Last updated: 25 September 2026 · This English version is provided for convenience. If there is any discrepancy, the Romanian version prevails.
1. Who processes the data
The controller of the data collected through this site is FEPRA EPR S.A., registered with the Trade Register under no. J40/8572/2016, tax ID (CUI) 36226999, with its office at Șos. Pipera 46d-46e-48, Oregon Park, Building A, 6th floor, Bucharest, Sector 2, Romania. You can write to us at office@fepra.ro or call +40 377 101 400. When your request concerns another company in the FEPRA Group (recycling, collection, environmental consulting), the data goes to that company, which processes it under the same conditions.
2. What data we process and where it comes from
- The forms on the site (contact, sign-up, quote request, data sheet and sample): your name, company and position, e-mail address, phone number, your message and, for sign-up, the company's details and those of the person signing the contract.
- Correspondence by e-mail, phone or in meetings: contact details and the content of the discussion.
- Job applications sent to hr@fepra.ro or by phone: your CV, contact details and, for operational roles, your town.
- Technical data about your visit: IP address, browser and device type, pages visited, in the hosting provider's logs, plus the cookies described in the cookie policy.
We do not collect data from children and we do not process special categories of data (health, political opinions, biometric data) through this site. The client reporting platform is a separate application, with its own terms of use.
3. Why we process the data and on what legal basis
| Purpose | What data | Legal basis (GDPR) |
|---|---|---|
| Answering your request and preparing a quote | the data from the form or from correspondence | steps at your request before entering into a contract, art. 6 (1) b; our legitimate interest in answering those who contact us, art. 6 (1) f |
| Entering into and performing the contract, including the reporting required by law for environmental services | the company's details and those of the contact person, reporting data | performance of the contract, art. 6 (1) b; legal obligations, art. 6 (1) c |
| Accounting records and document archiving | data from contracts and invoices | legal obligations, art. 6 (1) c |
| Recruitment | CV and contact details | pre-contractual steps, art. 6 (1) b; keeping the CV after the process ends, only with your consent, art. 6 (1) a |
| Updates about FEPRA services and news | e-mail address | your consent, ticked in the form, art. 6 (1) a; you can withdraw it at any time |
| Operating, securing and improving the site | technical data about your visit | our legitimate interest, art. 6 (1) f; for statistics cookies, your consent |
4. Who we share the data with
We do not sell or rent personal data. We share it only with those who help us answer you and do our work:
- Service providers that process data on our behalf, under contract: HubSpot (the forms on the site and client relationship records, with data centres in the European Union), Microsoft (e-mail and documents), PandaDoc (electronic signing of contracts), Cloudflare (hosting and security of the site), Google (Google Analytics 4) and Microsoft (Clarity) for site-usage statistics, only with your consent given through the cookie banner, the telephony provider.
- Companies in the FEPRA Group, when your request concerns them.
- Legal, accounting and audit advisers, bound by confidentiality obligations.
- Public authorities (for example the Environmental Fund Administration, AFM), when the law requires it.
5. Transfers outside the European Economic Area
Data is, as a rule, processed in the European Union. Some service providers may also process data in the United States. In those cases we make sure the transfer has a safeguard recognised by the European Commission: the adequacy decision for the EU-U.S. Data Privacy Framework or the standard contractual clauses.
6. How long we keep the data
- Requests that do not lead to a contract: 2 years from the last interaction.
- Data from contracts, invoices and reporting: for the duration of the contract and then for as long as accounting and environmental laws require, generally 10 years.
- Job applications: for the duration of the recruitment process and, with your consent, 12 months afterwards, so that we can contact you for a suitable role.
- E-mail address for updates: until you unsubscribe.
- Technical logs of the site: at most 12 months.
7. Your rights
You have the right to ask us for access to your data, its rectification or erasure, restriction of processing, data portability, and to object to processing based on our legitimate interest. Where processing is based on your consent, you can withdraw it at any time, without affecting what happened before. Write to us at office@fepra.ro; we answer within 30 days at most.
If you consider that your rights have been infringed, you can lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest, dataprotection.ro, or go to court.
8. How we protect the data
We use encrypted connections (HTTPS), account- and role-based access to the systems where we keep the data, providers that offer contractual security guarantees, and training for the colleagues who work with personal data.
9. Automated decisions and links to other sites
We make no decisions based solely on automated processing of your data and we do no profiling. The site contains links to sites of authorities, publications and partners; each has its own privacy policy, which we encourage you to read.
10. Changes
We update this policy when the services we use or the legislation change. The date of the last update appears at the top of the page.