Alecsandru.
Business Wizard by Day
WhatsApp
GDPR Compliant

Privacy Policy

Your privacy is important to us. This policy explains how we collect, use, and protect your personal data in compliance with the EU General Data Protection Regulation (GDPR).

Last updated: November 30, 2024Version 1.0

Table of Contents

1. Introduction

Welcome to Alecsandru Onac ("we," "our," or "us"), operated by UE NOBLE IMPEX EOOD. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website alecsandruonac.com or use our services.

This policy is compliant with the General Data Protection Regulation (EU) 2016/679 (GDPR), the ePrivacy Directive 2002/58/EC, and other applicable data protection laws in Romania, Bulgaria, and the European Union.

Important: By using our website or services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our services.

2. Data Controller

Under Article 4(7) of the GDPR, the data controller responsible for your personal data is:

UE NOBLE IMPEX EOOD

Headquarters (Bulgaria)

str. Stefan Karadja nr. 10
Ruse, 7000
Bulgaria

CUI: 206640105
VAT: BG206640105

Romania Office

Bulevardul Lacul Tei 1-3
Sector 2, 020371
Bucharest, Romania

Email: privacy@alecsandruonac.com

Data Protection Officer: For GDPR-related inquiries, contact us at the email above.

3. Data We Collect

We collect and process various types of personal data depending on how you interact with us:

AInformation You Provide Directly

  • Identity Data: Full name, title, company name
  • Contact Data: Email address, phone number, postal address
  • Communication Data: Messages, inquiries, feedback you send us
  • Professional Data: CV, qualifications (for job applications)

BInformation Collected Automatically

  • Technical Data: IP address, browser type and version, operating system
  • Usage Data: Pages visited, time spent, navigation paths, referral sources
  • Device Data: Device type, screen resolution, device identifiers
  • Location Data: General geographic location based on IP address

CSpecial Categories of Data

For immigration services, we may need to process sensitive data including:

  • Nationality and citizenship information
  • Passport and identity document copies
  • Family status and relationship information

* This data is only collected with your explicit consent (Article 9 GDPR) and processed solely for providing immigration services.

5. How We Use Your Data

We use your personal data for the following purposes:

Service Delivery

To provide business consulting, tax advisory, legal, and immigration services

Communication

To respond to your inquiries and provide customer support

Improvement

To analyze website usage and improve our services

Marketing

To send promotional materials (only with your consent)

Legal Compliance

To comply with legal obligations and regulatory requirements

Security

To protect our website, services, and users from fraud

Analytics

To understand how our website is used and optimize performance

Personalization

To customize your experience based on your preferences

6. Cookies & Tracking Technologies

We use cookies and similar tracking technologies in accordance with the ePrivacy Directive. Below is a detailed breakdown of the cookies we use:

Necessary Cookies

Always Active

Essential for the website to function properly. Cannot be disabled.

Cookie NamePurposeDuration
cookie-consentStores your cookie preferences1 year
session_idMaintains user sessionSession

Analytics Cookies

Help us understand how visitors interact with our website.

Cookie NameProviderDuration
_gaGoogle Analytics2 years
_gidGoogle Analytics24 hours

Marketing Cookies

Used to track visitors across websites for advertising purposes.

Cookie NameProviderDuration
_fbpFacebook Pixel3 months
li_sugrLinkedIn3 months

Managing Your Cookie Preferences

You can change your cookie preferences at any time by clicking the cookie settings link in our footer or by adjusting your browser settings. Note that blocking certain cookies may impact your experience.

7. Data Sharing & Third Parties

We may share your personal data with the following categories of recipients:

Service Providers

Companies that help us operate our website and deliver services (hosting, email, analytics)

Examples: Vercel (hosting), Google (analytics)

Professional Partners

Legal and tax professionals who assist with client services

Examples: Law firms, accounting firms (under confidentiality agreements)

Government Authorities

When required by law or to protect our legal rights

Examples: Tax authorities, immigration offices, law enforcement

Business Transfers

In case of merger, acquisition, or sale of assets

Examples: Subject to confidentiality obligations

We Never Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

8. International Data Transfers

As we operate in both Romania and Bulgaria (EU member states), your data may be transferred between our offices. Any transfers outside the European Economic Area (EEA) are protected by:

  • EU Adequacy Decisions - For countries deemed to provide adequate protection
  • Standard Contractual Clauses (SCCs) - EU-approved contract terms for data transfers
  • Binding Corporate Rules - For transfers within corporate groups

You may request a copy of the safeguards we use for international transfers by contacting us.

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

Data TypeRetention PeriodReason
Client records10 years after end of relationshipLegal and regulatory requirements
Contact inquiries2 yearsBusiness purposes
Website analytics26 monthsPerformance analysis
Cookie consent1 yearCompliance proof
Marketing preferencesUntil consent withdrawnMarketing purposes

10. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

Right of Access

Art. 15

Request a copy of all personal data we hold about you

Right to Rectification

Art. 16

Request correction of inaccurate or incomplete data

Right to Erasure

Art. 17

Request deletion of your data ('right to be forgotten')

Right to Restrict Processing

Art. 18

Request limitation of how we use your data

Right to Data Portability

Art. 20

Receive your data in a structured, machine-readable format

Right to Object

Art. 21

Object to processing based on legitimate interests

Right to Withdraw Consent

Art. 7(3)

Withdraw consent at any time for consent-based processing

Right to Lodge a Complaint

Art. 77

File a complaint with a supervisory authority

How to Exercise Your Rights

To exercise any of these rights, please contact us at:

privacy@alecsandruonac.com

We will respond to your request within 30 days as required by GDPR. In complex cases, this may be extended by an additional 60 days.

Supervisory Authorities

You have the right to lodge a complaint with the relevant data protection authority:

Romania

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
www.dataprotection.ro

Bulgaria

Commission for Personal Data Protection (CPDP)
www.cpdp.bg

11. Security Measures

We implement appropriate technical and organizational measures to protect your personal data:

Encryption

TLS/SSL encryption for all data in transit

Access Control

Role-based access to personal data

Secure Hosting

Data hosted in EU-based secure facilities

Regular Audits

Periodic security assessments

Staff Training

GDPR and security awareness training

Incident Response

Procedures for breach notification

12. Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately and we will take steps to delete such information.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes:

  • We will update the "Last Updated" date at the top of this page
  • We will notify you via email (if you have subscribed to our communications)
  • We will display a prominent notice on our website

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Data Protection Contact

Headquarters

Stefan Karadja Street 10
Ruse, 7000, Bulgaria

Romania Office

Bulevardul Lacul Tei 1-3
Bucharest, 020371, Romania

Contact Us