Privacy policy
1. Who is responsible for your data
SECURISTIKA SRL, a Romanian limited liability company (Trade Register no. J2014001105356, fiscal code (CUI) RO33108921), registered office: Timișoara, Str. Oglinzilor nr. 25, bl. 32, sc. B, ap. 1, camera 2, jud. Timiș, 300710, România, is the data controller for the personal data described in this notice. We operate deye-batteries.com and deye-inverters.com as an independent dealer of Deye products; we are not affiliated with or operated by the manufacturer.
Contact for anything about your personal data: info@deye-batteries.com, phone +40 741 127 113, or by post to the registered office. Please write “Data protection” in the subject line. We have not appointed a data protection officer, as the law does not require one for the processing described here.
2. What data we process
- Quote and contact requests. What you type into the quote form: name, email address, country of delivery, the request itself and, if you add them, phone number and company. If you came from a product page, the product you asked about. The same applies when you email or call us.
- Technical data needed to deliver the website and protect the form. Your IP address, browser type and the pages requested, in the web server’s access logs; a one-way hash of your IP address, used to limit how many requests can be sent from one IP address; and, on the quote page, the signals Cloudflare Turnstile uses to tell people from automated programs (see “Who receives the data”).
- If a contract follows, the data needed to quote, deliver, invoice and handle warranty cases, such as delivery address, invoicing details and product serial numbers.
We do not use analytics or advertising tools and we do not build profiles. We make no automated decisions with legal or similarly significant effects about you; the anti-spam check on the quote page is automated, but a failed check only stops that form submission, which you can repeat or send by email instead.
3. Why we process it and on what legal basis
- To answer your request and prepare a quotation — steps taken at your request before a contract (Art. 6(1)(b) GDPR).
- To perform a contract with you — delivery, invoicing, warranty and service (Art. 6(1)(b)).
- To keep the website and the form secure and free of spam — our legitimate interest in protecting our systems and our mailbox (Art. 6(1)(f)).
- To keep accounting and tax records when we sell to you — legal obligation (Art. 6(1)(c)).
Giving us your contact details is voluntary, but without an email address we cannot answer a quote request.
4. Who receives the data
- Hosting. The website, the form endpoint and our mailbox run on a server provided by Hetzner Online GmbH in Germany, which acts as our processor.
- Cloudflare, Inc. runs the Turnstile anti-spam check on the quote page, described in our cookie notice. (Cloudflare also answers the domain name lookups for this website; those lookups do not contain the data you enter.)
- The manufacturer. If you ask us to handle a warranty or service case, we pass the information needed for that case — serial number, invoice reference, fault description and, where the case requires it, a contact person — to Deye (Ningbo Deye Inverter Technology Co., Ltd. or another Deye company responsible for the product).
- Carriers, accountants, authorities — only if a contract follows and only what they need, or where the law requires it.
We do not sell personal data or share it for marketing.
5. Transfers outside the European Economic Area
Cloudflare, Inc. is established in the United States and is certified under the EU-US Data Privacy Framework; where that does not apply, the European Commission’s standard contractual clauses are used.
Deye companies are established in China: data for a warranty or service case you ask us to handle is transferred because it is necessary to perform that case, with safeguards as required by Chapter V GDPR. You can ask us for a copy of the safeguards that apply.
6. How long we keep it
- Quote requests that do not lead to a contract: up to 3 years after our last exchange, so that we can answer follow-up questions, then deleted.
- Contract, invoicing and warranty records: for the periods required by Romanian accounting and tax law, and for the warranty period of the products.
- The hashed IP address used for the request limit: deleted once it is older than 24 hours, the next time the form is used.
- Web server access logs: for a short period set by the hosting configuration, then overwritten.
7. Your rights
You have the right to access your data, to have it corrected or erased, to restrict its processing, to receive it in a portable format, and to object to processing based on our legitimate interest (Articles 15–21 GDPR). Write to info@deye-batteries.com; we answer within one month.
You can also complain to the Romanian supervisory authority, the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral Gheorghe Magheru 28-30, Sector 1, Bucharest, dataprotection.ro, or to the supervisory authority of the EU country where you live or work.
8. Security
The website is served over HTTPS. The quote form accepts only the fields shown, checks them on the server, limits the number of requests from one IP address and sends the request only to our own mailbox. Access to the server and the mailbox is restricted to the people who need it.
9. Changes to this notice
We update this notice when the website or our processing changes. The date at the top shows the current version.