Privacy notice

1. Who is responsible

The controller for personal data processed through this website and in the Ecompendi company data is:

Ecompendi SRL
Trade register J40/25034/2024 · CIF 51786248
Bulevardul Tineretului 21, Sector 4, Bucharest, Romania
contact@ecompendi.com

2. What this notice covers

Two things: the data you give us or that is processed when you visit this website, and the business information we hold about companies that sell online in Europe, which is what Ecompendi delivers to its clients.

3. Data processed when you use the website

Requests you send. The contact form collects your name, work email, company, an optional website and market, the use case you select, your message, the page you arrived on, the referring page and campaign tags if the link carried any. Please do not include sensitive personal information.

Technical data. Cloudflare delivers and protects the site and records the technical data needed to do so, such as your IP address, the request made and the result of the bot check on the contact form.

Measurement. We measure page views in aggregate without cookies and without identifying visitors. If we ever add analytics or advertising tags that need consent, we will ask first and update this notice.

4. Why we process it and on what basis

• To answer your request and prepare a proposal: steps taken at your request before a contract (GDPR article 6(1)(b)).
• To keep the site secure, prevent abuse and understand how it is used: our legitimate interest (article 6(1)(f)).
• To keep business correspondence and meet legal obligations such as accounting: article 6(1)(c) and our legitimate interest.
• To send you commercial messages beyond your request: only with your consent or within an existing business relationship, and you can opt out at any time.

5. Who receives the data

Cloudflare, Inc. hosts the site, protects it, stores form submissions and delivers our notification emails, under a data processing agreement. We do not sell visitor data and we do not share it with anyone else unless the law requires it.

6. Transfers outside the European Economic Area

Cloudflare processes data in the European Union and in the United States. Transfers rely on the EU-US Data Privacy Framework and on the European Commission's standard contractual clauses.

7. How long we keep it

Requests and the related correspondence are kept while we handle them and for up to three years after our last exchange, unless a contract or a legal obligation requires longer. Technical logs are kept for a short period for security purposes.

8. Business information about online sellers

Ecompendi compiles information about companies that sell online across Europe from public sources: company registers and published financial statements, the shops' own websites and marketplace seller profiles, and public professional profiles. Personal data in this information is limited to the business contact details and roles of the people who act for those companies, such as an administrator named in the company register or a person's published job title.

We process this on the basis of our legitimate interest in providing business to business market intelligence (article 6(1)(f)), and we check that it does not override the interests of the people concerned: the data is professional, it is drawn from sources that are already public, and on this website people appear only as initials. If you are such a person, you can ask what we hold about you, ask us to correct or delete it, or object to the processing, by writing to contact@ecompendi.com. We answer within one month.

9. Your rights

You have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing, and to receive the data you gave us in a portable format. Where processing rests on consent, you can withdraw it at any time. You can also lodge a complaint with the Romanian supervisory authority, the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (dataprotection.ro), or with the authority of the country where you live.

10. Security

The site is served over an encrypted connection, form submissions are stored in a database with restricted access, and only the people who handle requests can read them.

11. Cookies

This website sets only what is strictly necessary: Cloudflare may set a security cookie while it verifies that a form submission comes from a person, and the site remembers a display preference for the length of your visit. There are no advertising or tracking cookies.

12. Changes

When this notice changes, the date at the top changes with it. Material changes will be announced on this page.

13. Contact

For any question about personal data, write to contact@ecompendi.com or to Ecompendi SRL, Bulevardul Tineretului 21, Sector 4, Bucharest, Romania.