This page summarizes how Flex ERP complies with the GDPR and how you can exercise your data subject rights. It complements the Privacy Policy.
01 Processing roles
For your account data, Flex ERP is the controller. For the data you enter about your clients and employees, you are the controller and Flex ERP acts as a processor, handling it only on your instructions.
02 Legal bases
We process data on the basis of contract performance, legal obligations, legitimate interest and consent, depending on the purpose. Details are in the Privacy Policy.
03 Data subject rights
We guarantee the exercise of all rights provided by the GDPR:
- Access to data and information about processing.
- Rectification of inaccurate data.
- Erasure of data ("right to be forgotten").
- Restriction of or objection to processing.
- Portability of data in a structured format.
04 Sub-processors
We use carefully selected sub-processors (hosting, payments) under data processing agreements. An up-to-date list is available on request.
05 Breach notification
In the event of a security breach that poses a risk to individuals' rights, we notify the competent authority within 72 hours and inform you without undue delay.
06 Data protection contact
For any data protection request, contact us at contact@flexerp.ro. We respond within the legal deadline of one month.
07 Supervisory authority
You have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro.
For any question about this document, reach us via the Contact.