Privacy Policy of MPL Automation S.R.L.

This Privacy Policy explains how MPL Automation S.R.L., based in Romania, collects, processes, stores, and uses personal data in connection with our website, business communication, customer and supplier relationships, applications, and related services.

Unless otherwise stated, the controller responsible for data processing is:

MPL Automation S.R.L.
Str. Aurel Vlaicu 72
440112 Satu Mare
Romania
Phone: +40 (0)771 743 916
E-mail: info@mpl-engineering.com

In this Privacy Policy, “we,” “us,” and “our” refer to MPL Automation S.R.L.

1. Information about Data Security

We use appropriate technical and organizational security measures to protect personal data against loss, destruction, manipulation, unauthorized access, alteration, or disclosure. Our website uses encrypted connections where necessary. Despite all reasonable precautions, complete protection against all risks cannot be guaranteed.

2. Legal Bases for Processing

We process personal data in particular on the basis of the following legal grounds:

  • Consent pursuant to Art. 6(1)(a) GDPR
  • Performance of a contract pursuant to Art. 6(1)(b) GDPR
  • Carrying out pre-contractual measures pursuant to Art. 6(1)(b) GDPR
  • Compliance with legal obligations pursuant to Art. 6(1)(c) GDPR
  • Protection of vital interests pursuant to Art. 6(1)(d) GDPR
  • Legitimate interests pursuant to Art. 6(1)(f) GDPR

3. Our Legitimate Interests

Where processing is based on Art. 6(1)(f) GDPR, our legitimate interests include in particular:

  • carrying out and further developing our business activities
  • maintaining secure and efficient internal processes
  • handling inquiries and managing communication
  • documenting business-relevant processes and contacts
  • protecting our IT systems, our website, and our infrastructure
  • improving our website, services, and marketing activities
  • safeguarding jobs, operational capability, and long-term business continuity

4. General Storage and Deletion Periods

We store personal data only for as long as this is necessary for the respective purpose or as long as statutory retention obligations exist. Once the purpose ceases to apply, the data is deleted, anonymized, or, where necessary, its processing is restricted, unless legal obligations, contractual duties, evidentiary interests, or legitimate interests prevent further deletion.

5. Deletion or Restriction of Personal Data

Personal data is deleted as soon as the purpose of storage no longer applies and no statutory retention obligations prevent deletion. If deletion is not possible or temporarily not permitted, processing is restricted instead.

6. Collection of General Data and Technical Information

When accessing our website, our web server and technical systems may automatically collect certain general information. This may include in particular:

  • browser type and browser version
  • operating system used
  • referrer website
  • pages accessed on our website
  • date and time of access
  • IP address
  • internet service provider
  • other comparable technical information required for system security and website delivery

We process this information in order to:

  • display the content of the website correctly
  • ensure the long-term functionality and security of our website
  • optimize website performance and user experience
  • support error analysis and IT security checks
  • provide information to competent authorities where legally required, for example in the event of cyberattacks or unauthorized access attempts

7. Obligation to Provide Personal Data

In certain cases, the provision of personal data is necessary in order to conclude or perform a contract, process an inquiry, review an application, or comply with legal obligations.

This may include in particular:

  • contact data for responding to business inquiries
  • address and billing data for contract performance
  • applicant data for reviewing an application
  • legally required information for tax, accounting, employment, or compliance purposes

If the required data is not provided, we may be unable to conclude or perform a contract, fully review an application, or appropriately process an inquiry.

8. Internal Use of Personal Data within the Company

We may process and use personal data internally within MPL Automation S.R.L. insofar as this is necessary for legitimate business purposes and lawful company administration. This includes in particular:

  • handling inquiries and requests
  • communication with customers and suppliers
  • internal notifications and forwarding to the responsible department
  • sales support and quotation processing
  • project coordination and documentation
  • contract administration
  • application processing and HR-related processes
  • IT administration and security
  • legal compliance, preservation of evidence, and internal quality assurance

Access to personal data is limited to those employees, departments, or functional areas that require the data for the respective purpose.

9. Applications and Application Procedures

If you apply to MPL Automation S.R.L., we process your personal data for the purpose of reviewing your application and carrying out pre-contractual measures in view of possible employment.

