Privacy policy

This policy explains how EMPIRE GLOBAL SOLUTIONS S.R.L. (the “Controller”) processes personal data on empireterra.ro under Regulation (EU) 2016/679 (GDPR) and Romanian Law no. 190/2018.

1. Data we process

• Account data: name, email, phone, company, password (stored only as a cryptographic hash), preferred language.
• Listings: property information and photos you publish.
• Offer requests and messages: name, email, phone, budget, message.
• Payments: chosen plan, amounts, payment status and Stripe identifiers. Card details are handled solely by Stripe and never reach us.
• Technical data: IP address (security and abuse prevention), server logs, preferences stored locally (theme, language, favourites).

2. Purposes and legal bases

• Providing the account and services — performance of a contract (Art. 6(1)(b)).
• Forwarding offer requests to owners or agents — contract and consent ((a) and (b)).
• Invoicing and accounting — legal obligation ((c)).
• Platform security, fraud and spam prevention — legitimate interest ((f)).
• Marketing — only with your consent, which you can withdraw at any time.

3. Recipients

Our hosting provider, payment processor Stripe Payments Europe Ltd., email providers, the owners or agents you contact, and authorities where required by law. Maps are provided by OpenStreetMap and fonts by Google Fonts.

4. Retention

Account data — for the life of the account; offer requests — 24 months; accounting records — 10 years as required by law; security logs — up to 12 months.

5. Your rights

You have the right of access, rectification, erasure, restriction, portability, objection and not to be subject to decisions based solely on automated processing. Write to contact@empireterra.ro. You may also lodge a complaint with the Romanian Data Protection Authority (dataprotection.ro).

6. Security

We use encrypted connections (HTTPS), hashed passwords, CSRF protection, login rate limiting and restricted data access.

7. International transfers

Some providers (e.g. Stripe and Google) may process data outside the EEA under the European Commission’s standard contractual clauses.