Privacy Policy

1. Data Controller

The data controller for personal data collected through this website is SOCO ISO SRL (trading as IGM), CUI 46948432, with registered office at Str. Lotrului 9, Oradea, Bihor 410546, Romania. Contact: contact@igmofficial.com.

2. What Data We Collect

We collect personal data that you voluntarily provide through our contact forms, including:

• Full name
• Email address
• Company or organization name
• Inquiry details and messages

We also automatically collect certain technical data through cookies, including IP address, browser type, device information, and browsing behavior on our website.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds under the GDPR (Regulation EU 2016/679):

• Consent (Art. 6(1)(a)): When you submit a contact form or accept cookies, you provide explicit consent for us to process your data for the stated purposes.
• Legitimate Interest (Art. 6(1)(f)): We may process data for our legitimate business interests, such as improving our services and website functionality.
• Contractual Necessity (Art. 6(1)(b)): Processing necessary for the performance of a contract or to take pre-contractual steps at your request.

4. How We Use Your Data

• To respond to your inquiries and booking requests
• To communicate about our services
• To improve our website and user experience
• To comply with legal obligations

5. Cookies

Our website uses cookies to enhance your browsing experience. We use:

• Essential cookies: Required for the website to function properly. These cannot be disabled.
• Analytics cookies: Help us understand how visitors interact with our website. These are only activated with your consent.

You can manage your cookie preferences through the cookie banner displayed when you first visit our website. You can also clear cookies through your browser settings at any time.

6. Data Sharing

We do not sell, trade, or rent your personal data to third parties. We may share data with:

• Service providers who assist in operating our website (hosting, form processing)
• Professional advisors (legal, accounting) when necessary
• Law enforcement authorities when required by law

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, typically no longer than 3 years after your last interaction with us, unless a longer retention period is required by law.

8. Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access (Art. 15): You can request a copy of the personal data we hold about you.
• Right to Rectification (Art. 16): You can request correction of inaccurate data.
• Right to Erasure (Art. 17): You can request deletion of your personal data ("right to be forgotten").
• Right to Restriction (Art. 18): You can request restriction of processing of your data.
• Right to Data Portability (Art. 20): You can request your data in a structured, machine-readable format.
• Right to Object (Art. 21): You can object to processing based on legitimate interests.
• Right to Withdraw Consent (Art. 7(3)): You can withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at contact@igmofficial.com. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes SSL/TLS encryption for data in transit and secure hosting infrastructure.

10. International Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA) where our service providers are located. In such cases, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

11. Children's Privacy

Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

12. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP): Bd. G-ral. Gheorghe Magheru 28-30, Sector 1, 010336, Bucharest, Romania. Website: dataprotection.ro.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page with an updated revision date.