Privacy Policy
Last updated:3 September 2026
This policy explains what personal data we process when you visit our website or do business with us, on what legal basis, who we share it with, and what you can ask of us in connection with it.
1.Who we are
Frontier International Group, with its registered office at Str. Soporului, nr. 12, Cluj-Napoca, jud. Cluj, Romania, entered in the Trade Register under no. J1993003944129, tax identification number 5953148 (the “Company”, “Frontier International Group”, “we”), is the data controller within the meaning of Regulation (EU) 2016/679 (GDPR) for the data collected through the www.frontier.ro website and in the course of its commercial relationships with customers and partners.
Data protection contact: office@frontier.ro / +40 744 438 338.
2.What data we process
Depending on how you interact with us, we may process:
a) Identification and contact data
Name, job title, the company you represent, e-mail address, telephone number, delivery and invoicing address.
b) Commercial and contractual data
Quote requests, orders, purchase history, the products and services requested, correspondence with us, invoicing details (tax number, bank account for legal entities), and details of the equipment you ask us to advise on or to fill.
c) Technical and browsing data (only with your consent)
IP address (anonymised or truncated where the tool allows it), approximate location derived from the IP address (country, region, city), browser type and version, device type, operating system, screen resolution, browser language, pages visited, visit duration, traffic source (referrer, campaign), cookie identifiers and identifiers generated by the analytics tools.
d) Website interaction data – session recording (only with your consent)
How you use the website: cursor movement, clicks, scrolling, navigation between pages and interaction with interface elements. The contents of form fields (name, e-mail, telephone, messages) are masked automatically and are not recorded. Recordings contain no content from outside our website.
e) Communications data
The contents of messages sent through the contact form, by e-mail, by telephone or through messaging apps.
We do not process special categories of data (health data, ethnic origin, religious beliefs and the like) and we do not ask you to provide any.
3.Where the data comes from
- Directly from you, when you fill in a form, contact us or place an order.
- From the company you represent, when you are named as its point of contact.
- From public sources (the Trade Register, your company’s website) to verify invoicing details or for B2B prospecting.
- Automatically, through the analytics and advertising tools described in section 9, only if you have accepted them in the cookie banner.
4.Purposes and legal bases
| Purpose | Data used | Legal basis (art. 6 GDPR) |
|---|---|---|
| Responding to quote requests and contact enquiries | identification, contact, commercial | steps prior to entering into a contract (point b) |
| Entering into and performing contracts, delivery, invoicing | identification, contact, commercial | performance of a contract (point b); legal obligation for invoicing and tax archiving (point c) |
| Technical consultation and services (tyre fill) | contact, equipment details | performance of a contract (point b) |
| Commercial communications to existing customers | contact | legitimate interest (point f) – with a right to object |
| Newsletter and marketing to non-customers | contact | consent (point a) |
| B2B prospecting (contacting company representatives) | identification, professional contact | legitimate interest (point f) |
| Operation and security of the website (strictly necessary storage, server logs) | minimal technical data | legitimate interest (point f) |
| Traffic statistics and website usage analysis (visitors.now, Google Analytics, PostHog) | technical data, cookies, identifiers | consent (point a) |
| Session recording to improve the interface (PostHog) | interaction data, technical data | consent (point a) |
| Online advertising, conversion measurement and remarketing (Google Ads) | cookies, identifiers, technical data | consent (point a) |
| Handling complaints and disputes | all relevant categories | legitimate interest (point f); legal obligation (point c) |
| Meeting legal obligations (tax, accounting, ADR, reporting) | identification, commercial | legal obligation (point c) |
Where we rely on legitimate interest, we have assessed that the processing does not disproportionately affect your rights. You can ask us for details of that assessment at the contact address.
Consent for the analytics and advertising tools can be withdrawn at any time from “Cookie settings”, without affecting the lawfulness of processing carried out beforehand.
5.Who we share data with
Data may be shared, strictly as necessary, with:
- Transport and courier providers, including ADR carriers, to deliver the products.
- IT providers: web hosting, e-mail, order management/ERP, e-mail marketing platform, cloud services.
- Manufacturers or product suppliers, where needed for special orders, warranty or technical support.
- Accountants, auditors, lawyers and consultants bound by confidentiality.
- Public authorities (the tax authority, ANPC, courts, inspection bodies), where the law requires it.
- Analytics and advertising providers, only if you have accepted them in the cookie banner: PostHog, Inc. – usage analytics and session recording, with data hosted in the European Union (Frankfurt); Google Ireland Limited – Google Analytics 4 and Google Ads; visitors.now – cookieless traffic statistics.
We have data processing agreements under art. 28 GDPR in place with every provider that processes data on our behalf.
6.Transfers outside the European Economic Area
Data collected through PostHog is stored on servers in the European Union. Google may process data in countries outside the EEA, including the United States, under the EU–US Data Privacy Framework and the standard contractual clauses approved by the European Commission.
7.How long we keep data
| Category | Retention |
|---|---|
| Quote requests that did not lead to an order | 2 years from the last contact |
| Contractual data, orders, commercial correspondence | the term of the contract + 3 years (the general limitation period) |
| Accounting records and invoices | 10 years, under Accounting Act no. 82/1991 |
| Consent-based marketing data | until consent is withdrawn, or 3 years of inactivity |
| Session recordings (PostHog) | 30 days from recording |
| Event analytics data (PostHog) | 12 months |
| Google Analytics 4 data | 14 months (GA4 retention setting) |
| Stored cookie preference | 12 months, after which the banner is shown again |
| Analytics and marketing cookies | the lifetime of each cookie (section 9), at most 13 months from consent |
| Data relating to complaints and disputes | until final resolution + the statutory limitation period |
Once those periods expire, the data is deleted or anonymised.
