Privacy Policy
Last updated: 2 November 2026
1. Controller
Eastway Commodities SRL, with registered office at Șos. București-Urziceni 90, Floor 2, Afumați, Ilfov County, Romania, acts as the controller of personal data processed through this Website.
Contact for data protection matters: [email protected]
2. Scope
This Policy explains how we collect and process personal data when you visit eastwaycommodities.com or contact us through the Website.
3. Categories of Data
Data you provide through the contact form: full name, company name, country, email address, commodity of interest, and the content of your message.
Data you provide when contacting us directly: any personal data contained in correspondence sent to us by email, telephone or messaging services.
Technical data collected automatically: IP address, browser type and version, operating system, pages visited, date and time of access, and referring page. This data is collected through cookies and similar technologies, where you have consented to them.
4. Purposes and Legal Bases
| Purpose | Legal basis |
|---|---|
| Responding to commercial enquiries | Steps taken at your request prior to entering into a contract, Art. 6(1)(b) GDPR |
| Managing an existing commercial relationship | Performance of a contract, Art. 6(1)(b) GDPR |
| Maintaining records of correspondence | Legitimate interest in managing our business, Art. 6(1)(f) GDPR |
| Website analytics and performance | Consent, Art. 6(1)(a) GDPR |
| Compliance with legal and accounting obligations | Legal obligation, Art. 6(1)(c) GDPR |
Providing the data marked as required in the contact form is necessary in order for us to respond to your enquiry. You are not obliged to provide it, but we will be unable to reply without it.
5. Recipients
Personal data may be disclosed to:
- our IT, hosting and email service providers, acting as processors on our behalf;
- our accountants, auditors and legal advisers, where relevant;
- public authorities, where required by law.
We do not sell personal data and we do not share it with third parties for their own marketing purposes.
6. International Transfers
Where a service provider processes data outside the European Economic Area, such transfers are carried out on the basis of an adequacy decision of the European Commission or of standard contractual clauses adopted by the Commission.
7. Retention
Enquiries which do not result in a commercial relationship are retained for a period of 12 months from the last communication, after which they are deleted.
Data relating to an established commercial relationship is retained for the duration of that relationship and thereafter for the period required by applicable accounting and limitation rules.
Technical data collected through analytics is retained for a maximum of 14 months.
8. Your Rights
Under the General Data Protection Regulation you have the right to:
- access the personal data we hold about you;
- request rectification of inaccurate data;
- request erasure of your data in the circumstances provided by law;
- request restriction of processing;
- object to processing carried out on the basis of our legitimate interest;
- receive your data in a structured, commonly used and machine-readable format;
- withdraw your consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out prior to withdrawal.
To exercise any of these rights, write to [email protected]. We will respond within one month of receipt of your request.
You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Bucharest, www.dataprotection.ro, or with the supervisory authority of your country of residence.
9. Cookies
The Website uses cookies which are strictly necessary for its operation. These do not require consent.
Where analytics or other non-essential cookies are used, they are placed only after you have given consent through the cookie banner. You may withdraw or modify your choice at any time through the cookie settings available on the Website.
10. Security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. Access to personal data within our organisation is limited to persons who require it in order to perform their duties.
11. Amendments
This Policy may be updated from time to time. The version published on the Website is the version in force. Material changes will be indicated by an updated revision date.