Privacy Policy

Last updated: 27 June 2026.

This policy explains how ELECRO (the „Company", „we", „us" or the „controller") collects, uses, discloses and protects the personal data we process when you visit our website, contact us or interact with our services. Please read it carefully.

1. Data controller

The controller of your personal data is:

• Name: ELECRO S.R.L.
• Unique Registration Code (CUI): 49836891
• Trade Register number: J40/6487/2024
• Registered office: 107 Traian Street, Bucharest, Romania
• E-mail: contact@elecro.eu
• Phone: +40 740 326 283

For any data-protection request, contact us at the e-mail above with the subject line „Data protection / GDPR".

2. Data Protection Officer (DPO)

ELECRO has not currently appointed a Data Protection Officer (DPO). Requests regarding the protection of personal data should be sent directly to the controller at contact@elecro.eu.

3. Data we collect

We only collect data necessary for the purposes described below. Mainly, through the website contact form, we process:

• First and last name — to address you correctly;
• E-mail address — so we can reply to you;
• Phone number (if you provide it) — so we can contact you;
• Message content and any other data you choose to share voluntarily;
• Organization name and role, if you contact us in a B2B context.

When you access the website, limited technical data (IP address, browser type, pages visited) may be processed solely for the operation and security of the site. We do not use third-party advertising profiling tools. For details on cookies, see our Cookie Policy.

4. Purposes of processing

We process your data to:

• respond to enquiries, questions and requests for proposals submitted via the form, e-mail or phone;
• provide information about our consultancy, EPC/EPCM, financing and ESG services at your request;
• manage the pre-contractual and contractual relationship;
• ensure the security, maintenance and proper functioning of the website;
• comply with our legal obligations.

5. Legal basis

Processing is based, as applicable, on:

• Your consent (Art. 6(1)(a) GDPR) — when you complete and submit the contact form;
• Pre-contractual steps / performance of a contract (Art. 6(1)(b) GDPR) — where your request concerns an offer or cooperation;
• Our legitimate interest (Art. 6(1)(f) GDPR) — for website security and to respond appropriately to business enquiries, without prejudice to your rights;
• Legal obligation (Art. 6(1)(c) GDPR) — where the law requires us to retain or disclose certain data.

6. Recipients of the data

We do not sell or rent your data. We may disclose it, strictly as necessary, to:

• service providers supporting our operations (hosting, e-mail) under processing agreements compliant with Art. 28 GDPR;
• professional advisers (legal, accounting), where necessary;
• public authorities, where required by law.

We host the website and manage communications aiming to keep data within the European Economic Area (EEA). Should a transfer outside the EEA become necessary, it will be carried out only with the safeguards provided by Chapter V GDPR (e.g. standard contractual clauses).

7. Retention period

We keep data only for as long as necessary for the purpose for which it was collected:

• contact messages and related correspondence — for the duration of handling the request and a reasonable period afterwards, after which they are deleted or anonymised, in line with the storage-limitation principle;
• data related to contractual relationships — for the term of the contract and according to statutory archiving periods (e.g. tax and accounting obligations);
• technical security data — for short periods, in line with logging policies.

Once these periods expire, data is securely deleted or anonymised.

8. Your rights

As a data subject, you have the following rights under the GDPR:

• right of access to the data processed;
• right to rectification of inaccurate or incomplete data;
• right to erasure („right to be forgotten"), under the conditions of the law;
• right to restriction of processing;
• right to data portability;
• right to object to processing based on legitimate interest;
• right to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
• right not to be subject to a decision based solely on automated processing, including profiling (we do not carry out such processing).

To exercise these rights, write to us at contact@elecro.eu. We will respond within one month of receiving the request, with the possibility of extension as permitted by law.

9. Right to lodge a complaint

If you consider that the processing of your data infringes the law, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP):

• 28-30 G-ral. Gheorghe Magheru Blvd., Sector 1, Bucharest, Romania;
• E-mail: anspdcp@dataprotection.ro;
• Web: www.dataprotection.ro.

We do encourage you, however, to contact us first so we can quickly resolve any concern.

10. Cookies

The website uses cookies that are strictly necessary for its operation and, where applicable, optional cookies only with your consent. We do not use third-party advertising cookies. Full details and control options are set out in our Cookie Policy.

11. Data security

We apply reasonable technical and organisational measures to protect data against unauthorised access, loss, alteration or disclosure: encryption in transit (HTTPS), access control, secure hosting and data minimisation. No system is 100% secure; we are committed to handling any incident promptly and transparently, including notification where required by law.

12. Children's data

Our services are aimed at a professional and business audience. We do not knowingly collect data from individuals under 16. If you believe a minor has provided us with data, please contact us for deletion.

13. Changes to this policy

We may update this policy periodically to reflect legislative or operational changes. The version in force is the one published on this page, with the last-updated date stated above. We recommend reviewing it regularly.

14. Contact

For any question about this policy or the processing of your data, contact us at contact@elecro.eu, by phone at +40 740 326 283, or via our contact page.