--- title: "Privacy policy — Crosspoint Real Estate" description: "Privacy policy" url: "/en/privacy-policy" canonical: "https://crosspoint.com.ro/en/privacy-policy" lang: en alternate: "https://crosspoint.com.ro/politica-confidentialitate" --- # Privacy policy This privacy notice describes what personal data we process when you use crosspoint.com.ro, for what purpose, on what legal basis, and what rights you have. ## 1. Who we are **CROSSPOINT REAL ESTATE S.R.L.**, a company with its registered office at Calea Floreasca 240B, Ethos House, 3rd floor, Bucharest, registered with the Trade Register under no. J2004020965406, sole registration code 17045104. We collect and process various categories of personal data from you as a user of the crosspoint.com.ro website, which under European Union data protection law makes us the data controller for that data. Protecting your personal data matters to us. This notice describes our practices regarding the collection and use of your personal data arising from your interaction with our website. ## 2. What data we process about you When you visit our website, we process the following data about you. ### 2.1 Website use The website automatically collects certain information and stores it in log files: internet protocol (IP) address, the general location of your computer or device (at city level), browser type, operating system, time of access, the link of the page accessed, your viewing history of our website's pages, device information, programs viewed, device id (notifications and identification), timestamp, request/action. We use this information to design our site so that it better suits our users' needs. We may also use your IP address to help diagnose problems with our servers and to administer our website, to analyse trends, to track visitor movements and to gather general demographic information that helps us identify visitor preferences. The basis for this processing is our legitimate interest in monitoring activity on the site and ensuring its security. The data is retained for one year from the date of the visit. ### 2.2 When you subscribe to our newsletter When you subscribe to our newsletter we process your email address for that purpose. The legal basis for the processing is your consent. We make sure you have a simple way to unsubscribe at any time, within the communication itself. When you unsubscribe, the newsletter communication stops. We use Brevo (operated by Sendinblue SAS, France) to send the newsletter; it acts as a processor. Your email address is processed through the Brevo platform solely for this purpose. ### 2.3 When you complete the contact form When you complete the contact form available on the website, we process the data you provide directly: your first and last name, email address, telephone number, and the content of your message. We process this data in order to respond to your request, to provide the information you asked for, and to manage the pre-contractual or contractual relationship that may result. The legal basis is the steps taken at your request before entering into a contract, together with our legitimate interest in responding to enquiries received. The data is retained for as long as is necessary to resolve the request and, thereafter, for a period of 3 years in order to manage any commercial relationship and to defend a possible legal claim, in line with the general limitation period laid down by the Civil Code. On expiry of that period the data is deleted, unless a legal obligation requires a longer retention period. ## 3. Basis and purposes of processing — summary | Activity | Data processed | Purpose | Legal basis (Art. 6 GDPR) | Retention | |---|---|---|---|---| | Browsing the website | IP, device data, logs | Operation, security, statistics | Legitimate interest | 1 year | | Newsletter subscription | Email address | Sending communications | Consent | Until unsubscribed | | Contact form | Name, email, phone, message | Resolving the request | Pre-contractual steps / legitimate interest | Duration of the request + 3 years | ## 4. Who has access to your data (recipients) Your data may be disclosed, strictly as necessary and subject to confidentiality safeguards, to: - our service providers acting as processors: our web hosting provider, Brevo (Sendinblue SAS) for sending the newsletter, and Google (Google Analytics) for analysing website traffic; - our professional advisers (legal, accounting), where necessary; - public authorities, where we have a legal obligation to do so. We do not sell or rent your personal data to third parties. ## 5. Transfers outside the European Economic Area The Brevo newsletter service (Sendinblue SAS) is provided by a company in the European Union, and the related data is stored within the European Economic Area. Google Analytics may involve a transfer of data to the United States of America. Any such transfer takes place on the basis of the appropriate safeguards provided for by the GDPR, namely the standard contractual clauses approved by the European Commission and, where applicable, the Data Privacy Framework to which Google has adhered. You can obtain further information about these safeguards by contacting us using the details in section 9. ## 6. Your rights Under Regulation (EU) 2016/679 (GDPR) you have the following rights: - the right of access to the data processed; - the right to rectification of inaccurate or incomplete data; - the right to erasure (the "right to be forgotten"), under the conditions set by law; - the right to restriction of processing; - the right to data portability; - the right to object to processing based on legitimate interest; - the right to withdraw your consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before the withdrawal; - the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul General Gheorghe Magheru 28-30, sector 1, Bucharest, postal code 010336, email: anspdcp@dataprotection.ro. To exercise these rights, you can contact us using the details in section 9. We will respond to your request within one month of receipt at the latest. ## 7. Data security We have implemented appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or accidental disclosure. Access to the data is limited to those who need it for the purposes described in this notice. ## 8. Cookies The website uses cookies and similar technologies. For details of the types of cookies used, their purpose and duration, and how you can manage your preferences, please see the Cookie Policy available on the website. ## 9. Contact For any question about this notice or to exercise your rights, you can contact us at: **CROSSPOINT REAL ESTATE S.R.L.** Address: Calea Floreasca 240B, Ethos House, 3rd floor, Bucharest Email: office@crosspoint.com.ro ## 10. Changes to this notice We reserve the right to update this notice periodically to reflect changes in our processing practices or in applicable legislation. The updated version will be published on this page, stating the date it was last changed.