Privacy Policy

INARIIT-GROUP considers it essential to protect your personal data, which is why we have implemented appropriate technical and organisational measures to protect it. We inform you that we have issued internal policies regarding the processing of your personal data by our employees and collaborators.

If you wish to browse anonymously and do not want us and our service providers to independently monitor your browsing behaviour, you must make the appropriate settings in your browser. You can, for example, browse in “incognito” mode with Google Chrome or in “private” mode with Firefox.

Please be informed that by accepting the Privacy Policy, you consent to the collection, processing and use of personal data by INARI IT GROUP SRL, taking into account the Data Protection Act / General Data Protection Regulation (GDPR) and the following terms and conditions.

Controller means the legal entity which alone or jointly with other entities determines the purposes and means of the processing of personal data.

Company name: INARI IT GROUP SRL
Company address: str. Vasile Alecsandri, nr.3, ap.3, jud. Timis, Timisoara, Romania
Trade Register Number: J35/3948/2022
CUI: 46698506
E-mail: email@rail-forge.com

For any GDPR-related queries, you can contact our direct Data Protection Officer at: email@rail-forge.com.

You are in control of your personal data, which is why you have the right to refuse the collection, processing or use of your personal data by INARIIT-GROUP under the Data Protection Act once you are no longer our customer. All you need to do is send an e-mail of refusal to email@rail-forge.com. This will automatically result in the termination of communications from us.

IMPORTANT! You should be aware that, by refusing, it may not be possible to use the RAILFORGE website and to deliver and/or access the digital products purchased by you on www.rail-forge.com for technical reasons.

You have the right to receive clear information about the personal data we have stored, free of charge. The law gives you the following rights:

I. Right of access – The right to know what data is collected and how it is processed;
II. Right to rectification – The right to ask for personal data to be amended if it is not up to date;
III. Right to erasure / “right to be forgotten” – Right to request the erasure of personal data;
IV. Right to restriction of processing – Right to restrict the processing of personal data;
V. Right to data portability – Right to transfer personal data in a structured, commonly used and machine-readable format;
VI. Right to object – The right to withdraw consent or object to the processing of personal data;
VII. Right to lodge a complaint with the supervisory authority – The right to lodge a complaint against RAILFORGE with the supervisory authority.

The supervisory authority responsible for INARIIT-GROUP is:
National Supervisory Authority for Personal Data Processing:
Address: B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, postal code 010336, Bucharest, Romania
E-mail: anspdcp@dataprotection.ro
Telephone: +40.318.059.211, +40.318.059.212

To exercise your rights as a data subject, please do not hesitate to contact our Data Protection Officer at: email@rail-forge.com.

INARIIT-GROUP collects, processes, stores and discloses various personal data in order to be able to deliver the services you have ordered. We have detailed below for what purposes and under what circumstances we disclose your data to others.
Personal data is information from which we can directly or indirectly relate to you, such as your first and last name, address, telephone number, date of birth, location details and email address.
To be transparent and make it clear and easy for you to understand how these new provisions work and apply, we will use the form in the table.
As there are different types of data, we have grouped them into categories according to how we think the information is easiest to understand.
Personal data we collect when:

a) Visit www.rail-forge.com
When you access our website, but without being logged in, INARIIT-GROUP collects the following personal data:
Device information: device ID, operating system and corresponding version or other device identifiers.
Connection data: time, date and duration of website use, origin, corresponding IP address and other protocol data.
This information is collected to display the website visited. To ensure that we comply with the principle of minimizing personal data, INARIIT-GROUP is limited in collecting only data that is absolutely necessary.

b) You visit www.rail-forge.com and register
All data collected is strictly related to well-defined purposes.
In order to take advantage of all the benefits we offer, after registration you will receive a confirmation e-mail from us as well as further information and questionnaires. INARIIT-GROUP will collect all the data necessary to process your orders, fields that are marked as mandatory. Without this information we cannot process your orders. All other information that is not marked as mandatory fields is optional. If you provide us with this personal data, you will voluntarily help us to improve our services.
Access data: Email address, Password
Account information: Name, First Name and/or Email Address.
Device Information: Device ID, operating system and corresponding version or other device identifiers.
Communication data: Comments, ratings or feedback, communication data (e.g. email communication).
Connection data: Time, date and duration of website use, origin, corresponding IP address and other protocol data.
Order information: Order history.
Other information: Data that we receive voluntarily while you use the website or other related activities, but also from other sources such as social media or other (public) databases (e.g. online surveys to evaluate the quality of our services, user ID of other platforms – Facebook, Google, etc.).

