Privacy Policy
Information regarding how EnergySoft ASSET SRL collects, processes, and protects your personal data in full compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR).
General Information & Data Controller
This Privacy Policy sets out how EnergySoft ASSET SRL, headquartered in Buzău, Str. Zimbrului Nr 12, registered with the Trade Register Office, processes and protects personal data collected through the website energysoft.ro and related technical services.
As a data controller under the General Data Protection Regulation (EU) 2016/679, we are committed to respecting confidentiality, implementing high-level security standards, and processing personal data strictly for specified, explicit, and legitimate business purposes.
Categories of Personal Data Processed
Depending on how you interact with our website and services, we may collect and process the following categories of data:
Technical Contact Data
Full name, professional work email, telephone number, company/organization name, and project notes provided voluntarily via our proposal request forms.
Technical & Browsing Data
IP address (anonymized for security logs), browser type, operating system, timestamp of access, and technical cookies necessary for website operation and DDoS mitigation.
Legal Grounds & Purposes of Processing
We process your personal data in strict compliance with Article 6 of Regulation (EU) 2016/679, based on the following legal grounds:
- Pre-contractual Steps & Contract Performance (Art. 6(1)(b) GDPR): Responding to technical assessments, preparing commercial proposals, drafting technical specifications, and executing Mutual NDAs.
- Legitimate Interest (Art. 6(1)(f) GDPR): Ensuring IT security, fraud prevention, anti-bot protection (honeypot fields), and maintaining the optimal availability of the energysoft.ro web infrastructure.
- Legal Compliance (Art. 6(1)(c) GDPR): Fulfilling accounting, tax, and statutory record-keeping obligations required by Romanian and European legislation.
Data Retention Periods
Personal data collected via technical inquiry forms that do not result in a commercial contract is retained for a maximum duration of 3 years for communication history. Data relating to executed commercial agreements and financial invoices is retained in accordance with statutory fiscal regulations (up to 10 years). Technical access logs are purged every 30 to 90 days.
Data Disclosure & International Transfers
EnergySoft ASSET SRL does not sell, lease, or monetize your personal data. Data may only be shared with authorized sub-processors strictly bound by GDPR Data Processing Agreements (DPA), including cloud hosting providers located within the European Union (EU/EEA) and certified email delivery systems. We do not transfer personal data to third countries outside the EEA.
Your Rights Under GDPR
Under Chapter III of Regulation (EU) 2016/679, you have the following enforceable rights:
You also have the right to lodge a formal complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP - www.dataprotection.ro).
Data Protection Inquiries & Exercising Rights
To exercise any of your statutory rights or to submit an inquiry regarding data privacy at EnergySoft ASSET SRL, please contact our data protection team: