1. Data controller
The platform operator: EMPIRE GLOBAL SOLUTIONS S.R.L., CUI 47484918, Trade Reg. No. J23/346/2023, EUID ROONRC.J23/346/2023, registered office: Str. Iasomiei, Dumbrăveni, județul Ilfov, e-mail contact@empireterra.ro, phone +40 791 367 473 („Empire Terra”, „we”).
For any personal-data request: contact@empireterra.ro.
2. Roles
- Controller. Empire Terra is the controller for account, form, order, newsletter and security data.
- Independent controllers. Agencies and agents who publish listings and receive viewing requests become independent controllers for the data they receive from you.
- Processors. Hosting, email, payment and invoicing providers process data only on our instructions (Art. 28 GDPR).
3. What we process and why
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Account & sign-in | name, email, phone, password (hashed) | performance of contract (Art. 6(1)(b)) | account lifetime + 30 days |
| Published listings | property data, photos, displayed contact details | performance of contract | while live + 1 year |
| Orders & invoicing | billing details, order history | legal obligation (Art. 6(1)(c)), tax law | 10 years |
| Contact / offer / valuation forms | name, phone, email, message | consent / pre-contractual steps | up to 2 years |
| Newsletter | consent (Art. 6(1)(a)) | until unsubscribe | |
| Analytics & security | IP, device, cookies | legitimate interest / cookie consent | per the Cookie policy |
4. Recipients
Processors that help us deliver the service under contract (Art. 28 GDPR): web hosting, email, the payment processor Stripe (Stripe Payments Europe Ltd.), invoicing and, if enabled, analytics. Contact details in listings are publicly visible. We never sell personal data.
5. International transfers
Some providers may process data outside the EEA; we then rely on appropriate safeguards (adequacy decisions, standard contractual clauses).
6. Your rights
Under Regulation (EU) 2016/679 and Romanian Law 190/2018 you have the right of access, rectification, erasure, restriction, portability, objection, withdrawal of consent at any time and not to be subject to solely automated decisions. We reply within one month. You may complain to the Romanian supervisory authority ANSPDCP, B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest, anspdcp@dataprotection.ro.
Source of data. Data comes directly from you or, for requests sent through agents, from them. We make no solely automated decisions with legal effect.
7. Security
We use encrypted connections (HTTPS), hashed passwords, restricted access and backups. Card data is entered directly on Stripe’s secure pages.
8. Minors
Our services are not aimed at people under 18.