Purpose

  • reviewing and evaluating applications
  • communicating with applicants
  • preparing possible hiring decisions
  • documenting the application process

Legal Basis

  • Art. 6(1)(b) GDPR (pre-contractual measures)
  • where applicable, Art. 6(1)(f) GDPR for our legitimate interest in conducting the application process properly
  • where special categories of personal data are processed, the additionally applicable legal basis applies

Categories of Data

  • identification data
  • contact data
  • CV, certificates, references, and other application documents
  • information voluntarily provided during the application process

Recipients

Applicant data is generally processed only within the company by those persons involved in the application process. Disclosure to external third parties takes place only insofar as this is necessary for the application process, legally required, or expressly authorized by the data subject.

Transfers to Third Countries

Transfers to third countries are generally not intended in connection with applications, unless a specific service used in the application process requires this and an appropriate legal safeguard exists.

Storage

If no employment relationship is established, application data is generally stored for a limited period in order to defend against possible legal claims and is then deleted, unless longer storage is legally permissible or consent has been given.

Obligation to Provide Data

Providing the information required for the application process is voluntary. However, if essential information is not provided, this may result in us being unable to fully review the application or offer employment.

Automated Decision-Making

No automated decision-making within the meaning of Art. 22 GDPR takes place.

10. Cookies

Our website may use cookies and similar technologies. Cookies are small text files stored on your device by the browser.

We distinguish in particular between:

Technically Necessary Cookies

These are required for the operation, security, and basic functionality of the website.

Optional Cookies / Tracking Technologies

These may be used for analysis, marketing, measurement, or optimization purposes and are only used where a valid legal basis exists, in particular consent where required.

You can generally control or delete cookies through your browser settings. Please note that disabling cookies may limit the functionality of the website.

11. Contact Form and Business Contact Requests

If you contact us via a contact form, by e-mail, by telephone, or via another communication channel, we process the information you provide for handling your inquiry and any related follow-up communication.

Purpose

  • responding to inquiries
  • preparing quotations
  • initiating or carrying out business communication
  • internal forwarding to the responsible contact person or department
  • documenting communication processes where necessary

Legal Basis

  • Art. 6(1)(b) GDPR, if your inquiry is related to pre-contractual measures or a contract
  • Art. 6(1)(f) GDPR for our legitimate interest in efficiently handling and managing communication

Categories of Data

  • name
  • company name
  • contact details
  • content of the message
  • attached documents, if any
  • technical metadata, where relevant

Recipients

Your data may be processed internally by the departments responsible for your inquiry. No transfer to third countries takes place unless this is necessary in individual cases and legally permissible.

Storage

The data is stored only for as long as necessary to process the inquiry and in accordance with applicable retention periods.

Automated Decision-Making

No automated decision-making takes place.

12. Google Ads

We use Google Ads to advertise our services and, where applicable, to measure the effectiveness of our advertising campaigns.

Purpose

  • displaying advertisements
  • measuring advertising performance and conversions
  • evaluating the relevance and effectiveness of campaigns
  • improving our marketing activities

Legal Basis

  • Art. 6(1)(a) GDPR, where consent is required
  • where applicable, Art. 6(1)(f) GDPR for limited non-cookie-related evaluations, where legally permissible

Recipients

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Where legally permissible and subject to the safeguards used by Google, data may also be processed by Google LLC in the USA.

Categories of Data

Depending on the configuration, this may include in particular:

  • pages visited
  • click behavior
  • anonymized or shortened IP-related information, where applicable
  • referrer information
  • visited subpages
  • date and time of the visit
  • conversion-related interaction data

Transfers to Third Countries

Data may be transferred to the USA in accordance with the safeguards used by Google for these services.

Storage

The storage period depends on the specific configuration of the service and our general deletion principles.

Objection / Control

Users can manage ad settings via Google ad settings and, where applicable, via their cookie or consent settings on our website.

13. Google Analytics

We use Google Analytics to analyze the use of our website and improve its performance, content, and user-friendliness.

Purpose

  • analyzing the use of our website
  • improving website structure and content
  • measuring website performance
  • evaluating the effectiveness of campaigns and traffic sources

Legal Basis

  • Art. 6(1)(a) GDPR, where consent is required

Recipients

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Where legally permissible and subject to the safeguards used by Google, data may also be processed by Google LLC in the USA.

Categories of Data

Depending on the configuration, this may include in particular:

  • pages visited
  • approximate location data
  • browser and device information
  • referrer URL
  • session information
  • interaction data
  • pseudonymous identifiers
  • IP-related data processed in accordance with Google’s applicable privacy protections

Transfers to Third Countries

Data may be transferred to the USA, subject to the safeguards used by Google.

Storage

The storage period depends on our Google Analytics settings and our general deletion principles.

Objection / Control

Users may object through their consent settings, browser settings, or, where applicable, through the browser add-on provided by Google.

14. Google Tag Manager

We use Google Tag Manager to centrally manage website tags and integrations.

Purpose

  • technical delivery and management of website tags
  • simplified management of analytics and marketing tools
  • efficient implementation and maintenance of our tracking architecture

Legal Basis

  • Art. 6(1)(a) GDPR, where consent is required for tags triggered through the service
  • where applicable, Art. 6(1)(f) GDPR for technical website administration

Recipients

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Note

Google Tag Manager itself is a tag management system. Whether personal data is processed depends on the specific tags and services integrated through it.

Transfers to Third Countries

Where tags integrated through Google Tag Manager involve providers outside the EEA, data may be transferred to third countries in accordance with the safeguards applicable to those services.

15. Google Search Console

We use Google Search Console to monitor our website’s presence in Google search results and to improve the technical and content visibility of our website.

Purpose

  • monitoring search performance
  • identifying indexing and technical issues
  • improving visibility in search results
  • analyzing aggregated search-related website performance

Legal Basis

  • Art. 6(1)(f) GDPR for our legitimate interest in the discoverability, technical quality, and search performance of our website

Categories of Data

Search Console generally provides website operators with aggregated or anonymized search-related information, in particular:

  • search queries
  • clicks and impressions
  • indexing data
  • technical search performance information

Note

Google Search Console is generally used as an administrative website tool and does not usually function as a classic front-end tracking technology in the same way as analytics or advertising cookies.

16. Microsoft Clarity

We use Microsoft Clarity to better understand how visitors interact with our website, for example through heatmaps, usage analyses, and session-based behavioral analyses.

Purpose

  • analyzing user behavior and navigation
  • improving user-friendliness and website structure
  • identifying technical or UX-related issues
  • optimizing content, forms, and user journeys

Legal Basis

  • Art. 6(1)(a) GDPR, where consent is required

Recipients

Microsoft Corporation and/or Microsoft companies involved with Microsoft Clarity in accordance with Microsoft’s service structure and privacy information.

Categories of Data

Depending on the configuration, this may include in particular:

  • mouse movements
  • clicks
  • scroll behavior
  • page interaction data
  • session replay information
  • technical device and browser information
  • IP-related data and page metadata

Transfers to Third Countries

Data may be processed outside the EEA, subject to the safeguards used by Microsoft for its services.

Storage

The storage period depends on the configuration of the service and our general deletion principles.

Objection / Control

Users can manage optional analytics tools through their consent settings, where applicable.

17. Recipients of Personal Data

We may transfer personal data, where necessary and legally permissible, to the following categories of recipients:

  • internal departments and responsible employees
  • IT service providers and website hosting providers
  • software and cloud service providers
  • marketing and analytics providers
  • professional advisers, including legal and tax advisers
  • authorities and courts where there is a legal obligation or a legitimate requirement

We ensure that access is limited in each case to what is necessary for the respective purpose.

18. Transfers to Third Countries

Where personal data is transferred to recipients outside the EEA, this takes place only where legally permissible and where appropriate safeguards exist, such as adequacy decisions, standard contractual clauses, or other recognized transfer mechanisms.

19. No Automated Decision-Making

Unless expressly stated otherwise, we do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

20. Rights of Data Subjects

Subject to the statutory requirements, you have the right to:

  • request access to your personal data
  • request correction of inaccurate data
  • request deletion of your data
  • request restriction of processing
  • object to processing based on legitimate interests
  • withdraw consent with effect for the future
  • receive your data in a portable format, where applicable
  • lodge a complaint with the competent supervisory authority

21. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy where necessary in order to reflect changes in legal requirements, our services, or our data processing activities. The current version published on our website shall apply.