Privacy Policy

How IMPLAGEN SRL collects, uses and protects personal data of professional buyers, in line with GDPR (Regulation EU 2016/679) and Romanian Law 190/2018.

1. Data Controller

IMPLAGEN SRL, Calea Aurel Vlaicu 14/D, Bl. R36, Et. 1, Ap. 14, 310159, Arad, Romania — CUI 52723310. Contact: contact@implagen.com.

2. What data we collect

• Business contact data: full name, company name, role, business email, phone.
• Fiscal data: company fiscal code (CUI), Trade Register number, VAT status, billing address.
• Order data: products purchased, quantities, prices, delivery address, order history, communications with our team.
• Website technical data: IP address, browser, device, pages visited (via cookies and analytics — see our Cookie policy).

3. Why we process it (legal basis)

• Contract performance (Art. 6(1)(b) GDPR) — processing orders, invoicing, delivery, warranty.
• Legal obligation (Art. 6(1)(c)) — issuing fiscal invoices, tax and accounting retention.
• Legitimate interest (Art. 6(1)(f)) — fraud prevention, direct B2B marketing to existing clients, product improvement.
• Consent (Art. 6(1)(a)) — marketing to prospects, non-essential cookies. Consent can be withdrawn at any time.

4. Data sharing

We share data only with processors strictly needed to run the business:

• Couriers (DPD, FanCourier, UPS) — for delivery.
• Payment providers and banks — for transactions.
• Accounting and fiscal service providers — for legal obligations.
• Cloud hosting and email infrastructure providers within the EU/EEA.
• Public authorities — only when legally required.

We do not sell personal data. We do not transfer data outside the EU/EEA unless an adequacy decision or standard contractual clauses apply.

5. Retention

• Fiscal documents (invoices, orders): 10 years (Romanian tax law).
• Contract-related data: duration of the commercial relationship + 3 years.
• Marketing consent data: until consent is withdrawn.
• Website analytics: aggregated after 14 months.

6. Your rights

Under GDPR you have the right to:

• Access — obtain a copy of your data.
• Rectification — correct inaccurate data.
• Erasure — request deletion, subject to legal retention obligations.
• Restriction — pause processing while disputes are resolved.
• Portability — receive your data in a machine-readable format.
• Objection — object to legitimate-interest or direct-marketing processing.
• Withdraw consent at any time, without affecting past lawful processing.
• Lodge a complaint with the Romanian supervisory authority (ANSPDCP — dataprotection.ro).

To exercise any right, email us at contact@implagen.com with the subject "GDPR request". We respond within 30 days.

7. Security

We apply reasonable technical and organisational measures — TLS in transit, encrypted storage, role-based access, EU-based hosting, regular backups, and staff confidentiality obligations.

8. Children

Our website targets professional buyers only. We do not knowingly process data from persons under 16.

9. Changes

We may update this policy. Material changes are announced on this page; the effective version is the one published at the moment of data processing.