Privacy Policy

Privacy Policy

We consider ensuring the right to personal data protection a fundamental commitment of FINACO SRL. Therefore, we dedicate all necessary resources and efforts to process your data in full compliance with Regulation (EU) 2016/679 ("General Data Protection Regulation" or "GDPR") as well as any other applicable legislation in Romania. Since one of the essential principles of this legal framework is transparency, we have prepared this document to inform you about how we collect, use, transfer, and protect your personal data when you interact with us regarding our products and services, including via our website or mobile applications.

We reserve the right to periodically update and modify this Privacy Policy to reflect any changes in how we process your personal data or any changes in legal requirements. In case of such modifications, we will display the updated version of the Privacy Policy on our website, so please check the content of this policy periodically.

What categories of personal data do we process?

In general, we collect your personal data directly from you, so you have control over the type of information you provide us. For example, we receive information from you when:

  • You send us a message or a request for a quote, providing information such as the desired product or service, your first and last name, email address, phone number, etc.

We may also collect and process certain information regarding your behavior while visiting our website to personalize your online experience and provide offers tailored to your profile. For more details, please refer to the section below regarding processing purposes.

We may store and collect information on our website using cookies and similar technologies, in accordance with our Cookie Policy.

We do not collect or process sensitive data included in the special categories of personal data as defined by the GDPR. Additionally, we do not intend to collect or process data from minors under the age of 18.

What are the purposes and legal grounds for processing your data?

1. For providing Finaco services to your benefit

This general purpose may include, where applicable:

  • a) Responding to your inquiries or requests via our contact form;
  • b) Providing support services, including responses to your questions about Finaco's services.

Processing your data for these purposes is often necessary for concluding and executing a contract between Finaco and you. Certain processing activities under these purposes are required by applicable legislation, including fiscal and accounting laws.

2. To improve our services

We aim to provide you with the most relevant information and details. To achieve this, we may collect and use certain information about your behavior during visits to our website, invite you to complete various surveys, or conduct market research directly or with the help of partners.

We base these activities on our legitimate interest in conducting business activities, ensuring that your fundamental rights and freedoms are not adversely affected.

3. For marketing purposes

We want to keep you informed about the best offers for products/services that interest you. To this end, we may send you messages (such as emails/SMS/phone calls/mobile or web alerts) containing general and targeted information about products and services similar or complementary to those you have purchased, offers or promotions, products/services you have shown interest in, and other commercial communications like market research and opinion surveys. We may also display personalized recommendations on our website.

In certain situations, we may base our marketing activities on our legitimate interest in promoting and developing our business. However, you can request at any time that we stop processing your personal data for marketing purposes, and we will comply with your request.

4. To defend our legitimate interests

There may be situations where we use or transmit information to protect our rights and business activities, such as:

  • Measures to protect the finaco.ro website against cyberattacks;
  • Fraud prevention and detection measures, including sharing information with competent public authorities;
  • Risk management measures.

The general basis for these types of processing is our legitimate interest in defending our business, ensuring that all measures taken balance our interests with your fundamental rights and freedoms. In certain cases, we base processing on legal provisions, such as obligations to secure assets under applicable laws.

How long do we retain your personal data?

As a general rule, we will store your personal data as long as you collaborate with us. You can request the deletion of certain information at any time, and we will comply with these requests unless applicable law or our legitimate interests require us to retain the information.

To whom do we transmit your personal data?

Where applicable, we may transmit or provide access to certain personal data to the following categories of recipients:

  • FINACO SRL partners;
  • Courier service providers;
  • Payment/banking service providers;
  • Marketing/telemarketing service providers;
  • Market research service providers;
  • Insurance companies;
  • IT service providers;
  • Other companies with whom we may develop joint market offerings for our goods and services.

If we are legally obliged or need to protect a legitimate interest, we may also disclose certain personal data to public authorities.

We ensure that access to your data by third-party private legal entities complies with legal provisions on data protection and information confidentiality, based on contracts signed with them.

In which countries do we transfer your personal data?

Currently, we store and process your personal data within Romania. However, we may transfer some of your personal data to entities located in the European Union or outside the EU, including countries not recognized by the European Commission as providing an adequate level of personal data protection.

We will always take measures to ensure that any international data transfer is managed carefully to protect your rights and interests. Transfers to service providers and other third parties will always be protected by contractual commitments and, where applicable, additional safeguards such as standard contractual clauses issued by the European Commission or certification schemes like the Privacy Shield for data transferred from the EU to the USA.

How do we protect the security of your personal data?

We are committed to ensuring the security of personal data by implementing appropriate technical and organizational measures, according to industry standards.

Your data is transmitted using advanced encryption algorithms and stored on secure servers, ensuring data redundancy.

Despite the measures taken to protect your personal data, please note that data transmission over the Internet or other public networks is not entirely secure, and there is a risk that data may be seen and used by unauthorized third parties. We cannot be responsible for such vulnerabilities in systems not under our control.

What rights do you have?

The General Data Protection Regulation grants you several rights regarding your personal data. You can request access to your data, correct any errors in our records, or object to the processing of your data. You can also exercise your right to file a complaint with the competent supervisory authority or seek legal redress. Additionally, you may have the right to request the deletion of your data, restriction of processing, and data portability.

For more details on each of these rights, refer to the sections below.

Contact Information:

If you wish to exercise your rights, you can contact us at:

  • Phone: +40 364 11 33 31
  • Email: office@finaco.ro

You also have the right to file a complaint with the National Authority for the Supervision of Personal Data Processing in Romania:

  • Address: B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, Postal Code 010336, Bucharest, Romania
  • Phone: +40.318.059.211 or +40.318.059.212
  • Email: anspdcp@dataprotection.ro

Before contacting the supervisory authority, we kindly ask you to contact us first, and we promise to make every effort to resolve any issue amicably.