Privacy Policy
In effect from: 03.08.2026
Courtesy translation. This document is governed by Romanian law. In case of any discrepancy between this English version and the Romanian original, the Romanian version prevails. The original is available at ekopress.ro/confidentialitate.
This privacy policy explains how EkoPress collects, uses, and protects personal data, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Romanian law.
1. Who we are (the data controller)
The controller of your personal data is:
- EKO UNITED INVESTMENT SRL — trading as EkoPress
- VAT ID: RO44063671 · Trade Registry: J23/2196/2021
- Registered office: Str. Doinei nr. 100F, Ilfov County, Romania
- Contact email for data protection matters: office@ekopress.ro
2. What data we collect
- Account data: first name, last name, email address, phone number, the company’s billing details (name, VAT ID, address), IBAN (for publishers who receive payments).
- Order data: the selected sites, the article’s content/brief, the promoted URL, anchor text.
- Payment data: card processing takes place exclusively on the secure Netopia Payments page. We do not store your card number and have no access to it.
- Technical data: IP address, browser and device type, pages visited, cookies and similar identifiers.
3. Purposes and legal basis for processing
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| Creating the account and providing the service (publishing advertorials) | Performance of contract — art. 6(1)(b) |
| Processing payments through Netopia Payments | Performance of contract — art. 6(1)(b) |
| Issuing invoices and tax obligations (including e-Invoice) | Legal obligation — art. 6(1)(c) |
| Marketing communications / newsletter | Consent — art. 6(1)(a) |
| Improving the platform, statistics, security | Legitimate interest — art. 6(1)(f) |
4. Who we share data with
We may share data, to the extent necessary, with:
- Netopia Payments — for card payment processing;
- IT service providers (hosting, transactional email, database), acting as processors, under data processing agreements (DPAs);
- ANAF (Romania’s tax authority) — for invoicing and e-Invoice, as required by law;
- public authorities, only where required by law.
We do not sell your personal data.
5. International data transfers
Data is, as a rule, processed within the European Union / European Economic Area. If a provider processes data outside the EU/EEA, we ensure appropriate safeguards are in place (for example, the European Commission’s Standard Contractual Clauses).
6. How long we keep data
- Account data — for the duration of the contractual relationship and afterwards, for as long as required by legal obligations;
- Accounting and tax records — as required by law (generally 10 years);
- Data processed on the basis of consent — until consent is withdrawn.
7. Your rights (GDPR)
You have the right to: access your data, rectification, erasure (“the right to be forgotten”), restriction of processing, data portability, objection to processing, and to withdraw consent at any time.
You can exercise your rights by writing to office@ekopress.ro. You also have the right to lodge a complaint with Romania’s National Supervisory Authority for Personal Data Processing (ANSPDCP) — anspdcp.ro.
8. Cookies
We use cookies and similar technologies. Full details are available in the Cookie Policy.
9. Security
We apply reasonable technical and organizational measures to protect data against unauthorized access, loss, or disclosure (encryption in transit, access control, separation of privileges).
10. Changes
We may update this policy periodically. The version in force is always published on this page, with the update date.