Privacy Policy
Last updated: 13.11.2026
1. Data Controller Identity
[COMPANY NAME] S.R.L.
Tax ID: [RO12345678]
Trade Register: [J40/1234/2024]
Headquarters: [Full address, City, County, Postal Code]
Data protection contact email: dpo@imobiliarepro.ro
Phone: +40 700 000 000
2. Personal Data We Collect
Depending on how you interact with our platform, we may collect the following categories of personal data:
- Account data: name, email address, phone number, password (encrypted)
- Google OAuth authentication data: name, email, profile photo (provided by Google)
- Contact form data: name, email, phone, submitted message
- Browsing data: IP address, browser type, pages visited, session duration
- AI Assistant usage data: questions asked to the AI assistant (processed by Anthropic)
- Preference data: properties saved to favorites
- Agent profile data: biography, specialization, years of experience, photo
3. Purposes and Legal Basis for Processing
| Purpose | Legal Basis |
|---|---|
| Account creation and management | Performance of contract (Art. 6(1)(b)) |
| Responding to contact messages | Legitimate interest (Art. 6(1)(f)) |
| AI Assistant operation | Consent (Art. 6(1)(a)) |
| Saving favorite properties | Performance of contract (Art. 6(1)(b)) |
| Platform security (CSRF, rate limiting) | Legitimate interest (Art. 6(1)(f)) |
| Statistics and service improvement | Legitimate interest (Art. 6(1)(f)) |
4. Data Retention Period
- Account data: for the duration of the account + 30 days after deletion
- Contact messages: 2 years from receipt
- Browsing data: 12 months
- AI conversations: stored locally in browser (localStorage), not on our servers
- Security logs: 6 months
5. Third-Party Transfers
Your personal data may be shared with the following service providers:
- Cloudinary (Cloudinary Ltd., Israel) — storage and optimization of property images. Cloudinary Policy
- Anthropic (USA) — processing questions addressed to the AI Assistant via the Claude API. Anthropic Policy
- Google (USA) — authentication via Google OAuth. Google Policy
- OpenStreetMap Foundation — map display. OSM Policy
These providers act as data processors and are obligated to protect data in accordance with GDPR. Transfers outside the EU/EEA are covered by Standard Contractual Clauses or adequacy decisions.
6. Your Rights
Under GDPR, you have the following rights:
- Right of access — you can request a copy of your personal data
- Right to rectification — you can correct inaccurate data in your profile
- Right to erasure ("right to be forgotten") — you can request deletion of your account and associated data
- Right to data portability — you can request your data in a structured format (JSON/CSV)
- Right to restriction of processing — you can request limitation of data usage
- Right to object — you can object to processing based on legitimate interest
- Right to withdraw consent — at any time, without affecting the lawfulness of prior processing
To exercise these rights, contact us at dpo@imobiliarepro.ro. We will respond within a maximum of 30 days.
7. Cookies
The platform uses cookies and similar technologies. For complete details, see our Cookie Policy.
8. Data Security
We implement appropriate technical and organizational measures: password encryption (bcrypt), CSRF protection, rate limiting, secure cookies (HttpOnly, SameSite), HTTPS connections and role-based access.
9. Complaints
If you believe your rights have been violated, you have the right to file a complaint with:
National Supervisory Authority for Personal Data Processing (ANSPDCP)
Address: B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336, Bucharest
Phone: +40 318 059 211
Email: anspdcp@dataprotection.ro
Website: www.dataprotection.ro
10. Policy Changes
We reserve the right to update this policy. Any significant changes will be communicated through a notification on the platform. The date of the last update is displayed at the top of the page.