As we have informed you, we collect your personal data only when necessary for legal and contractual purposes.

a) For what purpose do we collect your personal data?
Customer relations: when you contact us for information or to make a complaint, we store the information you provide. For example, why you contacted us, which order you were not happy with, etc. Depending on the reason you contacted us, the personal data may vary.
INARIIT-GROUP wants you to be a satisfied customer and so the personal data you provide to us when sending us an email is stored and recorded on our internal server.
Categories of personal data: account data, access data, communication data, other information.
Legal basis: This information is necessary for us to fulfil our obligations in relation to your order and for the performance of the contract. INARIIT-GROUP is interested in providing you with the best experience (legitimate interest).

b) Report on the order taking process:
Once your order is confirmed, you receive access to the purchased services.
Categories of personal data: order details, first and last name, e-mail address.
Legal basis: In order to grant you access to the platform and thus to honour your order, we need your personal data (fulfilment of the contract).

c) Cyber security and protection
INARIIT-GROUP is committed to giving you the best experience. For this reason, in order to protect our services, we need to collect personal data that helps us identify potential attackers and thus prevent risks. We also save the fact that we have informed you about our privacy policy. To this end, we note in your account that you have received the appropriate information and that the privacy policy has been made available to you.
Categories of personal data: Login data
Legal basis: we are legally obliged to protect your data appropriately (compliance with legal obligations) and protecting society is in our interest (legitimate interest).

d) Further processing based on our legitimate interest
In addition to the purposes and legal bases mentioned above, we also process your personal data out of a so-called legitimate interest. A legitimate interest is in particular the processing of personal data in a group of companies, network and information security processes or direct marketing activities. We use your personal data to pursue our legitimate interests, provided that your rights and freedoms are respected.
Legitimate interest in purpose:
I. Advertising: INARIIT-GROUP will continue to send you emails to offer you discounts and promotions, questionnaires to conduct surveys and market research to improve services. You have the right to refuse further processing of your data for advertising purposes on the occasion of each e-mail, in which case please contact our Data Protection Officer at the e-mail address mentioned above.
II. E-mail marketing: INARIIT-GROUP will select the information for marketing purposes, so that only information that matches your preferences will reach you. You have the right to refuse further processing of your data for marketing purposes on the occasion of each e-mail, in which case please contact our Data Protection Officer at the e-mail address mentioned above.
III. Measurement data: In order to improve our services and to optimize our advertisements, we will collect various measurement data.
IV. Divestiture and Acquisition, Merger and Acquisition, Change of Associates: Please be advised that in the event of a divestiture, merger followed by a full or partial acquisition of shares, INARIIT-GROUP will disclose your personal information to the respective company. INARIIT-GROUP will ensure that any third party acquiring all or part of the company will comply with the legal regulations on the protection of personal data.
V. Other information: the data you voluntarily provide when using our website, as well as information from other sources, such as social media or other (public) databases (e.g. user ID of other platforms), will be collected and processed together with the data requested by us.

We generally delete data after the purpose has been fulfilled. Different erasure rules apply depending on the purpose of the processing. Collected data are marked with a deletion rule. When the retention period is fulfilled, the stored data will be deleted accordingly.
INARIIT-GROUP will delete your personal data whenever you wish and immediately after you have notified us or after 2 (two) years after the purpose has been fulfilled. If your account will be inactive for 2 (two) years, INARIIT-GROUP will also delete your account. Prior to this, you will receive a separate notification from us to the email address registered in your user account.
In addition to the deletion rules defined by us, there are other legal retention periods that we must observe. For example, tax data must be kept for a period of ten years or even longer in some cases.
Therefore, despite your request to delete your data, we may still store some data stored due to legal regulations. In this case, we will restrict the data from further processing.

INARIIT-GROUP does not provide your data to unauthorized third parties. However, as part of our business, we obtain the services of selected vendors and provide them with limited and strictly monitored access to some of our data.
For example, outsourced customer relations agents or programmers may have access to your information in order to perform services for you. Your information will be treated as private and confidential by the providers of such services and is not used for any purpose other than those for which we have authorized them. We may also use third party advertising agencies or other service providers to place advertisements on our site on behalf of INARIIT-GROUP or third party advertisers. These companies may use cookies and web beacons to measure advertising effectiveness. Any information these parties collect through cookies and web beacons is completely anonymous.
Before we pass personal data to these partner companies to process on our behalf, we ensure that they comply with legal requirements for the protection of personal data and can demonstrate the level of data protection with appropriate evidence.

