Privacy Policy

At ORAND Advisors, we value your privacy and are committed to protecting your personal data in compliance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR).

Who we are

ORAND Advisors is a business consulting firm headquartered in Bucharest, Romania. We operate this website https://www.orand-advisors.com to present our services and resources. For any privacy-related questions, please contact us via our Contact page.

What data we collect

We may collect personal information such as your name, email address, phone number, and any message you provide when contacting us. In addition, our website automatically collects technical information such as your IP address, browser type, and device information. We also use cookies and analytics tools (such as Google Analytics) to understand website traffic, improve services, and ensure security.

We do not use data for profiling or automated decision-making.

Your data will only be used to:

Respond to your inquiries (based on your consent).
Provide information about our services (legitimate business interest).
Improve our website’s performance and security (legitimate business interest).

Data sharing

We do not sell or rent your personal data. We may share limited data with trusted service providers (such as Google for analytics or email service providers for communication). If these providers are located outside the EU/EEA, we ensure that adequate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

Your rights

You have the right to request access, correction, deletion, or restriction of your personal data. You also have the right to data portability and the right to object to the processing of your data. If you believe your rights have been violated, you can lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP). To exercise these rights, please contact us via our general contact page and we will respond within 30 days as required by GDPR.

For a full overview, see the GDPR official text or the European Commission’s data protection page.

If you are based in Romania, you can also lodge a complaint with the ANSPDCP.

Updates

We may update this policy from time to time. Please check this page periodically for changes. Any significant changes will be communicated on this page.

For broader EU guidance, you may also refer to the European Data Protection Board (EDPB).