Privacy Policy

1.Who we are

There are two companies behind the frontier.ro website, and each is a data controller within the meaning of Regulation (EU) 2016/679 (GDPR) for its own part:

• For the business relationship: Frontier International Group, with its registered office at Str. Putna, nr. 3, sc. 1, et. 1, ap. 3, Cluj-Napoca 400548, jud. Cluj, Romania, entered in the Trade Register under no. J1993003944129, tax identification number RO5953148 (the “Company”, “Frontier International Group”, “we”). It is responsible for everything to do with the business: quote requests, orders, the messages you send us, and its relationships with customers and partners.
• For the website: BEAUT1FUL NET S.R.L., with its registered office at Str. Ștefan Cicio-Pop nr. 8, Dej, jud. Cluj, Romania, entered in the Trade Register under no. J2025002266009, tax identification number 51135045 (the “Website Operator”), the company that builds and runs the website on the Company’s behalf. It is responsible for all the data collected through your visits to the website: technical and browsing data, cookies, analytics, session recordings and advertising measurement, as described below. Contact: hello@beaut1ful.net.

Data protection contact: for quote requests, orders and messages, office@frontier.ro / +40 744 438 338; for the website, cookies and analytics, hello@beaut1ful.net.

2.What data we process

Depending on how you interact with us, we may process:

a) Identification and contact data

Name, job title, the company you represent, e-mail address, telephone number, delivery and invoicing address.

b) Commercial and contractual data

Quote requests, orders, purchase history, the products and services requested, correspondence with us, invoicing details (tax number, bank account for legal entities), and details of the equipment you ask us to advise on or to fill.

c) Technical and browsing data

IP address, approximate location derived from the IP address (country, region, city), browser type and version, device type, operating system, screen resolution, browser language, pages visited, visit duration, traffic source (referrer, campaign), technical errors raised in the browser, cookie identifiers and identifiers generated by the analytics tools. Cookies, identifiers saved on your device and detailed usage analytics come into play only with your consent; without it, only aggregate, cookieless measurements are collected (section 9).

d) Website interaction data – session recording (only with your consent)

How you use the website: cursor movement, clicks, scrolling, navigation between pages and interaction with interface elements. The contents of form fields (name, e-mail, telephone, messages) are masked automatically and are not recorded. Recordings contain no content from outside our website.

e) Communications data

The contents of messages sent through the contact form, by e-mail, by telephone or through messaging apps.

We do not process special categories of data (health data, ethnic origin, religious beliefs and the like) and we do not ask you to provide any.

3.Where the data comes from

• Directly from you, when you fill in a form, contact us or place an order.
• From the company you represent, when you are named as its point of contact.
• From public sources (the Trade Register, your company’s website) to verify invoicing details or for B2B prospecting.
• Automatically, through the analytics and advertising tools described in section 9: those that save cookies or identifiers on your device only if you have accepted them in the cookie banner, and aggregate, cookieless measurements for every visitor.

4.Purposes and legal bases

Where we rely on legitimate interest, we have assessed that the processing does not disproportionately affect your rights. You can ask us for details of that assessment at the contact address.

Consent for the analytics and advertising tools can be withdrawn at any time from “Cookie settings”, without affecting the lawfulness of processing carried out beforehand.

5.Who we share data with

Data may be shared, strictly as necessary, with:

• Transport and courier providers, including ADR carriers, to deliver the products.
• IT providers: web hosting, e-mail, order management/ERP, e-mail marketing platform, cloud services.
• Manufacturers or product suppliers, where needed for special orders, warranty or technical support.
• Accountants, auditors, lawyers and consultants bound by confidentiality.
• Public authorities (the tax authority, ANPC, courts, inspection bodies), where the law requires it.
• Analytics, advertising and consent management providers: PostHog, Inc. – usage analytics and session recording, only if you have accepted it in the cookie banner, with data hosted in the European Union (Frankfurt); Google Ireland Limited – Google Tag Manager, Google Analytics 4 and Google Ads, with cookies only if you have accepted them and otherwise with cookieless measurements only; visitors.now – aggregate, cookieless traffic statistics; Usercentrics GmbH – the cookie banner and the record of your choices.

