Privacy Policy

The controller of the data collected through this site is Căpcăun S.R.L., a company registered in Romania, a member state of the European Union. All correspondence about personal data is handled in writing, by email or at our registered address.

Company:

Căpcăun S.R.L.

Registered address:

Parc Științific Tehnopolis, Iași

Email:

info@zeqira.com

We collect only the data needed to answer commercial enquiries and to deliver the equipment and services agreed with you.

Data about the company itself, such as its name, tax number, registered address or trade register number, is not personal data and falls outside the GDPR. What falls under the GDPR is the data of the person who writes to us or signs: name, job title, work email and work phone number.

Providing your contact data is not a statutory obligation, but without it we cannot answer your enquiry or conclude the contract. The remaining fields are optional.

Identification data

First name, surname, job title and the name of the institution or company you represent.

Contact data

Email address, telephone number and postal address, when you enter them in a form.

Professional data

Type of medical facility, department and specialty, used to recommend the right equipment.

Content of your enquiry

What you write in the contact form or the quote request, including the estimated budget or the timeline, if you mention them.

Technical data

IP address, browser type, operating system and pages visited, generated automatically by the infrastructure hosting the site.

Browsing preferences

The language you selected and the choices you made in the cookie banner.

We process data only for the purposes below, and we do not use it for other purposes without informing you first.

• To answer questions and requests sent through the forms on this site.
• To prepare and send quotes for the equipment you asked about.
• To conclude and perform contracts for sale, installation, training and maintenance.
• To provide technical support, spare parts and warranty service.
• To send commercial messages to professional contacts who subscribed or gave us their consent.
• To keep the site secure and prevent abuse of the forms.
• To meet our tax and accounting obligations and those we have as a distributor of medical devices.

Every processing operation relies on one of the grounds set out in Article 6(1) GDPR.

Consent, Article 6(1)(a)

Commercial messages and any storage that is not strictly necessary. Consent can be withdrawn at any time, as easily as it was given.

Performance of a contract, Article 6(1)(b)

Preparing the quote, concluding the contract, delivery, installation, training and servicing of the equipment.

Legal obligation, Article 6(1)(c)

Invoicing and archiving financial documents, and the traceability and vigilance duties that distributors have under Regulation (EU) 2017/745 on medical devices.

Legitimate interest, Article 6(1)(f)

Site security, fraud prevention and our internal record of commercial enquiries. We have balanced this interest against your rights and can share the outcome of that assessment on request.

You have the right of access, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interest or to direct marketing, and the right to withdraw consent at any time. We take no automated decisions and build no profiles.

The site stores information on your device only as far as it is needed to work and, for anything else, only after you consent, under Article 5(3) of Directive 2002/58/EC.

Read the Cookie Policy

We do not sell or rent personal data. We share it only with the providers that help us operate, each under a processing agreement concluded in line with Article 28 GDPR.

Hosting provider

The infrastructure the site runs on, where access logs are generated.

Enquiry management platform

Requests sent through the forms are recorded in a CRM platform used by the sales team.

Email provider

The mail server that notifies us of a new enquiry and through which we reply to you.

Public authorities

Only where the law requires it, and only within the scope of the request received.

Data is processed mainly within the European Economic Area. Where a provider or one of its sub-processors sits outside the EEA, the transfer goes only to a country covered by an adequacy decision of the European Commission or under the standard contractual clauses, together with encryption, in line with Articles 45 and 46 GDPR.

We keep data only as long as the purpose it was collected for requires, then delete or anonymise it.

Enquiries that did not lead to a contract

12 months from the last exchange.

Contract documents

For the term of the contract and 3 years after it ends, the general limitation period.

Financial and tax records

The period required by the accounting and tax law applicable to the company, currently 10 years in Romania.

Medical device traceability records

At least 10 years from delivery of the last unit, under Regulation (EU) 2017/745.

Marketing data

Until consent is withdrawn, plus the period needed to prove the withdrawal was recorded.

Server logs

12 months at most.

We apply the measures required by Article 32 GDPR: encrypted transmission over HTTPS, access limited to the people who need it, a separate account per user and backups. A personal data breach likely to affect your rights is notified to the authority within 72 hours and communicated to you directly where the risk is high.

If you believe we process your data without a valid basis, write to us at info@zeqira.com and we will give you a reasoned answer.

Independently of that, you may lodge a complaint with the supervisory authority of the member state where you live, where you work, or where the alleged infringement took place, under Article 77 GDPR. The competent authority at our registered office is the Romanian one, www.dataprotection.ro.

We update this document when the way we process data changes or when the legal framework changes. The version published here is the one in force. If a change introduces a new purpose of processing, we inform you before it takes effect.