1. Data Controller
Enncon S.R.L. (“Enncon”, “we”, “us”, “our”) is the data controller responsible for your personal data.
2. Personal Data We Collect
We collect and process the following categories of personal data:
Contact information — name, email address, phone number, company name, job title — provided when you submit our contact form, send us an email, or apply for a position.
Project information — details about your project, sector, and challenges — provided voluntarily through our contact form or during conversations.
Technical data — IP address, browser type, device information, pages visited, time spent on pages — collected automatically through cookies and server logs when you visit our website.
Application data — CV, cover letter, qualifications, and work history — provided when you apply for career opportunities.
3. Legal Basis for Processing
Under Article 6 of the GDPR, we process your personal data based on:
Consent (Art. 6(1)(a)) — When you voluntarily submit a contact form or subscribe to communications. You may withdraw consent at any time by contacting us.
Legitimate interest (Art. 6(1)(f)) — To respond to enquiries, improve our website, ensure security, and conduct business development. Our legitimate interests do not override your fundamental rights and freedoms.
Pre-contractual measures (Art. 6(1)(b)) — When processing is necessary to take steps at your request prior to entering into a contract.
Legal obligation (Art. 6(1)(c)) — When required to comply with applicable law, such as tax and accounting regulations.
4. How We Use Your Data
We use your personal data to respond to your enquiries and provide requested information, prepare proposals and conduct Discovery Assessments, process job applications, improve our website functionality and user experience, comply with legal and regulatory obligations, send relevant communications about our services (only with your consent), and maintain the security of our website and systems.
5. Data Sharing
We do not sell, rent, or trade your personal data to third parties. We may share your data with:
Service providers — Hosting providers, email services, and analytics tools that process data on our behalf under GDPR-compliant data processing agreements.
Legal authorities — When required by law, court order, or governmental regulation.
Professional advisors — Lawyers, accountants, and auditors where necessary.
6. International Transfers
Our operations are based in Romania (EU) and the United Kingdom. Where personal data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place, including EU Standard Contractual Clauses (SCCs) or an adequacy decision by the European Commission.
7. Data Retention
Contact form submissions — retained for up to 24 months from submission, unless a business relationship is established.
Client project data — retained for the duration of the engagement plus 5 years, per contractual and legal requirements.
Job applications — retained for up to 12 months after the recruitment process concludes.
Technical/analytics data — retained for up to 26 months.
8. Your Rights Under GDPR
Right of access (Art. 15) — Request a copy of the personal data we hold about you.
Right to rectification (Art. 16) — Request correction of inaccurate or incomplete data.
Right to erasure (Art. 17) — Request deletion of your personal data.
Right to restriction (Art. 18) — Request that we limit processing in certain circumstances.
Right to data portability (Art. 20) — Receive your data in a structured, machine-readable format.
Right to object (Art. 21) — Object to processing based on legitimate interests, including direct marketing.
Right to withdraw consent — Where processing is based on consent, withdraw it at any time without affecting prior processing.
To exercise any of these rights, contact us at office@enncon.eu. We will respond within 30 days.
9. Cookies
Our website uses cookies. Essential cookies are necessary for the website to function. Analytics cookies help us understand visitor behaviour. We do not use advertising or tracking cookies. You can manage cookie preferences through your browser settings.
10. Website Security
We implement appropriate technical and organisational measures to protect your data, including SSL/TLS encryption, access controls, and regular security reviews.
11. Children’s Privacy
Our services are not directed at individuals under 16. We do not knowingly collect personal data from children.
12. Supervisory Authority
You have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP):
ANSPDCP
B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest, Romania
Website: www.dataprotection.ro
13. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or applicable law. Significant changes will be posted on this page with an updated date.
14. Contact
For questions about this Privacy Policy or to exercise your data protection rights: