Transilvania Grand SRL is the data controller for the Adorys platform. We process your personal data under the GDPR (EU Regulation 2016/679) and Romanian Law 190/2018, solely to provide real-estate brokerage services. This page summarises what we collect, how we use it, and the rights you have.
What we collect
We collect only the data we need to deliver our services, within the bounds of GDPR Article 6(1): name, surname, national ID number (CNP) and ID card series/number to enter into the viewing or brokerage contract; phone number and email for communication and scheduling; information about your property interest (specific property, indicative budget, area preferences) to tailor offers; and the URL of the page you submitted the form from, for context. We do not collect sensitive data and we do not perform automated profiling.
How we use it
We use your data solely to respond to your inquiry and to provide the brokerage service. We may share it, only to the extent strictly necessary, with: the owner of the property being negotiated, a notary public for drafting the deed, our accountant and lawyer for legal obligations, and our IT infrastructure providers (hosting, email, CRM), with whom we hold data processing agreements signed under GDPR Article 28. We do not sell or rent your data to anyone. For protection we use in-transit encryption (HTTPS), hashed passwords, two-factor authentication for administrative access, and need-to-know access controls.
Third-party processors
To deliver our services we rely on a small number of trusted providers who process data on our behalf under data-processing agreements concluded in accordance with GDPR Article 28: Resend (transactional email delivery); Fly.io (application hosting, in the EU / Amsterdam region); Cloudflare R2 (secure file and image storage); and Google (sign-in for our staff and agents only). Each may process your data solely to provide its service to us. We do not sell or rent your data to anyone.
How long we keep it
Inquiries that do not result in a transaction are kept for 120 days from the last interaction, plus a 30-day buffer for archival, after which they are permanently deleted. Completed transactions are kept for 3 years for tax purposes, with related accounting documents retained for 10 years as required by the Romanian Fiscal Code. Marketing communications (with explicit consent) are retained until consent is withdrawn.
Your rights
Under the GDPR you have the right, free of charge, to: access the data we hold about you, have inaccurate data corrected, request deletion where no legal basis for retention remains, restrict or object to processing, receive your data in a portable format, and withdraw marketing consent at any time. We respond to requests within 30 days. You also have the right to lodge a complaint with the Romanian data protection authority (ANSPDCP — dataprotection.ro, B-dul G-ral Gheorghe Magheru 28-30, Bucharest).
Contact
For any privacy-related question or to exercise your rights, contact contact@adorys.ro. Data controller: Transilvania Grand SRL, fiscal code 39607580, registered with the Trade Register under no. J01/631/2018, registered office at Str. Libertății 5, bl. L4, et. 3, ap. 10, Câmpeni 515500, Alba County, Romania.
