Privacy Policy

of expur.ro website

Thank you for visiting the Website https://www.expur.ro/ (hereinafter referred to as the “Website”). We hope you will enjoy learning more about Expur S.A. (hereinafter referred to as “Expur”) and our products.

The present Privacy Policy (hereinafter referred to as the “Privacy Policy”) is an integral part of the Expur Terms and Conditions presented on the Website.

Through this Privacy Policy, we want to inform you about how we collect, use, and protect your personal data when you interact with the website www.expur.ro.

Please consult this section regularly, as the policy may undergo changes or updates. Any significant changes to this policy will be notified. In addition to this policy, please refer to our Cookie Policy

Who are we

EXPUR S.A. has its registered office at Șos. Amara nr. 3, Slobozia, jud. Ialomița, and is registered in the Trade Register under no. J21/261/1991, with VAT registration code RO2091480.

Contact details

Postal Address: Șos. Amara nr. 3, Slobozia, jud. Ialomița, Romania

E-mail: dpo@expur.ro

Use of the Website

By accessing or using any part/function of the Website, you agree to accept and comply with the terms, conditions, and policies mentioned and/or available via hyperlink, and you are at least the legal age in accordance with applicable national legislation. If you do not accept the terms, conditions, and policies set forth in this documentation, then you should not continue to access our website and/or use our services.

Intellectual property rights

The content of the Website: images, text, web graphics, scripts, software, design rights, model rights, patents, registered trademarks, are the sole property of EXPUR and are protected by copyright and related rights laws and intellectual and industrial property laws. The use of any of the above elements without EXPUR’s consent is punishable under the applicable legislation.

EXPUR may offer the user/customer, by agreement, the right to use certain content of the website in a specified form. This agreement applies strictly to the defined content(s), for a period established in the agreement and only to the person(s) who have been permitted to use this content, without being able to use other content on the Website.

Please report any possible copyright infringement noticed on the site to marketing@expur.ro.

Where we collect data about you

In general, the personal data we collect is provided by you via email, through the Website, social media, or during your visits to our premises.

Also, when you interact with us on social media (i.e., likes, shares, comments, reviews, etc.), we will inevitably have access to information about you, particularly data that you have made public on your social media profile.

How we process personal data

Please find below the purposes for which we process your personal data, the persons who have access to your data, and how we store it.

1.        We process data about you when you interact with us using the contact details available on our website or our contact forms

When you interact with us using the contact details available on the website https://www.expur.ro/ or leave us a message via the contact forms, we will use your contact details and the data you provide to us to provide you with information and offers about our services and products, to resolve the situation reported, to assess the satisfaction of our customers, and to continuously improve the services we offer.

Categories of personal data	First name, last name, telephone number, email address, Internet Protocol (IP) address, cookie ID, company, other personal data included in the message you voluntarily send us
Legal basis of processing	We process your data to take steps at your request prior to entering into a contract (Art. 6/1/b of Regulation (EU) 2016/679) and in pursuit of our legitimate interest in responding to any questions, complaints, or recommendations you send us and to improve the services and experience we offer our customers (Art. 6/1/f of Regulation (EU) 2016/679)
Who we may share your data with	Marketing service providers,Email provider,Regulatory authorities and other government authorities, if required by legal or statutory requirements. We will only disclose your personal data to the extent that this is strictly necessary to achieve the intended purpose. We have taken all necessary measures to ensure that external service providers who have access to your data have implemented physical, electronic, and managerial security measures to protect your data.
How long we will store your data	We will store your data in our communications database for a maximum of 2 years from the last interaction.

2.        When you react to content on social media or share information from the website

We are present on Youtube. Whenever you interact with us through this platform (e.g., like, share, etc.), we will have access to the publicly available data on your profiles.

