개인정보 처리 안내.

Controller and contact

The controller for this website is MAR & PET GRUP S.R.L., fiscal ID 15455744, trade-register number J2004001290293, EUID ROONRC.J2004001290293. Its registered office is 41 Școlii Street, Drăgănești village, Drăgănești commune, 107210, Prahova, Romania. Privacy requests may be sent to partener@marpet.ro. See company information.

What we collect and why

We process the contact details, project description, page and campaign attribution, and—when used—the validated Vision 3D technical snapshot you submit. The purpose is to review your request, contact you, prepare a quotation, maintain a reliable Lead ID audit trail and measure platform-originated opportunities. We do not use a request as a marketing subscription without separate consent.

Legal bases and required information

For an individual asking about a potential contract, we use information supplied in an enquiry to take steps at that person’s request (GDPR Article 6(1)(b)); without contact details and a description we cannot respond. For business representatives and limited security, abuse-prevention and lead-audit data, we rely on the legitimate interest in answering enquiries and protecting the service (Article 6(1)(f)), subject to your rights. Optional product and contact-click analytics use your separate consent (Article 6(1)(a)), which you may refuse or withdraw. Contractual, accounting or legal records are processed where a legal obligation applies (Article 6(1)(c)). Romanian Law 190/2018 supplements the GDPR where applicable; it does not replace these grounds. There is no solely automated decision with legal or similarly significant effect: Mara and Vision 3D do not approve offers, prices or technical feasibility.

Lead ID and returning-visitor key

Each accepted request receives a unique Lead ID whether or not optional analytics is accepted. Only after optional consent, a first-party, HTTP-only pseudonymous cookie may be retained for up to 24 months to link later enquiries. After refusal, the enquiry still works without this cookie. The database stores only a one-way fingerprint, not its raw value.

Who receives the data

Operational notifications are sent to the approved MAR&PET and PXP500 recipients responsible for commercial follow-up and reporting. Infrastructure providers include Supabase for the lead register and authentication, Cloudflare for network delivery, Hetzner for application hosting, and Resend for transactional email.

International processing

The lead database is hosted by Supabase. Transactional notifications sent through Resend include the lead’s contact and request content as well as delivery metadata; Resend may process this information in the United States under its contractual transfer safeguards. Strict EU-only processing is therefore not claimed for the current notification path.

Optional analytics: product journeys and commercial contact clicks

Only if you accept optional analytics, content-free lifecycle events record the product, language, an allowlisted step and a random first-party browser UUID. The UUID contains no account or contact data, stays in localStorage for no more than 30 days, and is then rotated; the server stores only a separately domain-separated HMAC. Reports count active pseudonymous browser clients, sessions and sessions per client. These are not people or accounts: one person can be counted on several browsers or devices, several people can share a browser profile, and clearing storage creates a new client. We may also record activation of an explicitly marked commercial email or telephone link. That event contains the channel, selected MAR&PET contact, link placement, pathname, language, limited UTM values and time. Neither telemetry path contains your message or call content, email address, telephone number, full URL, referrer, raw IP address, User-Agent or the cookie key used for leads. A separate one-way rate-limit token derived from the network address is retained for no more than 48 hours and is never shown in the report. A click indicates contact intent only: it does not prove that a message was sent or a call was made and does not create a Lead ID, commercial alert or marketing subscription. Contact-click events and content-free product telemetry have an approved 90-day retention period. You may decline or withdraw permission at any time from Analytics settings without affecting product use or contact links.

Retention

The attribution cookie is kept for no more than 24 months. Prospect lead records with personal data have an approved retention period of 365 days from their latest recorded activity. Converted or won customers follow the separately applicable contract, dispute, accounting and legal-obligation periods.

Your choices and rights

You may request access, correction, deletion, restriction, portability where applicable, or object to legitimate-interest processing, and may withdraw consent where it is the applicable basis. You may complain to the Romanian supervisory authority, ANSPDCP, or another competent authority. Withdrawing consent does not affect processing already performed lawfully. Our cookie policy explains browser storage and how to change analytics consent.

Security and data minimisation

Access to the lead register is restricted to five approved identities with role-based permissions and an immutable event trail. Vision 3D submissions store a reduced technical snapshot; locally selected photographs and raw editor history are not included in the lead record.

Mara와의 대화

Mara는 언어와 브라우저 탭별로 최대 24개 메시지만 로컬에 보관합니다. 세션은 24시간 이내 자동 만료·삭제되며 “새 대화”를 누르면 즉시 삭제됩니다.

서버 AI가 활성화된 경우에만 메시지와 최근 기록이 OpenAI로 전송될 수 있습니다. 검토와 생성 전에 식별 가능한 이름, 이메일, 전화번호, 주소, 우편번호 패턴을 자동 대체합니다. 이는 추가 보호이며 모든 자유 텍스트의 익명화를 보장하지 않으므로 개인정보를 입력하지 마세요. 요청은 store: false를 사용합니다. 네트워크 주소는 임시 HMAC으로 변환되어 60초 이내 삭제되고 원본은 저장되지 않습니다.

답변 생성 전에 OpenAI의 검토 서비스가 현재 메시지와 클라이언트가 제공한 최근 대화 기록을 확인할 수 있습니다. 표시된 줄은 생성에 전송되는 문맥에서 제거됩니다. 안전 제어를 위해 자사 HttpOnly 쿠키에 임의 UUID를 저장하며, 이 쿠키는 /api/mara로 제한되고 최대 30일간 유지됩니다. OpenAI에는 파생된 HMAC만 전송되며 원본 UUID, 방문자의 네트워크 주소 또는 브라우저 User-Agent는 전송되지 않습니다. 내부 측정 서비스가 활성화되면 콘텐츠 없는 텔레메트리에 세션 생명주기, 언어와 허용된 단계가 포함되고, AI 호출에는 작업, 상태, 모델, 프롬프트 버전, 정확한 지연 시간과 토큰 수가 포함됩니다. 비용은 버전이 지정된 요금이 설정된 경우에만 표시되며, 그렇지 않으면 “neinstrumentat”입니다. 세션 식별자는 HMAC 처리되고 메시지와 대화 기록은 저장되지 않습니다. 선택적 분석에 동의하면 무작위 자사 브라우저 UUID가 localStorage에 저장되고 30일 이내에 교체되며, 서버에는 별도로 분리된 HMAC만 저장됩니다. 이는 사람이나 계정이 아닌 활성 가명 브라우저 클라이언트와 클라이언트당 세션을 측정하며, 한 사람이 여러 기기에서 여러 번 표시될 수 있습니다. 승인된 정책은 콘텐츠가 없는 텔레메트리를 90일 동안 보존합니다.

견적 양식의 연락처 정보는 대화에 자동으로 복사되지 않습니다. 분석을 위해 전송되는 페이지 정보에는 허용된 공개 경로만 포함되며, URL 쿼리 매개변수와 # 뒤의 부분은 제외됩니다.

Vision 3D의 자연어 입력은 먼저 로컬에서 해석됩니다. 선택적 AI 보정이 활성화된 경우에만 개인정보를 가린 요청과 축소된 기술 구성이 store: false로 OpenAI에 전송될 수 있습니다. 연락처와 이미지는 제외되며 모델은 권위 있는 기술 값을 확정할 수 없습니다.