This policy explains what personal data we process, for what purposes, and what rights you have, in accordance with Regulation (EU) 2016/679 (GDPR).
01 Data controller
The controller is Flex ERP SRL, with its office at 11 Ion Câmpineanu St, Bucharest. For requests about personal data, contact us at contact@flexerp.ro.
02 What data we collect
We collect the data needed to provide the service:
- Account data: name, email, company, role.
- Billing data: tax details and payment history.
- Operational data you enter into the platform (clients, employees, tasks, etc.).
- Technical data: IP address, access logs, device type, for security.
03 Purposes and legal bases
We process data to perform the contract (providing the service), to comply with legal obligations (tax), on the basis of legitimate interest (security, product improvement) and, where applicable, on the basis of consent.
04 How long we keep data
We keep data for the life of the account and for the periods required by law (for example, tax documents). After termination, data is deleted or anonymized within a reasonable timeframe.
05 Who we share data with
We do not sell your data. We may share it with service providers (processors) who help us operate the platform, such as:
- Hosting and cloud infrastructure providers.
- Payment processors for billing.
- ANAF, for submitting e-invoices, at your request.
06 International transfers
If any provider processes data outside the European Economic Area, we ensure adequate safeguards are in place (for example, standard contractual clauses).
07 Data security
We apply technical and organizational measures to protect data: per-company (tenant) isolation, role-based access control, encryption in transit and access logging.
08 Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, as well as to withdraw consent. You may lodge a complaint with the national supervisory authority (ANSPDCP).
09 Cookies
The site uses cookies; see the Cookie Policy for details.
10 Changes
We may update this policy. The current version is always shown on this page, with the date of the last update.
For any question about this document, reach us via the Contact.