Categories of personal data	Name, image, and any other publicly accessible information in your social media profile or voluntarily communicated by you
Legal basis of processing	We process your data in our legitimate interest (Art. 6/1 / f GDPR) to respond to any questions, complaints, or recommendations you send us and to improve the services and experience we offer our customers, and in our legitimate interest to keep you informed of news published by EXPUR SA that may be of interest to you
Who we may share your data with	Marketing service providers,Youtube platform,Regulatory authorities and other government authorities, if required by legal or statutory requirements. We will only disclose your personal data to the extent that this is strictly necessary to achieve the intended purpose. We have taken all necessary measures to ensure that external service providers who have access to your data have implemented physical, electronic, and managerial security measures to protect your data.
How long we will store your data	Data transmitted via social media platforms will be stored by those platforms in accordance with their own policies.

3.        Facilitating easy and enjoyable navigation on our website

When you visit our website, we collect data about you through online identifiers (cookies and IP addresses), which are stored in log files.

We use this information to design our website so that it is better suited to the needs of our users. We may also use your IP address to help diagnose any malfunctions of our servers and to manage our website, maintain the security of our website and prevent fraud, authorize the use of services available on our website, analyze trends, track visitor movements, and gather broad demographic information to help identify visitor preferences.

You can find more information about cookies, as well as how to delete cookies and disable tracking, by visiting the Cookie Policy available on our website.

Categories of personal data	Internet Protocol (IP), general location of your computer, device (country level), website viewing history, timestamp, request/action, browser and operating system type and version. Other information that is generated while you use our website, including when, how often, and under what circumstances you use it
Legal basis of processing	We use cookies that make your browsing on our website easy and enjoyable, in our legitimate interest (Art. 6/1/f of Regulation (EU) 2016/679)Non-essential cookies are not used without your consent (Art. 6/1/a of Regulation (EU) 2016/679)
Who we may share your data with	Marketing service providers,Third parties that place cookies: Youtube, Google, CookieYes,Regulatory authorities and other government authorities, if required by legal or statutory requirements. We will only disclose your personal data to the extent that this is strictly necessary to achieve the intended purpose. We have taken all necessary measures to ensure that external service providers who have access to your data have implemented physical, electronic, and managerial security measures to protect your data.
How long we will store your data	here are session cookies and persistent cookies. While session cookies are deleted when you close your browser, persistent cookies may have a different lifespan depending on their purpose. More information about the duration of use of the cookies we use can be found in the Cookie Policy.
Where is the data stored	The data collected through our own cookies will be stored on the hosting provider’s servers. The data collected through third parties that place cookies will be stored on their servers.

Is the data processed securely?

EXPUR pays close attention to protecting your data and applies appropriate technical and organizational measures to ensure the protection of the personal data processed, commensurate with the risks and categories of data protected, in particular, it protects data against sharing with unauthorized persons, retrieval by unauthorized persons, processing in violation of applicable laws, and against alteration, loss, damage, or destruction of data.

However, please note that, unfortunately, no data transmission is 100% secure.

If you suspect a breach of your data privacy, please contact us immediately at: dpo@expur.ro.

Important: After the data retention period, your data will be deleted. If we believe that this data could help us improve the quality of our products or services, we will continue to use this data only after irreversibly anonymizing it.

Links to other websites

Please note that we are not responsible for the privacy practices of other websites or third parties. We encourage you to be aware when you leave our website and to read the privacy policies of each website that may collect personal information.

Processing of minors’ data

EXPUR is not intended for and does not knowingly collect information from minors under the age of 18 through its website. Access to and use of the website by minors constitutes the implicit consent of the legal guardian for the minor in their care to browse our website. Also, if we discover that a minor has used our website without the approval of their legal representative, we will delete all personal data about them.

International transfers of personal data

EXPUR shares personal data with partners operating outside the European Economic Area (“EEA”).

List of international partners with whom we share data:

• Third parties that palce cookies: YouTube, Google, CookieYes
• Online platforms:  YouTube
• The platform on which our website was developed and which hosts our website

Personal data may be stored and processed in any country where we engage service providers. We may transfer the personal data we maintain about you to recipients in countries other than the country in which the personal data was originally collected, including to the United States or Israel. These countries may have data protection rules that are different from those in your country. However, we will take steps to ensure that any such transfers comply with applicable data protection laws and that your personal data remains protected according to the standards described in this privacy policy. In certain circumstances, courts, law enforcement agencies, regulatory agencies, or security authorities in those other countries may have the right to access your personal data.