We have data processing agreements under art. 28 GDPR in place with every provider that processes data on our behalf.

6.Transfers outside the European Economic Area

Data collected through PostHog is stored on servers in the European Union. Google may process data in countries outside the EEA, including the United States, under the EU–US Data Privacy Framework and the standard contractual clauses approved by the European Commission.

7.How long we keep data

Once those periods expire, the data is deleted or anonymised.

8.Your rights

Under the GDPR you have the following rights:

• Right of access – to obtain confirmation that we process data about you, and a copy of it.
• Right to rectification – to have inaccurate or incomplete data corrected.
• Right to erasure (the “right to be forgotten”) – under art. 17 GDPR, except where we are legally obliged to keep the data.
• Right to restriction of processing – under art. 18 GDPR.
• Right to data portability – to receive the data you provided in a structured format, where processing is based on consent or on a contract.
• Right to object – to object to processing based on legitimate interest, including direct marketing, in which case we will stop processing your data for marketing.
• Right to withdraw consent – at any time, without affecting the lawfulness of processing carried out beforehand. For analytics, session recording and advertising, withdrawal is done from “Cookie settings”.
• Right not to be subject to automated decision-making – we do not use solely automated decisions producing legal effects on you.
• Right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, sector 1, Bucharest, dataprotection.ro, anspdcp@dataprotection.ro.

To exercise your rights, write to us at office@frontier.ro. We reply within one month of receiving the request at the latest; that period may be extended by two months for complex requests, and we will tell you if it is. We may ask for further information to verify your identity.

9.Cookies, analytics tools and similar technologies

The website uses browser local storage (localStorage), cookies and analytics tools.

On a first visit, no analytics or advertising cookie is set. Until you make a choice in the cookie banner, Google Analytics and Google Ads send only cookieless measurements, with no identifier saved on your device; PostHog loads only once you accept it. visitors.now runs for every visitor, also without cookies (section 9.2). If you choose “Reject all”, the website works normally, and Google Analytics and Google Ads stay in cookieless mode.

9.1. Strictly necessary (no consent required)

These keep the website working. They are localStorage and sessionStorage entries, saved only on your own device and never transmitted to us or to any third party: your theme preference (light/dark), your language preference, the state of the catalogue’s product list, the catalogue’s display mode, your last search, and the contents of the quote request you are putting together.

Your choice in the cookie banner is stored by Usercentrics, also in localStorage, and recorded by it as proof of consent.

9.2. Analytics

visitors.now – a traffic measurement tool that sets no cookies and saves nothing on your device. It counts visits, page views and actions on the website (sending a quote request, for instance) from the technical data the browser sends (IP address, browser type, page, referrer), in aggregate form. Because it does not identify the visitor, it runs without consent, on our legitimate interest in knowing the website’s traffic, and is not offered as a choice in the banner.

Google Analytics 4 (the banner’s “Analytics” category) – collects aggregate data about website usage (pages, traffic sources, visit duration, device type, city-level location). IP addresses are not stored by Google Analytics. Google may combine this data with other data it holds, in accordance with its privacy policy: policies.google.com/privacy. Until you make a choice in the banner, Google Analytics sends only cookieless measurements – the page visited, where the visit came from, the language and the screen size, with a random identifier that is not saved on your device. Google Analytics cookies are set only once you accept the “Analytics” category; if you withdraw consent they are deleted, and measurement returns to cookieless mode.

PostHog (the banner’s “Analytics” category, loaded only once you accept it) – detailed website usage analytics and session recording. It collects navigation events (pages visited, clicks, elements used); device and browser information, screen resolution, operating system; approximate location (country, region, city) derived from the IP address; and session recordings, a visual replay of how you navigated (cursor movement, clicks, scrolling). Anything entered into a form is masked and does not appear in the recording. Recordings are viewed only by our authorised staff, to improve the interface, and are deleted after 30 days. PostHog also records technical errors and browser console messages, for debugging, and gathers clicks into interaction heatmaps.

