01Who is responsible for your data
The controller of the personal data processed through this website is TALA IAPIS SRL, which operates greenstone-group.ro for Green Stone Group.
For anything related to your personal data, write to office@greenstone-group.ro with the subject “Personal data”.
02What data we collect
We collect only the data you choose to give us, and the minimum technical data needed to run the website:
| Source | Data |
|---|---|
| Contact form | Subject of your enquiry, the country or project you select, full name, email address, phone number (optional), your message and the confirmation that you agree to be contacted. |
| Updates (newsletter) | Your email address. |
| Emails and calls | The details you give us when you write to us or call a sales team — typically name, contact details and the content of your message. |
| Technical data | When you visit the website, our hosting server automatically records technical data in its logs — IP address, date and time, the page requested, browser and device type — for security and to keep the website running. |
We do not use analytics or advertising tools on this website, we do not build profiles and we do not take automated decisions about you. Please do not send us special categories of data (for example health data) through the forms.
03Why we use it and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Answering your enquiry and, at your request, sending you information about homes, viewings, prices or availability | Steps taken at your request before entering into a contract — Art. 6(1)(b); for general enquiries, our legitimate interest in answering you — Art. 6(1)(f) |
| Sending you updates about our projects and news | Your consent — Art. 6(1)(a), which you can withdraw at any time |
| Press, partnership and career enquiries | Our legitimate interest in answering and following up on your request — Art. 6(1)(f) |
| Security of the website and prevention of abuse (server logs, anti-spam checks) | Our legitimate interest in keeping the website secure — Art. 6(1)(f) |
| Keeping records required by law and defending legal claims | Legal obligation — Art. 6(1)(c) and legitimate interest — Art. 6(1)(f) |
04Who we share it with
We do not sell your data. We share it only when necessary, with:
- the sales or project team of the Green Stone Group project you ask about, so they can answer you;
- service providers that work for us under contract and only on our instructions — the website hosting provider and the email service used to deliver the messages sent through the website;
- public authorities, when we are legally required to do so.
Some pages load content from third-party services — fonts, maps, video and project images. Those providers receive technical data such as your IP address when the content loads; details are in our Cookie Policy.
05Transfers outside the EU
We store and process your enquiries within the European Union where possible. When a third-party service used by the website (for example Google Fonts, Google Maps or YouTube) involves a transfer of technical data outside the European Economic Area, the transfer relies on the safeguards provided by the GDPR — such as an adequacy decision (including the EU–U.S. Data Privacy Framework for certified companies) or the European Commission’s standard contractual clauses.
06How long we keep it
- Enquiries — for as long as needed to answer you and follow up, and in any case no longer than 24 months after our last exchange, unless a contract follows, in which case the retention rules for contractual documents apply.
- Newsletter — until you unsubscribe or withdraw your consent.
- Server logs — for a limited period set by our hosting provider for security purposes, typically not more than a few months.
- Data needed to defend legal claims is kept for the applicable limitation period.
07Your rights
Under the General Data Protection Regulation (EU) 2016/679 you have the right to:
To exercise your rights, write to office@greenstone-group.ro. We will answer within one month, which may be extended by two months for complex requests; we may ask you to confirm your identity.
You may also lodge a complaint with the Romanian data protection authority — ANSPDCP, B-dul G-ral. Gheorghe Magheru 28–30, Sector 1, Bucharest, www.dataprotection.ro.
08Security
The website is served over an encrypted connection (HTTPS). Messages sent through the forms are validated on the server, filtered against automated spam and delivered only to our team. Access to enquiries is limited to the people who need them to answer you.
09Children
The website is not intended for children under 16 and we do not knowingly collect their data. If you believe a child has sent us personal data, please contact us and we will delete it.
10Changes to this policy
We may update this Privacy Policy when the website or the law changes. The date of the last update is shown at the top of this page.
Questions about this page?
Write to us — we answer every request.