at support@grozagroup.com or +373 60 906 294. General Group Groza SRL acts as the data controller for the personal data described below.

02What data we collect

• Account data — full name, email address, phone number, country, city, postal address, company name (if provided) and your language preference, collected when you create an account or complete your profile.
• Sign-in data — if you sign in with Google or Telegram, we receive your basic public profile from that provider (name, email address or Telegram identifier). We never receive your Google or Telegram password.
• Request data — the information you send through our contact and quote forms: type of service, description of your project and the contact details you provide.
• Subscription data — the Maintenance Art plan you select and its status. Payments are arranged by contract; we do not store card details on this website.
• Technical data — IP address, browser type and pages visited, kept in standard server logs for security and troubleshooting.
• Verification data — the one-time codes we email you are stored only in protected (hashed) form and expire after 15 minutes.

03Why we process your data

We process personal data only when we have a legal basis to do so under the EU General Data Protection Regulation (GDPR):

• To respond to your requests and prepare quotes — performance of pre-contractual steps (art. 6(1)(b) GDPR).
• To create and operate your client account, verify your email address and secure your sessions — performance of a contract and our legitimate interest in keeping the platform safe (art. 6(1)(b) and (f)).
• To contact you about an ongoing project or subscription by phone, email or WhatsApp — performance of a contract. This is why a valid phone number is required at registration.
• To send you news and offers — only with your consent (art. 6(1)(a)), which you can withdraw at any time from your account profile.
• To comply with accounting, tax and other legal obligations (art. 6(1)(c)).

04Sign-in with Google or Telegram

When you choose to sign in with Google or Telegram, the authentication happens on the provider's own platform under its own terms and privacy policy. We receive only the minimum profile information needed to identify you (your name and email address from Google; your name and Telegram identifier from Telegram). A phone number and, where Telegram is used, an email address are still requested by us, because we need a reliable way to contact you about your projects.

05Cookies

We use a small number of cookies that are strictly necessary for the website to work (session, language, theme and your cookie choice). Details, including how to accept or refuse them, are described in our Cookie Policy.

06How long we keep data

• Account data — for as long as your account exists, and up to 3 years after your last activity unless a longer period is required by law.
• Request and quote data — up to 3 years after the request is closed, so we can follow up on warranty and service history.
• Contractual and invoicing data — for the periods required by accounting and tax law (typically 5–10 years).
• Verification codes — 15 minutes.
• Server logs — up to 12 months.

07Who we share data with

We do not sell or rent your personal data. Data is shared only with: (a) service providers who help us run this website (hosting and email delivery), acting under contract and only on our instructions; (b) Google or Telegram, solely when you choose to sign in through them; (c) public authorities, where the law requires it. When data is transferred outside the European Economic Area, we rely on safeguards recognised by the GDPR, such as the European Commission's standard contractual clauses.

08Your rights

Under the GDPR you have the right to access, rectify and erase your personal data, to restrict or object to its processing, to data portability, and to withdraw your consent at any time without affecting prior processing. You can exercise most of these rights directly from your account, or by writing to us at support@grozagroup.com. We reply within one month.

If you consider that your rights have been infringed, you may lodge a complaint with your national supervisory authority — in Romania, the National Supervisory Authority for Personal Data Processing (ANSPDCP, www.dataprotection.ro).

09Security

Passwords are stored only as cryptographic hashes, verification codes are hashed and short-lived, sessions use secure HTTP-only cookies, and access to client data is limited to authorised staff. No internet transmission is entirely risk-free, but we apply industry practices to protect your data.

10Changes to this policy

We may update this policy as our services evolve; the date of the latest revision is always shown at the top of this page. Significant changes will be announced on the website. For any question, write to support@grozagroup.com.