8.Your rights
Under the GDPR you have the following rights:
- Right of access – to obtain confirmation that we process data about you, and a copy of it.
- Right to rectification – to have inaccurate or incomplete data corrected.
- Right to erasure (the “right to be forgotten”) – under art. 17 GDPR, except where we are legally obliged to keep the data.
- Right to restriction of processing – under art. 18 GDPR.
- Right to data portability – to receive the data you provided in a structured format, where processing is based on consent or on a contract.
- Right to object – to object to processing based on legitimate interest, including direct marketing, in which case we will stop processing your data for marketing.
- Right to withdraw consent – at any time, without affecting the lawfulness of processing carried out beforehand. For analytics, session recording and advertising, withdrawal is done from “Cookie settings”.
- Right not to be subject to automated decision-making – we do not use solely automated decisions producing legal effects on you.
- Right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, sector 1, Bucharest, dataprotection.ro, anspdcp@dataprotection.ro.
To exercise your rights, write to us at office@frontier.ro. We reply within one month of receiving the request at the latest; that period may be extended by two months for complex requests, and we will tell you if it is. We may ask for further information to verify your identity.
9.Cookies, analytics tools and similar technologies
The website uses browser local storage (localStorage), cookies and analytics tools.
On a first visit, no analytics or advertising tool is active. They load only once you accept them in the cookie banner. If you choose “Reject all”, the website works normally, using only the strictly necessary items.
9.1. Strictly necessary (no consent required)
These keep the website working. They are localStorage entries, saved only on your own device and never transmitted to us or to any third party: your theme preference (light/dark), your language preference, the state of the catalogue’s product list, the catalogue’s display mode, the state of the search panel, and the contents of the quote request you are putting together.
9.2. Analytics (the banner’s “Analytics” category – consent)
visitors.now – a traffic measurement tool that sets no cookies. It counts visits and page views from the technical data the browser sends (truncated IP address, browser type, page, referrer), in aggregate form.
Google Analytics 4 – collects aggregate data about website usage (pages, traffic sources, visit duration, device type, city-level location). IP addresses are not stored by Google Analytics. Google may combine this data with other data it holds, in accordance with its privacy policy: policies.google.com/privacy.
PostHog – detailed website usage analytics and session recording. It collects navigation events (pages visited, clicks, elements used); device and browser information, screen resolution, operating system; approximate location (country, region, city) derived from the IP address; and session recordings — a visual replay of how you navigated (cursor movement, clicks, scrolling). Anything entered into a form is masked and does not appear in the recording. Recordings are viewed only by our authorised staff, to improve the interface, and are deleted after 30 days.
PostHog sets a cookie and/or a localStorage entry holding a random identifier so it can recognise the session and repeat visits. The data is hosted in the European Union.
9.3. Marketing (the banner’s “Marketing” category – consent)
Google Ads – sets cookies to measure how well our campaigns work (conversions, such as sending a quote request) and to show you relevant ads on other sites (remarketing). You can manage Google ad personalisation at adssettings.google.com.
9.4. List of cookies and identifiers
| Name | Provider | Category | Purpose | Lifetime |
|---|---|---|---|---|
| frontier:theme, frontier:lang | the Company | necessary | theme and language preference (localStorage) | until browser data is cleared |
| frontier:catalog-sidebar, frontier:catalog-view | the Company | necessary | catalogue interface state (localStorage) | until browser data is cleared |
| frontier:order | the Company | necessary | the products added to the quote request in progress (localStorage) | until the request is sent or browser data is cleared |
| cookie_consent | the Company | necessary | stores your cookie choices | 12 months |
| ph_[project]_posthog | PostHog | analytics | anonymous visitor and session identifier (cookie + localStorage) | 12 months |
| _ga | Google Analytics | analytics | distinguishes visitors | 2 years |
| _ga_[ID] | Google Analytics | analytics | maintains session state | 2 years |
| – | visitors.now | analytics | stores no cookie; activated only with consent | – |
| _gcl_au | Google Ads | marketing | conversion measurement | 3 months |
| _gcl_aw | Google Ads | marketing | ad click attribution | 3 months |
| IDE | Google (doubleclick.net) | marketing | remarketing and ad serving | 13 months |
The names and lifetimes of the third-party items are verified with a cookie scanner once implementation is final.
9.5. Managing your choices
- Through the cookie banner shown on your first visit, where you can accept or reject each category.
- Through the “Cookie settings” link in the page footer, at any time, to change or withdraw consent.
- Through your browser settings, to block or delete cookies and local storage. Blocking the strictly necessary items may affect how the website works.
Withdrawing consent immediately stops further collection by the tools concerned; data already collected is kept in accordance with section 7.
10.Data security
We apply appropriate technical and organisational measures to protect data: encrypted connections (HTTPS), role-based access restrictions, passwords and authentication for internal systems, masking of form data in session recordings, backups, staff training and confidentiality agreements with suppliers. No method of transmission or storage is completely secure, however; in the event of a security breach presenting a high risk to you, we will inform you in accordance with art. 34 GDPR.
11.Minors
The website is addressed to professionals and to people aged 18 or over. We do not knowingly collect data from minors.
12.Links to other sites
The website may contain links to manufacturers’ sites or to other third parties. We are not responsible for their privacy practices; we recommend that you read their policies.
13.Changes to this policy
We may update this policy to reflect legislative or operational changes. The updated version is published on this page, with the date it was last updated. Where the changes are significant, we will inform you by e-mail or through a notice on the website.
14.Contact
Frontier International Group
Str. Soporului, nr. 12, Cluj-Napoca, jud. Cluj, Romania
E-mail: office@frontier.ro
Telephone: +40 744 438 338
See also our Terms and Conditions.