Privacy Policy – S&E INNOVATIVE CONSTRUCTION S.R.L.

1. Introduction

This Privacy Policy, created on 20.10.2024 and subject to periodic updates, reflects S&E Innovative Construction S.R.L.’s dedication to safeguarding
the personal data of our website visitors, clients, and business partners. We recognize that your trust in how we handle your personal information is
fundamental to our relationship, and this policy is designed to provide a transparent, detailed view of our practices in collecting, using, and protecting
your data. By interacting with our website, you agree to the practices outlined in this policy. We are committed to complying with applicable data protection
regulations, including the General Data Protection Regulation (GDPR) of the European Union, ensuring that your data is handled legally, fairly, and transparently.

2. Who we are

S&E Innovative Construction S.R.L. is a Romanian company specializing in innovative solutions for the construction industry, including the design,
development, and supply of customizable stair formwork systems. We focus on enhancing the efficiency, safety, and sustainability of construction projects.
As a data controller, S&E Innovative Construction S.R.L. is responsible for collecting, using, and protecting personal data in the context of our interactions
with you through our website and related services. We handle personal data with the utmost care, aiming to ensure transparency and trust in all our data processing
activities.

3. Purpose and legal basis for data processing

At S&E Innovative Construction S.R.L., we process your personal data responsibly, ensuring that every processing activity has a legitimate purpose and a solid legal basis. This section provides a comprehensive overview of the purposes for which we process personal data and the corresponding legal grounds:

a. Processing and fulfilling orders

The primary reason we collect personal data is to process and deliver orders for our products and services. This includes confirming and processing orders,
managing payments, preparing products for shipment, delivering products to specified addresses, and providing updates on order status. The legal basis for
this processing activity is the performance of a contract (Art. 6(1)(b) GDPR), as the data is necessary to fulfill our obligations when you place an order.

b. Client account management

Managing your client account allows us to offer you a personalized experience, track order history, and facilitate future purchases. This includes storing
your preferences and past order information to streamline the purchasing process. The legal basis for this processing is your consent (Art. 6(1)(a) GDPR)
when you create an account, as well as our legitimate interest (Art. 6(1)(f) GDPR) in improving your user experience.

c. Customer communication

We communicate with you to provide updates on your orders, respond to inquiries, and offer support. This may include sending order confirmations, delivery
notifications, and responding to customer service requests. The legal basis for this processing is the performance of a contract (Art. 6(1)(b) GDPR) and
our legitimate interest (Art. 6(1)(f) GDPR) in maintaining high-quality customer service.

d. Marketing and promotional communications

With your explicit consent, we will inform you about new products, special offers, and relevant updates related to our industry. This includes sending newsletters,
information on promotions, and educational content on sustainable construction practices. The legal basis for this processing is your consent (Art. 6(1)(a) GDPR),
which you can withdraw at any time if you no longer wish to receive these communications.

e. Service improvement and user experience

To continually improve our services, we analyze website usage and collect feedback to enhance the user experience. This may involve analyzing browsing behaviors,
collecting satisfaction survey responses, and optimizing website functionality. Our legitimate interest (Art. 6(1)(f) GDPR) in providing the best possible user
experience serves as the legal basis for this processing.

f. Legal and tax compliance

As a business entity, we are required to retain certain data to comply with legal and tax obligations, such as maintaining accounting records, issuing invoices,
and meeting reporting requirements. The legal basis for this processing is our legal obligation (Art. 6(1)(c) GDPR) to comply with applicable regulations.

g. Fraud prevention and security

We take measures to protect our website, operations, and clients from fraud and unauthorized access. This includes verifying transactions, implementing cybersecurity
measures, and investigating suspicious activities. Our legitimate interest (Art. 6(1)(f) GDPR) in safeguarding our operations and preventing fraud forms the legal
basis for this data processing.

4. Types of data collected and processing methods

At S&E Innovative Construction S.R.L., we collect various types of personal data depending on the nature of your interaction with our website and services. Understanding what data we collect and how it is used helps provide you with a complete overview of our data practices:

a. Identification and contact information

We collect personal details such as your name, email address, phone number, and shipping and billing addresses. This information is essential for account setup, order processing, and communicating with you.

b. Account information

When you create an account, we gather information such as your username and password (encrypted for security), order history, and communication preferences to facilitate a more personalized experience.

c. Transaction information

To process transactions, we collect data about the products purchased, transaction dates, amounts paid, and payment methods used. We do not store full payment details, ensuring data security in compliance with GDPR and PCI standards.

d. Technical and browsing information

During your interactions with our website, we automatically collect technical data such as IP address, browser type, device type, operating system, and pages visited. This data helps us understand user interactions and improve site functionality.

e. Marketing preferences

With your consent, we store your preferences for receiving marketing communications, interests inferred from browsing behavior, and responses to surveys or questionnaires.

f. Customer service interactions

We record details of interactions with customer service, including the contents of messages, dates, times, and communication channels used. This enables us to provide efficient support based on previous interactions.

5. Data processing principles

S&E Innovative Construction S.R.L. is committed to processing data in a manner that upholds the principles of data protection:

• Data is processed lawfully, fairly, and transparently.
• We collect data only for specified, legitimate purposes.
• The data we collect is limited to what is necessary for processing purposes.
• We take steps to keep data accurate and up-to-date.
• Data is stored only as long as necessary for processing purposes or to meet legal obligations.
• We implement appropriate technical and organizational security measures to prevent unauthorized access, loss, or damage to personal data.

6. Data sharing and disclosure

In providing our services, we may share your data with trusted third parties under strict confidentiality and security measures:

a. Service providers

We collaborate with service providers who help deliver our services, including payment processors, shipping companies, email marketing platforms, and data analysis providers.

b. Business partners

Occasionally, we work with partners to offer additional services or products. In these cases, data sharing is limited to what is necessary, and we seek your consent where required.

c. Public authorities

Under certain circumstances, we may be required to disclose data to public authorities to comply with legal requirements, protect our rights, or fulfill regulatory obligations.