Last updated: 28 June 2026.

This policy explains how ELECRO (hereinafter "ELECRO", "we" or "the controller") collects, uses, discloses and protects the personal data we process when you visit our website dedicated to residential photovoltaic systems, contact us or interact with our services. We recommend that you read it carefully.

1. Data controller

The controller of personal data is:

Name: ELECRO S.R.L.
Unique Registration Code (CUI): 49836891
Trade Register number: J40/6487/2024
Registered office: 107 Traian Street, Bucharest, Romania
E-mail: contact@elecro.eu
Phone: +40 740 326 283

For any request regarding data protection, you may contact us at the e-mail address above, stating "Data Protection / GDPR" in the subject line.

2. Data Protection Officer (DPO)

ELECRO has not currently appointed a Data Protection Officer (DPO). Requests regarding the protection of personal data should be addressed directly to the controller, at contact@elecro.eu.

3. What data we collect

We collect only the data necessary for the purposes described below. Mainly, through the contact form and the configurator on the site, we process:

First and last name — to address you correctly;
E-mail address — so that we can reply to you;
Phone number (if you provide it) — so that we can contact you;
The locality or approximate address of the home (if you provide it) — to estimate the solution and, where appropriate, to schedule an on-site assessment;
Indicative data about consumption and the roof (for example the value of the bill, the roof type), if you choose to share them through the form or configurator, in order to size the photovoltaic system;
The content of your message and any other data you choose to share with us voluntarily.

Automatically, when accessing the site, limited technical data may be processed (IP address, browser type, pages visited), strictly for the operation and security of the site. We do not use third-party advertising profiling tools. For details about cookies, see the Cookie Policy.

4. Purposes of processing

We process your data in order to:

respond to requests, questions and quote enquiries submitted through the form, configurator, e-mail or phone;
provide you, at your request, with information about residential photovoltaic systems and our services (design, installation, commissioning, the prosumer file and maintenance);
size and estimate a photovoltaic solution suited to your home;
manage the pre-contractual and contractual relationship;
ensure the security, maintenance and proper operation of the site;
comply with our legal obligations.

5. Legal basis

Processing is based, as the case may be, on:

Your consent (Art. 6(1)(a) GDPR) — when you complete and submit the contact form or the configurator;
Pre-contractual steps / performance of a contract (Art. 6(1)(b) GDPR) — when the request concerns a quote, an on-site assessment or a collaboration;
Our legitimate interest (Art. 6(1)(f) GDPR) — for the security of the site and to respond appropriately to requests, without prejudicing your rights;
Legal obligation (Art. 6(1)(c) GDPR) — when the law requires us to retain or disclose certain data.

6. Recipients of the data

We do not sell or rent your data. We may disclose it, strictly within the limits necessary, to:

providers who support us operationally (hosting, e-mail), on the basis of processing contracts compliant with Art. 28 GDPR;
partners involved in carrying out your project (for example, to prepare and submit the prosumer file to the distribution operator), when necessary for the performance of the contract;
professional advisers (legal, accounting), when necessary;
public authorities, when required to do so by law.

We host the site and manage communications with the objective of keeping data within the European Economic Area (EEA). If a transfer outside the EEA becomes necessary, it will be carried out only with the safeguards provided for in Chapter V GDPR (e.g. standard contractual clauses).

7. Retention period

We keep data only for as long as necessary for the purpose for which it was collected:

contact messages and related correspondence — for the duration of handling the request and a reasonable period thereafter, after which they are deleted or anonymised, in line with the storage limitation principle;
data relating to contractual relationships — for the duration of the contract and in accordance with statutory archiving terms (e.g. tax and accounting obligations);
technical security data — for short periods, in accordance with logging policies.

Upon expiry of these terms, data is deleted or anonymised securely.

8. Your rights

As a data subject, you benefit, under the GDPR, from the following rights:

the right of access to the data processed;
the right to rectification of inaccurate or incomplete data;
the right to erasure ("the right to be forgotten"), under the conditions of the law;
the right to restriction of processing;
the right to data portability;
the right to object to processing based on legitimate interest;
the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal;
the right not to be subject to a decision based solely on automated processing, including profiling (we do not carry out such processing).

To exercise these rights, you may write to us at contact@elecro.eu. We will respond within at most one month of receiving the request, with the possibility of an extension under the conditions of the law.

9. The right to lodge a complaint

If you consider that the processing of your data infringes the law, you have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP):

B-dul G-ral. Gheorghe Magheru no. 28-30, Sector 1, Bucharest, Romania;
E-mail: anspdcp@dataprotection.ro;
Web: www.dataprotection.ro.

We nevertheless encourage you to contact us first, so that we can quickly resolve any concern.

10. Cookies

The site uses strictly necessary cookies for its operation and, where applicable, optional cookies (preferences and anonymous, locally hosted statistics) only with your consent. We do not use third-party advertising cookies. Full details and control options can be found in the Cookie Policy.

11. Data security

We apply reasonable technical and organisational measures to protect data against unauthorised access, loss, alteration or disclosure: encryption in transit (HTTPS), access control, secure hosting and data minimisation. No system is, however, 100% secure; we undertake to handle any incident promptly and transparently, including by notification, where the law requires it.

12. Data concerning minors

Our services are addressed to adults who are owners or occupants of a home. We do not knowingly collect data of persons under the age of 16. If you believe that a minor has provided us with data, please contact us for deletion.

13. Changes to this policy

We may update this policy from time to time to reflect legislative or operational changes. The version in force is the one published on this page, with the date of the last update stated above. We recommend that you consult it periodically.

14. Contact

For any question regarding this policy or the processing of your data, you may contact us at contact@elecro.eu, by phone at +40 740 326 283 or through our contact page.

Privacy Policy