PostHog sets a cookie and/or a localStorage entry holding a random identifier so it can recognise the session and repeat visits. The data is hosted in the European Union.

9.3. Marketing (the banner’s “Marketing” category – consent)

Google Ads – sets cookies to measure how well our campaigns work (conversions, such as sending a quote request) and to show you relevant ads on other sites (remarketing). You can manage Google ad personalisation at adssettings.google.com. Until you make a choice in the banner, Google Ads sends only cookieless measurements; its cookies are set only once you accept the “Marketing” category, and are deleted if you withdraw consent.

9.4. List of cookies and identifiers

The names and lifetimes of the third-party items are verified with a cookie scanner once implementation is final.

9.5. Managing your choices

• Through the cookie banner shown on your first visit, where you can accept or reject each category.
• Through the “Cookie settings” link in the page footer, at any time, to change or withdraw consent.
• Through your browser settings, to block or delete cookies and local storage. Blocking the strictly necessary items may affect how the website works.

Withdrawing consent immediately stops further collection by the tools concerned; data already collected is kept in accordance with section 7.

10.The site assistant

The site can offer an assistant, in the lower left corner of the page, that answers questions about products. It starts only once you have allowed it in the cookie banner (the “Frontier AI Assistant” service, in the “Functional” category). You use it only if you open it and send a question. The conversation stays in your browser while the tab is open, so you find it again from one page to the next; it is deleted when you close the tab. Once you close the assistant’s window or open the conversation, your browser remembers it (in localStorage, as frontier:assistant-card), so the window no longer shows open on every visit.

The text of your question and of the current conversation is sent, through our order application, to AI model providers, who process it on our behalf to write the answer: CheaperInference and OpenRouter, which route the request, and the model makers Anthropic, PBC (the Claude models) and DeepSeek. Under its commercial terms, Anthropic does not use this data to train its models and keeps it only for a limited period. Anthropic may process the data in the United States, under the standard contractual clauses approved by the European Commission.

When the conversation reaches its question limit, it is sent once more, in the same way, to write a draft of your message to us. The draft stays in your browser until you send or delete it.

We keep the question and the assistant’s answer, with any email addresses and phone numbers removed, together with the products suggested, for 180 days, to improve the catalogue and the assistant. We do not keep your IP address: to limit abuse, requests are counted per address for a short time (a day or two), under an irreversible code. We do not link the conversation to your identity. The legal basis is your consent, given in the cookie banner (Art. 6(1)(a) GDPR). You can withdraw it at any time from “Cookie settings” at the foot of the page: the assistant stops, and the conversation is deleted from your browser.

Please do not enter personal data in your questions. Answers are generated automatically and may contain errors: always check the data sheet and your machine’s requirements, or ask an engineer through the contact form.

11.Data security

We apply appropriate technical and organisational measures to protect data: encrypted connections (HTTPS), role-based access restrictions, passwords and authentication for internal systems, masking of form data in session recordings, backups, staff training and confidentiality agreements with suppliers. No method of transmission or storage is completely secure, however; in the event of a security breach presenting a high risk to you, we will inform you in accordance with art. 34 GDPR.

12.Minors

The website is addressed to professionals and to people aged 18 or over. We do not knowingly collect data from minors.

13.Links to other sites

The website may contain links to manufacturers’ sites or to other third parties. We are not responsible for their privacy practices; we recommend that you read their policies.

14.Changes to this policy

We may update this policy to reflect legislative or operational changes. The updated version is published on this page, with the date it was last updated. Where the changes are significant, we will inform you by e-mail or through a notice on the website.

15.Contact

Frontier International Group
Str. Putna, nr. 3, sc. 1, et. 1, ap. 3, Cluj-Napoca 400548, jud. Cluj, Romania
E-mail: office@frontier.ro
Telephone: +40 744 438 338

See also our Terms and Conditions.