I. General Information

The confidentiality of your personal data is a priority for Phinnix Advisory SRL, as data controller. This document is intended to inform you about how we process your personal data in the context of using our website www.phinnixadvisory.ro (the “Website”).

II. Categories of Personal Data Processed

When visiting the Website, Phinnix Advisory may process personal data that you voluntarily provide, such as information submitted through the contact form or other sections where you send us inquiries, requests, or messages.

III. Purposes and Legal Grounds for Processing

Your personal data may be processed by Phinnix Advisory for the following purposes:

• Marketing communications: sending information regarding our services and events via email or other electronic communication channels. Legal basis: your explicit consent, if granted.

• Managing inquiries and complaints: addressing messages or requests received through the Website, as well as monitoring and improving the user experience. Legal basis: the legitimate interest of Phinnix Advisory to ensure the proper functioning of the Website and its interaction with visitors.

Providing this data is voluntary. Refusal to provide it may limit our ability to respond to your requests but has no other negative consequences for you.

IV. Data Retention Period

Your personal data will be stored and processed only for as long as necessary to fulfill the purposes described above, after which it will be deleted or anonymized in accordance with legal requirements.

V. Disclosure of Personal Data

For the purposes outlined above, Phinnix Advisory may disclose personal data to contractual partners (e.g., IT service providers, hosting providers, consultants), as well as to public authorities where disclosure is legally required.

VI. Data Transfers Outside the Country

Personal data may be transferred to states within the European Union, if required for the provision of our services.

VII. Rights of Data Subjects

Under applicable data protection legislation, you are entitled to the following rights:

• the right to be informed and to access your data;

• the right to rectify or complete inaccurate data;

• the right to erase data (“right to be forgotten”) under the conditions set by law;

• the right to restrict processing;

• the right to data portability;

• the right to object, including to processing for direct marketing purposes;

• the right not to be subject to automated individual decision-making, including profiling;

• the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing or to bring an action before the competent courts.

For any questions regarding the way Phinnix Advisory processes your personal data, or to exercise your rights, you may contact us at: gdpr@phinnixadvisory.ro.