MÁRK / Information
Privacy policy.
How we use your data when you contact us or send us a project.
Updated on 13 November 2026
For the MÁRK company website and enquiries submitted through it.
For the MÁRK company website and enquiries submitted through it.
01
Who is responsible for your data
The data controller is HOLZ CENTER S.R.L., owner of the MÁRK brand, Tax ID RO30630547, J26/855/2012, Periș, Gornești commune, no. 75, Mureș County, Romania. For questions about personal data, email us at office@markholz.ro.
02
Which data we process
For a quote request, we process your name, email address, project country, selected products and project description. For a partnership request, we also ask for your company and types of work. The information required depends on the form; fields marked optional are not mandatory. If you write to us directly, we receive the correspondence and documents you choose to send.
The platform may process your IP address, browser and device information, pages visited, and technical operation and security data. Cookies and your choices are described on the Cookies page.
Send only the data needed for the project. Avoid sensitive data and remove unnecessary information about other people from plans. If you represent a company or customer, make sure you are entitled to send the documents concerned.
The platform may process your IP address, browser and device information, pages visited, and technical operation and security data. Cookies and your choices are described on the Cookies page.
Send only the data needed for the project. Avoid sensitive data and remove unnecessary information about other people from plans. If you represent a company or customer, make sure you are entitled to send the documents concerned.
03
What we use your data for
We use the information to reply to messages, assess requirements, provide documentation and prepare a quote or partnership discussion. For steps you request before entering into a contract, the legal basis is Article 6(1)(b) GDPR. For communication with company representatives and general enquiries, the legal basis is our legitimate interest in managing professional relationships and incoming requests under point (f).
Site operation and security rely on our legitimate interest in providing a secure service. Legal obligations rely on point (c). Processing through optional cookies relies on consent where required.
A request does not automatically subscribe you to promotional communications. Without the mandatory information, we may be unable to assess or respond to your request. The site does not offer online sales or payments.
Site operation and security rely on our legitimate interest in providing a secure service. Legal obligations rely on point (c). Processing through optional cookies relies on consent where required.
A request does not automatically subscribe you to promotional communications. Without the mandatory information, we may be unable to assess or respond to your request. The site does not offer online sales or payments.
04
Recipients, transfers and retention
Data is accessible to the people managing MARK enquiries and technical hosting, email and support providers, to the extent needed for their services. Forms are processed through Shopify and sent to the administrative address configured for MARK. Data may be disclosed to authorities where there is a legal obligation.
Shopify uses Shopify International Limited, Ireland, for data from the European Economic Area and may use entities or providers outside the EEA. Its transfer mechanisms include adequacy decisions and standard contractual clauses, as applicable. Details and safeguards are described in the Shopify documentation linked below; you can also request information at our contact address.
We retain correspondence for as long as needed to assess the project, prepare the quote and follow up the enquiry. If a contract is concluded, relevant data becomes part of the commercial relationship documentation. Retention depends on the request's status, archiving obligations and the need to resolve complaints or legal claims. When these reasons cease to apply, data is deleted or anonymised as appropriate; documents subject to statutory archiving are retained for the legally required period.
Access is limited to people and providers who need the data for the purposes described. Website enquiries are not subject to exclusively automated decisions producing legal or similarly significant effects on you.
With your analytics consent, Google receives technical usage and event data through GA4, including successful form confirmations and contact-link clicks. Form field contents are not sent to Google. With marketing consent, the native Shopify TikTok integration may process browsing events. You can change your choices on the Cookies page. Details: https://policies.google.com/privacy and https://www.tiktok.com/legal/page/eea/privacy-policy/en.
With analytics consent, enquiry notifications also include the first observed and latest identifiable campaign source, medium, campaign/content identifiers, landing path and a random request ID. This helps MARK identify which promotion generated an enquiry. Without analytics consent, the request remains unassigned to a campaign and can still be submitted normally. The browser attribution window is 30 days and the record is removed on consent withdrawal.
With analytics, marketing and explicit advertising-measurement sharing consent, the supplementary Shopify custom pixel sends the successful form confirmation and a random event ID to the existing TikTok Pixel. The name, email address, telephone number, project description and other entered form fields are not sent by this supplement. These events do not themselves mean a sale or a qualified commercial opportunity.
Shopify uses Shopify International Limited, Ireland, for data from the European Economic Area and may use entities or providers outside the EEA. Its transfer mechanisms include adequacy decisions and standard contractual clauses, as applicable. Details and safeguards are described in the Shopify documentation linked below; you can also request information at our contact address.
We retain correspondence for as long as needed to assess the project, prepare the quote and follow up the enquiry. If a contract is concluded, relevant data becomes part of the commercial relationship documentation. Retention depends on the request's status, archiving obligations and the need to resolve complaints or legal claims. When these reasons cease to apply, data is deleted or anonymised as appropriate; documents subject to statutory archiving are retained for the legally required period.
Access is limited to people and providers who need the data for the purposes described. Website enquiries are not subject to exclusively automated decisions producing legal or similarly significant effects on you.
With your analytics consent, Google receives technical usage and event data through GA4, including successful form confirmations and contact-link clicks. Form field contents are not sent to Google. With marketing consent, the native Shopify TikTok integration may process browsing events. You can change your choices on the Cookies page. Details: https://policies.google.com/privacy and https://www.tiktok.com/legal/page/eea/privacy-policy/en.
With analytics consent, enquiry notifications also include the first observed and latest identifiable campaign source, medium, campaign/content identifiers, landing path and a random request ID. This helps MARK identify which promotion generated an enquiry. Without analytics consent, the request remains unassigned to a campaign and can still be submitted normally. The browser attribution window is 30 days and the record is removed on consent withdrawal.
With analytics, marketing and explicit advertising-measurement sharing consent, the supplementary Shopify custom pixel sends the successful form confirmation and a random event ID to the existing TikTok Pixel. The name, email address, telephone number, project description and other entered form fields are not sent by this supplement. These events do not themselves mean a sale or a qualified commercial opportunity.
05
Your rights and contact
Under the GDPR, you may request access, rectification, erasure, restriction or portability of your data. You may object to processing based on legitimate interests and withdraw consent for the future without affecting earlier processing.
Email office@markholz.ro and specify your request. We may ask for proportionate information to verify your identity. We normally respond within one month. If an extension permitted by law is necessary, we will inform you within that period.
You may lodge a complaint with Romania's National Supervisory Authority for Personal Data Processing: ANSPDCP. You may also contact the competent authority in the country where you live or work, or where you consider the infringement occurred.
Email office@markholz.ro and specify your request. We may ask for proportionate information to verify your identity. We normally respond within one month. If an extension permitted by law is necessary, we will inform you within that period.
You may lodge a complaint with Romania's National Supervisory Authority for Personal Data Processing: ANSPDCP. You may also contact the competent authority in the country where you live or work, or where you consider the infringement occurred.
See cookies and preferences, Shopify's data processing agreement and Shopify's privacy policy.