Energy Capital Finance IFN ("we", "ECF") processes your personal data in compliance with Regulation (EU) 2016/679 (GDPR) and Law 190/2018.
1. Data controller
Energy Capital Finance IFN S.A., registered office Intrarea Moneasa nr. 3, Bucuresti, Tax ID RO XXXXXXXX, registered with ANSPDCP. Data protection contact: office@energy-capital.eu.
2. Data we process
- Identification: name, surname, ID details (for company legal representatives)
- Contact: email, phone, address
- Company data: name, Tax ID, business sector, financial data
- Service data: application history, financing status, credit scoring
- Technical: IP, browser type, website behavior (via cookies)
3. Purpose and legal basis
- Providing contracted financial services (contract performance)
- Legal obligations (BNR reporting, AML/KYC)
- Direct marketing (with consent)
- Website and service improvement (legitimate interest)
4. Data sharing
- Competent authorities when required by law (BNR, ANAF, ANSPDCP)
- Credit bureaus (CRC, Biroul de Credit) per BNR regulations
- Service providers (cloud, email, analytics) under GDPR-compliant processing contracts
- Financial and legal auditors under confidentiality clauses
5. Retention
- Contract data: 10 years from end of relationship (legal/fiscal requirement)
- Marketing data: until consent withdrawal
- Technical data (cookies): max 12 months
6. Your rights
Under GDPR, you have rights to: access, rectification, erasure ("right to be forgotten"), restriction, portability, objection (marketing), and complaint to ANSPDCP. To exercise: office@energy-capital.eu. We respond within 30 days.
7. Security
We implement technical and organizational measures: encryption in transit (HTTPS), role-based access control, audit logs, periodic staff training.
8. Cookies
Details: Cookie Policy.
Starter template. Before publication, recommend review by DPO or specialized lawyer.