0376 444 441

alto-home.ro · GDPR

Privacy policy

Last updated: 19 October 2026

This policy explains what personal data is collected by alto-home.ro, why we collect it, how long we retain it, who we share it with and your rights. Processing is carried out in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Romanian law.

1. Who processes your data

Data submitted through this website is processed by the alto-home.ro team, acting as the data controller. For questions about your data, please contact us at:

2. What data we collect

Data you provide through forms

When you complete the form on our homepage or contact page, we may receive:

  • your first and last name;
  • your phone number (required so we can contact you);
  • your email address;
  • the apartment or number of rooms you are interested in;
  • any message you choose to send us.

Data collected automatically

When you submit a form or click a phone or email link, we also record technical information about the source of your visit: the page from which you sent your enquiry, advertising campaign parameters (such as UTM, Google Click ID, Facebook Click ID and TikTok Click ID), the referring website, and the date and time. This information helps us understand which advertisements are effective.

Cookies and similar technologies (see section 7) collect browsing data, such as pages visited, device and browser type, and a truncated or pseudonymised IP address, according to each provider's rules.

3. Why we use your data and our legal basis

  • To respond to your enquiry: we call or write to you with information about apartments, prices, availability and viewings. Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) and the consent given when submitting the form (Article 6(1)(a)).
  • To keep a record of enquiries in our internal customer relationship management system (CRM), so that we do not contact you repeatedly about the same matter. Legal basis: our legitimate interest (Article 6(1)(f)).
  • To measure traffic and advertising effectiveness (Google, Meta, TikTok). Legal basis: your consent to analytics and marketing cookies (Article 6(1)(a)).
  • To protect the website against abuse and keep it operational. Legal basis: our legitimate interest (Article 6(1)(f)).
  • To comply with legal obligations, if a contract is entered into. Legal basis: compliance with a legal obligation (Article 6(1)(c)).

We do not sell your data or use it to make automated decisions that have legal effects on you.

4. Who we share your data with

Your data is accessed only by sales team members handling your enquiry. The website uses service providers that may process data on our behalf:

  • the web hosting provider, whose servers host the website and store enquiries;
  • the CRM platform used by the sales team to manage enquiries;
  • Google (Google Analytics, Google Tag Manager, Google Ads);
  • Meta Platforms (Meta Pixel, for Facebook and Instagram);
  • TikTok, if you reached the website through a TikTok advertisement;
  • WhatsApp (Meta), if you choose to contact us using the WhatsApp button.

We may also disclose data to public authorities when required by law.

Some providers (Google, Meta, TikTok) may transfer data outside the European Economic Area, including to the USA. Transfers are based on safeguards provided for by the GDPR: adequacy decisions, such as the EU–US Data Privacy Framework, or standard contractual clauses approved by the European Commission.

5. How long we retain your data

  • We retain form data while discussing your enquiry and then for no more than 3 years after the last contact, after which it is deleted or anonymised. If we enter into a contract, we retain data for the periods required by law for contractual and accounting documents.
  • Technical data about the source of a visit is retained with the related enquiry.
  • Cookies have their own lifetimes, set by each provider (usually between the current session and 2 years).

If you withdraw consent or request deletion, data is deleted sooner, except where we are legally required to retain it.

6. Your rights

Under the GDPR, you have the right:

  • to find out what data we hold about you and receive a copy (right of access);
  • to request correction of inaccurate or incomplete data (rectification);
  • to request deletion of your data (right to be forgotten);
  • to request restriction of processing;
  • to object to processing based on legitimate interest, including marketing;
  • to receive your data in a structured format and transfer it to another controller (portability);
  • to withdraw consent at any time without affecting the lawfulness of processing carried out beforehand;
  • to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), 28–30 General Gheorghe Magheru Boulevard, Bucharest, www.dataprotection.ro.

To exercise your rights, write to us at office@alto-home.ro. We will respond within one month of receiving your request.

7. Cookies

Cookies are small files that a website saves in your browser. On alto-home.ro we use the following:

  • Necessary: store your cookie banner choice and the source of your visit locally in your browser so the form works correctly.
  • Analytics: Google Analytics and Google Tag Manager provide statistics on visitor numbers and pages viewed.
  • Marketing: Google Ads, Meta Pixel and TikTok measure advertising results and allow us to show you relevant advertisements on other platforms.

On your first visit, the cookie banner lets you accept or refuse cookies. You can delete or block them at any time in your browser settings. You can also manage personalised advertising directly with the providers:

8. Data security

To protect your data, we use an encrypted connection (HTTPS), restrict access to enquiry files and the CRM system, and securely transfer data between the website and CRM. No internet transmission is completely secure. If we become aware of an incident that may affect you, we will notify you and the authority as required by law.

9. Minors

The website is intended for people over 18. We do not knowingly collect data about minors.

10. Changes

This policy may be updated when the website or legislation changes. The version in force is always the one published on this page, with the last update date shown above.