Privacy Policy

1. Introduction

EZFIN CONSULTING SRL ("Company", "we", "our", "us") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website at ezfin.consulting ("Website") or engage our professional services ("Services").

We process personal data in compliance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Romanian data protection laws. By using our Website or Services, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

For any privacy-related inquiries or to exercise your data protection rights, please contact us at the email address above.

3. Personal Data We Collect

We collect and process the following categories of personal data:

3.1 Information You Provide Directly

• Contact Information: Name, email address, phone number when you contact us or submit inquiries through our contact form.
• Service-Related Information: Information necessary to perform our services, which may include business details, documentation, and other materials you provide.
• Communication Records: Records of correspondence between you and our team.

3.2 Information Collected Automatically

• Technical Data: IP address, browser type and version, time zone setting, operating system, and platform.
• Usage Data: Information about how you use our Website, including pages visited and navigation patterns.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under Article 6 of the GDPR:

• Contractual Necessity (Art. 6(1)(b)): Processing necessary to perform our Services or take steps at your request prior to entering into a contract.
• Legitimate Interests (Art. 6(1)(f)): Processing necessary for our legitimate business interests, such as improving our Services, ensuring security, and preventing fraud, provided these interests are not overridden by your rights.
• Legal Obligation (Art. 6(1)(c)): Processing necessary to comply with legal obligations, such as record-keeping requirements.
• Consent (Art. 6(1)(a)): Where you have given explicit consent for specific processing activities, such as receiving marketing communications.

5. How We Use Your Data

We use your personal data for the following purposes:

• To respond to your inquiries and provide customer support.
• To perform and deliver our professional services.
• To communicate with you about your engagement with us.
• To comply with legal and regulatory obligations.
• To protect our rights, privacy, safety, or property.
• To improve our Website and Services.
• To detect, prevent, and address technical issues or security threats.

6. Data Security

Confidentiality is fundamental to our work. We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption: All data transmissions are encrypted using industry-standard SSL/TLS protocols.
• Access Controls: Strict access controls limit data access to authorized personnel only.
• Secure Storage: Data is stored on secure servers with restricted access.
• Regular Reviews: We regularly review and update our security practices.

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining industry-standard protections.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Contact Inquiries: Retained for up to 2 years after the last contact unless a service engagement follows.
• Service Records: Retained for the duration of the engagement plus 5 years to comply with legal and accounting requirements.
• Legal Compliance: Data may be retained longer if required by law or for the establishment, exercise, or defense of legal claims.

After the retention period, personal data is securely deleted or anonymized.

8. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data. We may share your data only in the following circumstances:

• Service Providers: With trusted third-party service providers who assist in operating our Website and Services (e.g., hosting providers), subject to confidentiality obligations.
• Legal Requirements: When required by law, court order, or governmental authority.
• Protection of Rights: To protect our rights, property, or safety, or that of our clients or others.
• With Your Consent: With your explicit consent for any other purpose.

9. International Data Transfers

Your personal data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or transfers to countries with an adequate level of data protection as determined by the European Commission.

10. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access (Art. 15): You have the right to obtain confirmation of whether we process your personal data and to access that data.
• Right to Rectification (Art. 16): You have the right to request correction of inaccurate personal data.
• Right to Erasure (Art. 17): You have the right to request deletion of your personal data under certain circumstances ("right to be forgotten").
• Right to Restriction (Art. 18): You have the right to request restriction of processing in certain circumstances.
• Right to Data Portability (Art. 20): You have the right to receive your personal data in a structured, commonly used format.
• Right to Object (Art. 21): You have the right to object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw consent at any time.

To exercise any of these rights, please contact us at info@ezfin.consulting. We will respond to your request within one month, as required by GDPR.

11. Right to Lodge a Complaint

If you believe that our processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority. In Romania, the competent authority is:

12. Cookies and Tracking Technologies

Our Website uses minimal cookies necessary for basic functionality. We do not use advertising or tracking cookies. Essential cookies may include:

• Session Cookies: Temporary cookies that expire when you close your browser, used to maintain your session.
• Security Cookies: Used to support security features and detect malicious activity.

You can control cookies through your browser settings. Disabling cookies may affect some Website functionality.

13. Third-Party Links

Our Website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

14. Children's Privacy

Our Services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately, and we will take steps to delete such information.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post any changes on this page and update the "Last updated" date. We encourage you to review this Privacy Policy periodically. Significant changes will be communicated through appropriate means.

16. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we handle your personal data, please contact us: