Privacy policy

1. Who controls your data

The controller is Dualvalcost Solution SRL, trade register J23/1237/2010, fiscal code 26823086, registered office Str. Garii 24, Cretesti, Ilfov, Romania, operating this site under the Valenys brand.

Contact for any data protection matter: the contact address published on this site, or by post to the registered office.

2. What this site collects by default

Nothing that identifies you, unless you send it. Analytics on this site are collected in aggregate, without cookies and without a device identifier. There is no advertising pixel loaded before consent, and no profiling.

Our servers keep standard technical logs — request time, requested address, response status, browser identifier and a truncated network address — for security and for diagnosing faults. These are kept for a short period and are not used to build a profile.

3. What you send us

Enquiry and quote forms

When you complete a form, we receive the fields you filled in: your name, company, email address, telephone number where given, the subject, and your message. We also record which page the form was sent from.

Purpose: replying to your enquiry, preparing a proposal, and the correspondence that follows.
Legal basis: steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR), and our legitimate interest in responding to business enquiries (Article 6(1)(f)).
Retention: for the duration of the conversation and, where it does not lead to a contract, for up to 24 months afterwards, so that we can recognise a returning enquiry.

Chat assistant

If you use the chat assistant, the conversation is stored so that the assistant can answer follow-up questions and so that we can see where its answers were wrong. Conversations are retained for 30 days by default. Do not enter payment details, passwords or health information into a chat window on any website, including this one.

4. Cookies

Strictly necessary cookies work at all times. Analytics and marketing categories are off until you allow them in the cookie banner, and you can change that choice at any time from the cookie button in the corner of the screen.

The full list, with purposes and durations, is in the cookie policy.

5. Who else sees your data

We use service providers who process data on our behalf under written agreements: hosting and infrastructure, email delivery, and — for the chat assistant — the AI provider configured for this site. Providers are instructed to process data only on our documented instructions.

We do not sell personal data and we do not share it for advertising.

Where a provider processes data outside the European Economic Area, the transfer relies on an adequacy decision or on standard contractual clauses. You may ask us which providers are used and on what basis.

6. Your rights

Under the GDPR you have the right to: obtain confirmation of whether we process your data and a copy of it; have inaccurate data corrected; have data erased where the conditions apply; restrict processing; receive your data in a portable format; and object to processing based on legitimate interest.

Where processing relies on consent, you may withdraw it at any time; this does not affect processing carried out before the withdrawal.

Write to the contact address published on this site. We respond within one month; if a request is complex we may extend that by two further months and will tell you why.

7. Complaints

If you believe we handle your data unlawfully, you may complain to the Romanian supervisory authority, ANSPDCP (dataprotection.ro), or to the supervisory authority of the EU member state where you live or work.

8. Security

Data is transmitted over encrypted connections. Access to systems is restricted and logged, backups are encrypted and their restoration is rehearsed on a schedule rather than assumed. No system is immune; where a breach is likely to result in a risk to your rights, we notify the supervisory authority and, where the risk is high, you.

9. Children

This site addresses businesses. We do not knowingly collect data from children. If you believe a child has sent us personal data, write to us and we will delete it.

10. Changes

The version in force is the one published here, with the date shown at the top of this page. Material changes are announced on this page before they take effect.