Privacy policy

Updated: 4 November 2026

This English translation is provided for information. If it differs from the Romanian version, the Romanian version prevails.

Last updated: 04.11.2026 · Version: 2026-11-04

1. Who we are

FORTZA.RO SRL, with its registered office at Str. Gării 10, 551010 Mediaș, Sibiu County, Romania, registered with the Trade Register under no. J1997000531324, tax ID (CUI) 9947416 (the “Company” or “we”), is the controller of the personal data processed through macaraledeinchiriat.eu (the “Site”). We process data in accordance with Regulation (EU) 2016/679 (GDPR) and the applicable Romanian law.

For any question about your data, email us at office@fortza.ro or call +40 269 838 450.

2. What data we process

2.1. Quote requests and form messages

When you send the quote request form or the contact form, we process:

your name, phone number and email address;
whether you are requesting as a private individual or as a company;
for companies: the tax ID (CUI), company name, trade register number and registered office;
the details of your request: type of service, crane of interest, county and town of the site, period, height, jib length, load and your message;
your consent to the processing and, if you ticked the optional box, your consent to receive emails with offers and news, with their date and time;
the page from which you sent the request and a pseudonym of your IP address (an encoded value from which the address cannot be read), used to limit abuse.

2.2. Company data from public sources

If you are requesting as a company, we check the tax ID in the public registers of ANAF (the Romanian National Agency for Fiscal Administration): name, address, status (active, inactive or deregistered), VAT registration, registration date, activity code (CAEN) and the indicators of the latest published balance sheet (turnover, average number of employees, profit or loss, debts). We send ANAF only the company’s tax ID, never the contact person’s name, phone, email or the site details.

You can subscribe from the “FORTZA news and offers” band or by ticking the optional box in the forms. We keep your email address, language, the source of the subscription (for example the contact form), and the date and time you subscribed and, where relevant, unsubscribed. After subscribing you receive a confirmation email with the unsubscribe link; the same link appears in every email. Subscribing is not a condition for receiving an offer.

So that we can prove, if needed, what you agreed to, we record every consent: your cookie choice, your newsletter subscription or withdrawal, and the consent given in the forms. The record holds the date and time, the choices made, the exact text shown, the version of the legal documents, the language, the page, the IP address pseudonym and the browser type. Your cookie choice is linked only to a random identifier stored in your browser, not to your name or email address.

2.5. Messages sent by email, phone or WhatsApp

If you contact us directly, we process the data you choose to send us through that channel.

2.6. Questions to the site assistant

When the assistant answers with artificial intelligence (its answers are marked as AI-generated), your questions and the current conversation are sent to the provider Anthropic only to generate the answer. FORTZA does not keep the conversations; we only count the requests, to limit costs. The conversation stays in your browser until you close the tab. Please do not enter personal data in the conversation: use the form for an offer.

2.7. Technical data

The hosting infrastructure processes the technical data needed to deliver the pages and keep them secure (IP address, browser and device type, the page requested, the time of access). Only with your consent in the cookie banner, we load Google Tag Manager, the tool through which we may later add statistics or campaign measurement services. At present we do not use visitor behaviour analytics or advertising services. Details in the Cookie policy.

3. Why we process data and on what legal basis

Purpose	Legal basis (Art. 6 GDPR)
Answering your quote request or message and preparing the offer	Steps taken at your request before entering into a contract (b), and the consent given in the form (a)
Checking the company at ANAF and setting the priority of the request	Our legitimate interest in confirming the company details and answering urgent requests first (f)
Keeping track of requests in our customer relationship management (CRM) system	Our legitimate interest in following up requests and the business relationship (f)
Newsletter: emails with FORTZA offers and news	Your consent, only if you subscribed or ticked the optional box (a)
Keeping proof of consent	The obligation to be able to demonstrate consent (Art. 7(1) GDPR) and our legitimate interest in defending ourselves in a dispute (c and f)
Loading Google Tag Manager	Your consent in the cookie banner (a; Art. 4(5) of Romanian Law 506/2004)
Site security and abuse prevention	Legitimate interest (f)
Legal obligations (for example tax obligations once a contract is signed)	Legal obligation (c)

Setting the priority of requests. For company requests, an automatic calculation based on public ANAF data (company age, number of employees, turnover, profit and tax status) places the request in a priority category, so that the sales team knows whom to call first. This has no legal effect and does not refuse you anything: every request is answered by a FORTZA colleague.

4. Who receives the data

The data is accessed by FORTZA employees working in sales, rentals and service. We use the following providers, which process data on our behalf, under contract, and only for the service they provide to us:

Vercel Inc. – hosting the Site;
Supabase Inc. – the database in which requests, subscriptions and proof of consent are stored;
Pipedrive OÜ – the customer relationship management (CRM) system in which the request is created;
Sendinblue SAS (Brevo) – sending the notification email to our team and the newsletter confirmation emails;
Anthropic PBC – the AI assistant, for questions asked to it;
Google Ireland Limited – Google Tag Manager, only if you accepted analytics or marketing in the cookie banner;
Cloudflare Inc. – storing the images published on the Site and the anti-bot check (Cloudflare Turnstile) when forms are sent and questions are asked to the assistant; for the check, Cloudflare receives technical data such as the IP address and browser information.

Public authorities may also receive data when the law requires it. We do not sell or rent your data.

5. Transfers outside the European Economic Area

Some providers (for example Vercel, Supabase, Anthropic, Cloudflare and Google) are US companies or may process data outside the EEA. In those cases, the transfer relies on the European Commission adequacy decision for companies certified under the EU-U.S. Data Privacy Framework or on the standard contractual clauses approved by the European Commission, under the providers’ data processing agreements.

6. How long we keep the data

Requests sent through the forms, stored in the Site’s database: 3 years from submission, then deleted automatically. The copy in the CRM system is kept for as long as the business relationship lasts and no more than 3 years from our last interaction with you. If a request leads to a contract, contractual and tax documents are kept for the period required by law.
Newsletter subscription: for as long as you are subscribed. After you unsubscribe, we keep the proof of the subscription and the withdrawal for 3 more years, then delete it automatically.
Proof of consent (including cookie choices): 3 years from recording, then deleted automatically; the proof of a newsletter subscription is kept while the subscription is active.
The IP address pseudonym used to limit abuse: a few minutes in the technical counters; it stays recorded with the request or consent for as long as those are kept.
Public company data taken from ANAF: together with the request it relates to.

7. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, including to processing based on legitimate interest and to the automatic setting of request priority. You can withdraw your consent at any time, free of charge, without affecting the processing carried out before: for the newsletter, through the unsubscribe link in any email; for cookies, under “Cookie settings” in the footer; in any other case, by emailing office@fortza.ro.

To exercise your rights, email office@fortza.ro. We reply within one month. You also have the right to lodge a complaint with the Romanian data protection authority (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal, ANSPDCP), www.dataprotection.ro.

8. Data security

We use encrypted connections (HTTPS), access to data only for authorised people, two-step authentication for managing the Site and automatic limits on abusive requests. However, no method of transmission or electronic storage is completely secure, so we cannot guarantee absolute security.

9. Changes

We may update this policy when the way we process data changes. The version in force is published on this page, with its date and version number. The version number is stored with every consent, so it is always possible to tell which text was in force when you gave it.

FORTZA.RO SRL Str. Gării 10, 551010 Mediaș, Sibiu County, Romania J1997000531324, CUI 9947416