Verify a company

Legal

Privacy policy (summary)

This is an English summary. The binding version is the Romanian text.

Controller

Pronet Design SRL, Str. Doamna Stanca nr. 5C, sc. B, ap. 22, com. Selimbar, jud. Sibiu. Data protection contact: gdpr@hum.ro.

What we process on the public site

  • Waiting list: email address, optionally company name and pilot interest. Legal basis: consent. Retention: until launch communication is sent and at most 24 months, or until you withdraw.
  • Free company check: the tax ID you enter (company data, not personal) and a hashed IP address for the daily limit. Results cached 24 hours; counters deleted daily.
  • Contact: the content of your message and your address. Legal basis: legitimate interest in answering you. Retention: 3 years.
  • Server logs: IP address, user agent, requested page, for security. Retention: 30 days.
  • Analytics: cookie-free, self-hosted, aggregated measurement. No cross-site tracking, no advertising identifiers.

Company data and legal representatives

The platform processes data on companies from official public sources (ANAF, ONRC, VIES, the courts portal). Names of legal representatives and shareholders are personal data published by law in the Trade Register. We process them under legitimate interest (art. 6(1)(f) GDPR): assessing the creditworthiness of business partners. A legitimate interest assessment is available on request. Safeguards: public sources only, access for authenticated users only, no indexing by search engines, no national identification numbers (CNP, TCKN). Retention: while the company is monitored by a customer and at most 5 years.

Recipients

Hosting and email providers in the EU, bound by processing agreements. No sale of data. No transfers outside the EU/EEA, except where a customer orders a level 3 commercial report on a Turkish company, in which case the company identifiers are sent to the report provider.

Your rights

Access, rectification, erasure, restriction, portability, objection (including to processing under legitimate interest) and withdrawal of consent. Write to gdpr@hum.ro; we answer within 30 days. You may lodge a complaint with the Romanian supervisory authority (ANSPDCP, dataprotection.ro).

Turkey (KVKK)

For Turkish companies we process only company-level identifiers and names of representatives as published by MERSIS and the Trade Registry Gazette. We never store Turkish personal identification numbers (TCKN).

Version 2026-09-04.