Last updated: May 21, 2026
1. Data controller
Kapital Advisory is the controller of personal data collected through this site. For any request regarding the processing of your data, you can reach us at:
- Address: Bd. Aviatorilor 78, etaj 1, Sector 1, București
- Email: office@kapitalhr.com
- Phone: +40 724 127 059
2. What data we collect
We only collect data that is strictly necessary to respond to your requests:
- Through the contact form: first name, last name, email address, phone number (optional), the subject of your request, and the message itself.
- Technical and functional cookies: display preferences, cookie-consent state, audio-player and scroll (Lenis) settings. These cookies do not identify you personally.
We do not collect sensitive data (origin, religious beliefs, health, biometric data, etc.) and we do not perform automated profiling.
3. Purpose of processing
The data submitted through the contact form is processed solely to:
- respond to your request and provide information about our organizational-transformation consulting services;
- set up an initial conversation or meeting, where appropriate;
- fulfil any legal obligations arising from a business relationship.
4. Legal basis
We process your data based on:
- Your consent (art. 6(1)(a) of Regulation (EU) 2016/679 – GDPR), given by ticking the dedicated checkbox when submitting the form;
- Our legitimate interest (art. 6(1)(f) GDPR) in responding to business inquiries received through our official channels.
5. Retention period
Data submitted through the contact form is kept for a period of 3 years from the last interaction, after which it is deleted or anonymised. If your request leads to a contractual relationship, we retain the data in accordance with applicable legal obligations (accounting, tax, etc.).
6. Recipients
Your data is accessed only by Kapital Advisory team members who need it to respond to your request. In certain cases, data may be processed by specialised providers (e.g. the Supabase database hosting service and the email service) strictly for the technical operation of the site. All our partners comply with GDPR requirements.
We do not sell or transfer your data to third parties for advertising purposes.
7. Your rights
Under GDPR you have the following rights:
- right of access to the data we process;
- right to rectification of inaccurate data;
- right to erasure ("right to be forgotten");
- right to restriction of processing;
- right to data portability;
- right to object to processing based on legitimate interest;
- right to withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand.
8. How to exercise your rights
You can send a written request at any time to office@kapitalhr.com. We respond within a maximum of 30 days from receipt. In some cases, we may ask for additional information to verify your identity before processing the request.
9. Complaints to ANSPDCP
If you consider that the processing of your data infringes GDPR, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP):
- B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, Bucharest, Romania
- Web: www.dataprotection.ro
- Email: anspdcp@dataprotection.ro
10. Data security
We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss, or destruction: encrypted connections (HTTPS), restricted database access, periodic backups, and regular review of internal procedures. No system is, however, immune to risk, which is why we collect only what is strictly necessary.
11. Cookies
For details on the cookies used on this site, see the Cookie Policy.
12. Changes
This policy may be updated from time to time. The version in force is always the one published on this page, with the last-updated date shown above.