Where applicable law requires us to ensure that an international data transfer is governed by a data transfer mechanism, we use one or more of the following mechanisms:

• EU standard contractual clauses with a data recipient outside the EEA or the UK
• Verification that the recipient has implemented binding corporate rules
• We will also ensure that all our international partners have adopted additional measures to provide adequate safeguards, enforceable rights, and effective legal remedies. The role of these measures is to provide additional guarantees to data subjects that data transfers based on standard contractual clauses or binding corporate rules offer a level of protection equivalent to that guaranteed within the European Union.

Your rights as a data subject

As a data subject, you have specific legal rights regarding the personal data we collect and process. EXPUR respects your rights and ensures that your interests are taken into account appropriately.

• Withdrawal of consent: If the processing is based on your consent, you may withdraw your consent for that processing at any time.
• Rectification of data: If you notice that we hold incorrect personal data, you may request that we rectify your personal data at any time. We make reasonable efforts to keep personal data – which is continuously used and in our possession or control – accurate, complete, current, and relevant, based on the latest information available to us. 
• Restriction of processing: If you are in one of the situations below, you may request that we restrict the processing of your data:
  • you contest the accuracy of the personal data for the period in which we must verify its accuracy, 
  • the processing is unlawful and you request the restriction of processing rather than the erasure of the personal data,
  • we no longer need your personal data, but you require it for the establishment, exercise, or defense of a legal claim, or 
  • you object to the processing while we verify whether our legitimate grounds override your rights. 
• Access to your data: You can ask us for information about the personal data we hold about you, including information about what categories of data we hold, what it is used for, where we collected it from if not directly from you, and who it has been disclosed to, if applicable. You can obtain a copy from us, free of charge, containing the personal data we hold about you. We reserve the right to charge a reasonable fee for excessive requests.  
• Right to portability: Upon request, we will transfer your personal data to another controller, where technically feasible, provided that the processing is necessary for the performance of a contract. Rather than receiving a copy of your personal data, you may request that we transfer your data directly to another controller specified by you.
• Right to erasure: You can obtain from us the erasure of your personal data if:
  • your data is no longer necessary for us in relation to the purposes for which it was processed;
  • you object to the further processing of your personal data (see Right to object below);
  • the personal data has been processed unlawfully;
  • you withdraw your consent on which the processing is based.

        Unless the processing is necessary:

• to comply with a legal obligation that requires us to process that data;
  • in particular for legal requirements regarding data retention periods;
  • for the establishment, exercise, or defense of legal claims.
• Right to object: You may object to the processing of your personal data at any time due to your particular situation. In this case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing or for the establishment, exercise, or defense of legal claims. When you object to the processing, please indicate whether you wish to have your personal data deleted or the processing of such data restricted.
• Right to lodge a complaint: In the event of an alleged breach of applicable privacy legislation, you may lodge a complaint with the data protection supervisory authority: 
• Romanian National Supervisory Authority for Personal Data Processing by completing the online form available on the website www.dataprotection.ro

Please note!

Timeframe: We will try to resolve your request within 30 days. However, the period may be extended for reasons related to specific legal rights or the complexity of the request. 

Restriction of access: In certain situations, we may not be able to grant you access to all or part of your personal data due to legal restrictions. If we deny your request for access, we will let you know why.

Inability of identification: In some cases, we may not be able to identify your personal data due to a lack of identifying information in your request. In such cases, if you do not provide additional information to enable us to identify you, we will not be able to comply with your request to exercise your legal rights as described in this section.

Exercising your rights

To exercise your legal rights, please contact our Data Protection Officer in writing at the following email address: dpo@expur.ro.

Thank you for reading our privacy policy. We would appreciate your feedback so that we can improve this document!

This version was updated on 08.12.2025.