Privacy Policy

1. Who we are and our role

ATG Services SRL is the controller for data processed on the website, in the commercial relationship, for contract administration, billing, support, and the security of its own service.

For data and documents entered by the Customer in the portal, the Customer determines the purposes of processing and acts as controller. ATG Services SRL acts as processor only under documented instructions in the main contract and the data processing agreement (DPA).

Company details:

• Company: ATG Services SRL
• Registered office: Int. Guliver 13, Bucuresti, Sectorul 6
• Tax ID: 50268922
• Trade register: [to be completed]
• Contact email: george@atgserv.ro
• Phone: [to be completed]

For data-protection questions, contact george@atgserv.ro.

2. Data we process

Depending on the workflow, we may process identification and contact data; customer, site, asset, contract, work-order, observation, and recommendation data; signatures, photos, and reports; IP addresses, access logs, browser data, and timestamps; and account identifiers, password hashes, MFA settings, and sessions.

3. Purposes

We process data to administer accounts and authentication; operate the CMMS and provide access to documents; generate, store, and send reports; manage customers, sites, assets, work orders, and contracts; provide technical support and security; monitor service availability; and meet legal, archiving, and legal-claim requirements.

4. Legal bases

Processing may rely on performance of a contract or pre-contractual steps, compliance with a legal obligation, legitimate interests in operating and securing the service and defending rights, or consent where consent is actually required.

5. Recipients

Data may be disclosed to:

• hosting

• email / SMTP

• backup

• monitorizare

• public authorities where required by law

We do not sell personal data.

6. International transfers

In prezent nu transferam date in afara SEE.

7. Retention

We retain data only as long as needed, considering the contract term, statutory archiving periods, limitation periods, and legitimate security and audit needs.

Current operational reference periods:

• customer and site data: Pe durata relatiei contractuale si ulterior cat este necesar pentru suport contractual, aparare drepturi sau arhiva operationala.
• generated documents: Conform relatiei contractuale cu clientul; stergerea se face doar dupa analiza manuala.
• disabled accounts: Revizie manuala periodica dupa dezactivare.
• backups: Conform politicii operationale de infrastructura, cu asociere clara pe client.

8. Data-subject rights

Subject to applicable law, individuals may request access, correction, deletion, restriction, objection, portability where applicable, and withdrawal of consent where consent is the legal basis. Requests may be sent to george@atgserv.ro. Individuals may also lodge a complaint with the competent supervisory authority.

9. Security

We apply reasonable technical and organizational measures, including HTTPS, secure session cookies, password hashing, mandatory administrator MFA, failed-login lockout, revocable sessions, integrity-checked audit logs, role and customer-instance separation, verified backups, controlled restoration, and technical monitoring.

10. Required data

Some data is necessary to create an account, access the portal, deliver documents, and perform contracted services. If it is not provided, some functions may be unavailable.

11. Cookies

The portal uses a strictly necessary session cookie for authentication and secure access. It is not used for advertising.

12. Changes

We may update this policy periodically. The current version and its latest update date are published in the portal.

Last updated: 2026-10-31.