When you use www.rail-forge.com, cookies will be saved on your computer, mobile or tablet.
Our website is constantly being adapted to meet the needs of our users. We use cookies for this purpose, but also to send you personalised offers both on our website and on social media.
Read below to find out what a cookie is, how they work and how we use them on the site.

a) What is a cookie and what is it used for?
Our website uses cookie technology to provide you with a better and more personalised web service. The data stored by the cookie files used on our website never reveal personal details on the basis of which an individual identity can be established.
A cookie file is a small text file that is stored and/or read by your web browser on the hard drive of your end device (e.g. computer, laptop or smartphone) depending on which websites you visit. Cookies also make your interaction with websites safer and faster because they can remember your preferences (e.g. login), sending the information they contain back to the original website (first-party cookie) or to another website to which they belong (third-party cookie), when you visit that website again using the same end device.

b) How can you control cookies?
You can withdraw your consent to cookies at any time. To do so, you can block or delete cookies either through your web browser settings or by using software provided by third parties or by following the specific instructions for cookie categories in the following sections. In any case, disabling cookies may cause problems with the use of certain parts of the RAILFORGE website.
If you want to delete cookies stored on your devices and configure your web browser to refuse cookies, you can use the preferences settings in your web browser. Typically, you can find the browser settings related to cookies in the “Options”, “Tools” or “Preferences” menus of the web browser you use to access the RAILFORGE website. Depending on your web browser, different means can be used to disable cookies. For more information, please visit the cookie settings section of the website of the browser you are using.
To learn more about cookies, please visit www.allaboutcookies.org or see www.youronlinechoices.eu, which contains additional information on behavioral advertising and online privacy.

c) Cookie files used on the www.rail-forge.com website
Based on the function and purpose for which cookie files are used, they are usually classified into the following categories, which RAILFORGE uses on its website www.rail-forge.com:
Absolutely necessary cookie files allow you to browse the website and use its basic functions. They are usually installed only in response to actions performed by you, which amount to a request for service. These cookies are indispensable for the use of the websites.
Functionality cookies are used to recognise you when you return to our website and allow us to provide you with enhanced and more personalised features, such as remembering your preferences. These cookies collect anonymous information and cannot track your browsing on other websites. The expiry period of these cookies is a maximum of 2 years.

Analytical and performance cookies allow us to recognize and count users and collect information about how the website is used (e.g. which pages a user opens most often and whether the user receives error messages from certain pages). This helps us to improve the way our website works, for example, by ensuring that you can easily find what you are looking for. The expiry period of these cookie files is a maximum of 2 years. As for third-party cookies, the expiry period may vary and in some cases may exceed 2 years. For more details on this category of cookies, see Section d) below.
Marketing and audience identification cookies record your visit to our website, the pages you visited and the links you clicked. We use this information to provide advertisements that are more relevant to you and your interests. It is also used to limit the frequency with which you see an advertisement and to help measure the effectiveness of advertising campaigns. We may also share this information with third parties (such as advertisers) for this purpose. The expiry period of these cookie files is a maximum of 2 years. For third-party cookies, the expiry period may vary and in some cases may exceed 2 years. For more details on this category of cookies, see Section e) below.
Social media cookies allow you to share your social media activity on the website, such as Facebook, Instagram or Twitter. These cookie files are not controlled by us.
Other types of cookie files may be used later. We will inform you through our updated policies if any other types of cookies are used
Please note that INARIIT-GROUP uses third party services to obtain information about your use of the website to optimise your user experience and to present advertisements to you outside the website. These third parties (including, for example: advertisers and external service providers such as web traffic analysis services) may also use cookies, over which we have no control.

d) Cookie files used for statistical purposes and web traffic monitoring
Google Analytics
Our website uses Google Analytics, a web analytics service provided by Google. Google Analytics uses cookies to help a website analyze how you use that website. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers which may be located in the EU, EEA and/or the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google.
You can opt out of Google Analytics without affecting the way you can visit our website.
Detailed information on Google Analytics and the protection of personal data (including how you can control the information sent to Google) can be found at: https://policies.google.com/privacy/partners.
To prevent tracking by this type of cookie, you can install an add-in on your web browser (http://tools.google.com/dlpage/gaoptout)

e) Social networking cookie files
On www.rail-forge.com third parties providing applications through this website may place their own cookie files in order to monitor the performance of their applications or to customize these applications for you. For example, when you share an article using a social media share button (e.g., Facebook or Twitter) available on the website, the social media platform associated with that button will record this. There may also be embedded content on the website, for example video content from third parties such as VIMEO or YouTube, in which case these third parties may place their own cookies.
Such cookie files cannot be accessed by RAILFORGE.

f) Refusing the use of cookies
If you do not want INARIIT-GROUP to collect and analyse information about your visit, you can do so at any time in the future (opt-out). If you wish to opt-out, please contact us according to the contact information above.

***
Last update: 19.03.2023.

We may update this policy from time to time and will notify you of any changes by posting the new version on our website. If you have provided us with your contact details and authorised us to contact you, we will notify you if we change this policy substantially. Please check this policy periodically for any changes. In the event of changes to applicable law, we will notify you as a matter of priority.