1. Controller
The data controller is VAX ADVISORS S.R.L., CUI RO45634709, J2023018570406, 88 Calea Mosilor, sc. F, ap. F1, District 3, Bucharest, Romania. For any question about personal data, e-mail contact@eadvisors.ro.
2. What data we process
- Contact data: name, company, e-mail, phone, your message.
- For orders: form data and attached documents (e.g. ID, registration certificate).
- For services: worker data needed for the file (A1, posting), provided by the client.
- For recruitment: CVs and information sent by candidates.
- Minimal technical data: an anonymous visit counter, no cookies and no stored IP address.
3. Purposes and legal bases
- Replying to requests and quotes - pre-contractual steps (Art. 6(1)(b) GDPR).
- Providing services and invoicing - contract performance and legal obligations (Art. 6(1)(b) and (c)).
- Site security and abuse prevention - legitimate interest (Art. 6(1)(f)).
- Extended measurement and Google Ads - only with your consent (Art. 6(1)(a)), which you can withdraw at any time.
4. Documents sent through the site
Files attached in order forms are sent encrypted (HTTPS) and forwarded directly to our working e-mail. They are not kept on the website server. We use them only for your file.
5. Recipients
- The competent authorities where we file applications on your behalf.
- The Stripe payment processor (for card payments).
- Our hosting and e-mail provider (Romarg, Romania).
- Our accountant, for invoicing.
6. Retention
Requests without a contract: up to 12 months. Service files: for the contract and 3 more years. Accounting records: the statutory period (currently 5 years). CVs: up to 2 years, with the candidate's consent.
7. Your rights
You have the right of access, rectification, erasure, restriction, portability, objection and to withdraw consent. E-mail contact@eadvisors.ro. You may complain to the Romanian DPA, ANSPDCP (dataprotection.ro).
8. Security
The site uses HTTPS and strict content security policies, loads no third-party scripts or fonts and does not keep uploaded files. Access to client data is limited to the people working on the file.