XGSM Iași · GDPR
Privacy Policy
Last updated: September 2026
At XGSM Iași we respect your personal data. We collect strictly what we need to answer your quote requests and manage your repairs — nothing more. Below we explain, simply, what data we take, why, how long we keep it and what rights you have.
1. Who we are
XGSM Iași is a physical GSM repair shop in Iași, Romania, and the controller of the personal data collected through this site. You can find us at the address and contact details at the bottom of this page.
2. What data we collect
Through the quote-request form and through direct contact (phone, email, WhatsApp) we collect: your name, a way to reach you (phone number or email address), your phone model and the details you give us about the problem or part.
When we take devices into the shop we may also note: the device's serial number or IMEI (for identification and warranty) and its condition at reception. We never collect passwords, card data or the content of your phone.
3. Why we use it (legal basis)
We use your data to: (a) answer your quote request and contact you about the repair — steps needed to enter into a contract; (b) perform the repair and issue the legally required documents (reception slip, warranty, invoice); (c) keep the accounting and fiscal records required by law.
We don't use your data for other purposes and we don't send you marketing messages without your consent.
4. Who we share it with
We never sell or rent your data to anyone. Data may only pass through the technical providers that help us run the site and our services (hosting, e-mail, cloud infrastructure) — all contractually bound to data protection. Data may be disclosed to authorities only where the law requires it.
5. How long we keep it
Quote requests and correspondence are kept for as long as needed to answer you and manage your repair. Legal documents (invoices, reception slips, warranties) are kept for the period required by fiscal and warranty legislation. Afterwards, data is deleted or anonymized.
6. Cookies and tracking
This site uses no tracking cookies, runs no third-party analytics and does not profile your activity. We install no marketing pixels.
7. Your rights
Under the GDPR you have the right of access to your data, to rectification, to erasure (“the right to be forgotten”), to restriction of processing, to data portability and to object. You can contact us anytime at the address below to exercise these rights — we reply within 30 days at most.
If you believe we haven't handled your data correctly, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28–30, Sector 1, Bucharest, www.dataprotection.ro.
8. Changes to this policy
If we change this policy we publish the new version on this page and update the date above. Please check back periodically — the latest published version is the one in force.
Data controller & contact
XGSM Iași
Strada Țepeș Vodă, Iași