Skip to content
InterfaceWell Tracking App
→Contact Us

Privacy Policy

Last updated: May 26, 2026

Who we are

Endurance Lift Solutions International SRL ("ELSI", "we", "our", or "us") is the data controller for personal data processed through this website (endurancelift.ro). Our registered office is at Sat Negoiești, comuna Brazi, str. Piatra Craiului nr. 7, Hala 9, Zona Industrială DIBO, județul Prahova, România. Full company registration details are listed in our Legal Notice.

What personal data we collect

We only collect personal data you actively provide to us, plus minimal technical information needed to operate the website. Specifically:

  • Contact-form submissions: full name, email address, company name (optional), phone number (optional), inquiry type, and the message you write.
  • Email correspondence: anything you choose to send to elsi.contact@endurancelift.com or any other email address published on this site.
  • Employee portal accounts (internal users only): work email, full name, department, job title, role, and any avatar or profile information you upload. Accounts are invite-only.
  • Technical request logs: IP address, user agent, requested URL, and timestamp are temporarily recorded by our hosting provider for security and abuse-prevention purposes; we do not use these logs for marketing or analytics.

We do not use cookies, pixels, or scripts for advertising, profiling, behavioural tracking, or third-party analytics on the public website. See our Cookie Policy for the full cookie inventory.

Why we process it (lawful basis)

Under the EU General Data Protection Regulation (GDPR), every processing purpose requires a lawful basis. Ours are:

  • Responding to inquiries (contact form, email): Article 6(1)(b) — pre-contractual measures taken at your request — when your message relates to a quote or potential order; otherwise Article 6(1)(f) — our legitimate interest in answering inbound questions from prospective customers, partners, and candidates.
  • Job applications sent to any published careers email address: Article 6(1)(b) — pre-contractual measures.
  • Employee portal operation: Article 6(1)(b) — performance of an employment or contractor relationship — or Article 6(1)(f) — legitimate interest in running internal operations.
  • Security logging and abuse prevention: Article 6(1)(f) — legitimate interest in protecting the site and our users.
  • Compliance with Romanian or EU legal obligations (e.g. responding to a lawful authority request): Article 6(1)(c).

Who we share it with

We do not sell personal data and do not share it for third-party marketing. Personal data is disclosed only to the following categories of recipients, each acting under a written data-processing agreement where required:

  • Supabase, Inc. (United States) — hosts our employee portal database and authentication service. EU-to-US transfers rely on the EU-US Data Privacy Framework and Standard Contractual Clauses.
  • Vercel, Inc. (United States) — hosts the website. Same transfer safeguards apply.
  • Resend, Inc. (United States) — delivers transactional emails (contact-form notifications, portal invites, password resets). Same transfer safeguards apply.
  • Google LLC — only if you choose to open our address via the 'Open in Google Maps' link. We do not embed Google Maps on the page itself.
  • Romanian and EU public authorities — only where we are legally required to disclose (e.g. court order, regulator request).

How long we keep it

We retain personal data only as long as needed for the purpose it was collected for:

  • Contact-form messages: up to 24 months from receipt, unless the inquiry results in a commercial relationship — in which case it is retained for the duration of that relationship and for as long as required by Romanian commercial and tax law (typically 10 years for accounting records).
  • Job applications: up to 12 months from submission, unless you ask us to keep them longer for future openings.
  • Employee portal accounts: for the duration of the working relationship, then archived in accordance with Romanian labour law (typically 75 years for employment records).
  • Technical request logs: rotated automatically by our hosting provider, typically within 30 days.

Your rights

Under the GDPR, you have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate or incomplete data.
  • Erasure — ask us to delete your data, subject to legal retention obligations.
  • Restriction — ask us to limit how we use your data in certain situations.
  • Portability — receive your data in a structured, machine-readable format.
  • Objection — object to processing that we base on legitimate interest, including any direct marketing.
  • Withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, email us at elsi.contact@endurancelift.com. We will respond within one month, as required by the GDPR. If you are unhappy with our response, you have the right to lodge a complaint with the Romanian supervisory authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 București, Romania, email anspdcp@dataprotection.ro, web https://www.dataprotection.ro.

Security

We use HTTPS for all traffic, store portal data in a managed PostgreSQL database protected by row-level security, restrict administrative access to a small number of authenticated staff, and follow industry-standard practices for secret management. No internet-facing system can guarantee absolute security; if we ever become aware of a personal-data breach that is likely to result in a risk to your rights, we will notify the supervisory authority within 72 hours and inform affected individuals where the GDPR requires it.

Children

This website is aimed at business audiences (oil & gas operators, partners, suppliers, job candidates) and is not directed at children. We do not knowingly collect personal data from anyone under the age of 16.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our processors, or applicable law. The 'Last updated' date at the top of the page indicates the most recent revision. Material changes will be highlighted on the website.

Contact us

For any questions about this Privacy Policy or our processing of your personal data, contact us at elsi.contact@endurancelift.com or write to Endurance Lift Solutions International SRL, Sat Negoiești, comuna Brazi, str. Piatra Craiului nr. 7, Hala 9, Zona Industrială DIBO, județul Prahova, România.