Last updated: May 21, 2026
1. About GDPR
Regulation (EU) 2016/679 — known as GDPR (General Data Protection Regulation) — sets the European rules on the processing of personal data and the rights of data subjects. It applies to any organisation processing data of persons located in the European Union, whether or not that organisation is established in the EU.
2. Who is the controller
For the data collected through this site, the controller is Kapital Advisory, with offices at Bd. Aviatorilor 78, etaj 1, Sector 1, București, Romania. For requests related to personal data, you can reach us at office@kapitalhr.com or +40 724 127 059.
3. Your rights
As a data subject, you have the following rights:
- Right of access — to find out whether we process data about you and, if so, to receive a copy.
- Right to rectification — to ask us to correct inaccurate data or complete incomplete data.
- Right to erasure ("right to be forgotten") — to ask for deletion of data, on the conditions set by GDPR.
- Right to restriction of processing — to ask us to temporarily stop processing in certain situations.
- Right to data portability — to receive your data in a structured, commonly used, machine-readable format.
- Right to object — to object to processing based on our legitimate interest.
- Right to withdraw consent at any time, where processing is based on consent.
- Right not to be subject to solely automated decisions that produce legal effects or significantly affect you (we do not use such mechanisms).
4. How to exercise your rights
Send us a written request at office@kapitalhr.com, clearly stating which right you wish to exercise. To verify your identity, in some cases we may ask for additional information.
We respond within at most 30 days of receiving the request. In complex cases, this period may be extended by a further 60 days, in which case we will inform you.
Exercising your rights is free, except where requests are manifestly unfounded or excessive.
5. Complaints
If you believe your rights have been infringed, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP):
- B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, Bucharest, Romania
- Web: www.dataprotection.ro
- Email: anspdcp@dataprotection.ro
6. More details
For a full description of the categories of data collected, purposes, legal bases, and retention periods, see the Privacy Policy. For details on cookies, see the Cookie Policy.