Privacy Policy

01Who we are

This website is operated by General Group Groza SRL ("Groza Group", "we", "us"), a property group active in architecture, construction, modular homes, property maintenance and real estate development.

For any question related to this policy or to your personal data, contact us at support@grozagroup.com or +373 60 906 294. General Group Groza SRL acts as the data controller for the personal data described below.

02What data we collect

• Contact data — name, email address, phone number, country, city and project information that you voluntarily provide in a form or chat.
• Chat data — conversation messages, the page where the chat began, IP address, browser/device description and optional contact details, used to respond and prevent abuse.
• Request data — the information you send through our contact and quote forms: type of service, description of your project and the contact details you provide.
• Technical data — IP address, browser type and pages visited, kept in standard server logs for security and troubleshooting.
• Administrator security data — authorised staff accounts use password and time-based two-factor authentication. There is no public client account.

03Why we process your data

We process personal data only when we have a legal basis to do so under the EU General Data Protection Regulation (GDPR):

• To respond to your requests and prepare quotes — performance of pre-contractual steps (art. 6(1)(b) GDPR).
• To protect the website, prevent abuse and secure restricted administrator access — our legitimate interest in keeping the platform safe (art. 6(1)(f)).
• To contact you about a request or project by phone, email or WhatsApp — pre-contractual steps or performance of a contract. A phone number is optional unless needed for your chosen contact method.
• To send news and offers — only with your consent (art. 6(1)(a)), which you can withdraw by contacting us.
• To comply with accounting, tax and other legal obligations (art. 6(1)(c)).

04Public accounts

This website does not offer public registration, social sign-in or a client account. The restricted administrator area is available only to authorised staff.

05Cookies

We use a small number of cookies that are strictly necessary for the website to work (session, language, theme and your cookie choice). Details, including how to accept or refuse them, are described in our Cookie Policy.

06How long we keep data

• Administrator access and security logs — while access is authorised and for a limited period afterwards where required for security or legal compliance.
• Request and quote data — up to 3 years after the request is closed, so we can follow up on warranty and service history.
• Contractual and invoicing data — for the periods required by accounting and tax law (typically 5–10 years).
• Two-factor authentication codes — only for the short period needed to complete authentication.
• Server logs — up to 12 months.

07Who we share data with

We do not sell or rent your personal data. Data is shared only with service providers who help us run this website (such as hosting and email delivery), acting under contract and on our instructions, or with public authorities where the law requires it. Transfers outside the European Economic Area use safeguards recognised by the GDPR.

08Your rights

Under the GDPR you have the right to access, rectify and erase your personal data, to restrict or object to its processing, to data portability, and to withdraw your consent at any time without affecting prior processing. You can exercise these rights by writing to us at support@grozagroup.com. We reply within one month.

If you consider that your rights have been infringed, you may lodge a complaint with your national supervisory authority — in Romania, the National Supervisory Authority for Personal Data Processing (ANSPDCP, www.dataprotection.ro).

09Security

Administrator passwords are stored only as cryptographic hashes, authentication codes are short-lived, sessions use secure HTTP-only cookies, and access to submitted data is limited to authorised staff. No internet transmission is entirely risk-free, but we apply industry practices to protect your data.

10Changes to this policy

We may update this policy as our services evolve; the date of the latest revision is always shown at the top of this page. Significant changes will be announced on the website. For any question, write to support@grozagroup.com.