Privacy Policy

This policy describes how Norafleks collects, uses, and protects your personal information in accordance with the General Data Protection Regulation (GDPR) and applicable legislation.

1. Data We Collect

For the purpose of providing our fintech services, we may process the following categories of data:

Identification data: name, surname, contact details (email, phone).
Professional/company data: company name, Tax ID, billing information.
Financial and transaction data: information necessary for managing flexible payments and credit lines (we do not store full credit card details).
Technical data: IP address, browser type, device, platform usage data.
Financial education data: progress and interactions within our courses.

2. Purpose and Legal Basis for Processing

We process your data for:

Providing and managing flexible payment services and credit lines.
Personalizing and improving the experience on the digital platform.
Providing financial education courses.
Operational and support communications.
Improving security and preventing fraud.
Fulfilling legal obligations (accounting, tax).

Processing is based on contract performance, your consent, legitimate interest, or legal obligation.

3. Cookies and Similar Technologies

We use cookies and tracking technologies for platform functionality, analytics, and personalization. You can manage your cookie preferences in your browser settings. Full details are available in our Cookie Policy.

4. Sharing with Third Parties

Data may be shared with:

Payment processing service providers and technology partners (under strict confidentiality agreements).
Regulatory authorities or law enforcement, only when required by law.
Legal and accounting consultants to fulfill our obligations.

We do not sell your personal data. Data transfers outside the EEA are made with adequate safeguards.

5. Your Rights

Under the GDPR, you have the following rights:

Right of Access and Rectification

You can request access to your data and its correction if inaccurate.

Right to Erasure ("Right to be Forgotten")

You can request the deletion of your data, under certain legal conditions.

Right to Restriction and Objection

You can restrict processing or object to certain processing activities.

Right to Data Portability and Withdrawal of Consent

You can receive your data in a structured format and withdraw your consent at any time.

To exercise these rights, please contact the Data Protection Officer (DPO) at the address below.

6. Data Security

We implement appropriate technical and organizational measures (encryption, access control, audits) to protect your data against unauthorized access, loss, or disclosure.

7. Data Protection Contact

For any questions or requests regarding the processing of your personal data and exercising your rights, please contact:

Data Protection Officer (DPO) – Norafleks
B-dul. Eroilor nr. 2B, bl. B, sc. D, et. 5, ap. 86
Phone: 0797782624
Email: info@norafleks.com

You have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing.

Last Updated: May 15, 2024

This policy may be updated periodically. The current version is always available on this page.