Privacy Policy

Data controller

The controller is Momentum Energy, Hyperion Towers, Bulevardul Pipera 1/VI, Voluntari 077190, Ilfov, Romania. You can reach us by email at contact@momentumenergy.ro or by post at the address above.

What data we process and why

We process personal data in four situations.

• Contact form: name, company, work email and, if you give them, your phone number and message. Purpose: to answer your enquiry and, where relevant, to discuss a possible engagement. Legal basis: your consent (Article 6(1)(a) GDPR) and steps prior to entering into a contract (Article 6(1)(b) GDPR).
• Presentation requests on the projects page: your email address, the project you asked about and the page language. Purpose: to send you the project presentation you requested and to follow up on that project. Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in following up on a project enquiry (Article 6(1)(f) GDPR).
• Server and security logs: IP address, browser type, requested pages and timestamps, processed by our hosting provider to deliver the site and protect it against abuse. Legal basis: legitimate interest (Article 6(1)(f) GDPR).
• Analytics: only if you accept analytics in the cookie banner, we load a web-analytics service to understand which pages are read. Legal basis: consent (Article 6(1)(a) GDPR). No analytics run without your choice.

Who receives the data

Form submissions are stored by our hosting and form provider, Netlify, Inc. (United States, with data processed under standard contractual clauses and the EU-US Data Privacy Framework), and are read by the Momentum Energy team. Presentations requested on the projects page are sent through our email delivery provider, which processes your address only to deliver that message. Analytics data, when enabled with your consent, is processed by the provider named in our Cookie Policy. We do not sell personal data and we do not share it with third parties for their own marketing.

International transfers

Where a provider processes data outside the European Economic Area, we rely on the safeguards recognised by GDPR, including adequacy decisions and standard contractual clauses.

How long we keep data

Enquiries are kept for as long as needed to handle them and for up to three years after our last exchange, unless a longer period is required by law or a contract follows. Server logs are kept for a short period by the hosting provider for security purposes. Analytics data is retained according to the provider's settings described in the Cookie Policy.

Your rights

Under GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to processing, to data portability and to withdraw consent at any time without affecting the lawfulness of processing before withdrawal. To exercise these rights, write to contact@momentumenergy.ro. You also have the right to lodge a complaint with the Romanian supervisory authority, ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal, B-dul G-ral Gheorghe Magheru 28-30, Bucharest, www.dataprotection.ro).

Security

The site is served over HTTPS with security headers, form submissions are transmitted encrypted, and access to submissions is restricted to the team that handles enquiries.

Changes

We update this policy when our processing changes. The date at the top of the page shows the latest version.