Privacy policy

Revised: 06 February 2026

Your privacy is important to us. This Privacy Policy explains how our company manages your personal data in the following situations:

a) when you register on or visit our websites: iligra.ro, euconsultants-iligra.com, or iligra.com (the "Site" or "Platform");

b) when you apply for a position within our company;

c) when you provide us with goods or services, or act as a representative/agent for a company that does so;

d) when we process your data based on instructions or actions from third parties.

1. PURPOSE OF THIS POLICY

This Privacy Policy ("Privacy Policy", the "Policy") explains our approach to any personal data we collect from you or obtain about you from a third party, and the purposes for which we process your personal data. It also sets out your rights regarding the processing of your personal data under Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ("the Regulation" or "GDPR").

This Privacy Policy is intended to help you make informed decisions when using our Site and Services, participating in our activities, or when applying to work at or with our company. Please take a moment to read and understand it.

2. WHO WE ARE AND WHAT WE DO

We are SC ILIGRA SRL (“ILIGRA”), a Romanian legal entity, with its registered office in Balotești, Ilfov county, Romania, registered with the Ilfov Trade Register Office under no. J2016005119234, tax identification code 36869722, email contact@iligra.com, telephone +40758968501, legally represented by SC ILIGRA SRL through Ms. Dinu Alexandra-Ilinca, in her capacity as administrator.

ILIGRA primarily provides consultancy services for accessing non-reimbursable funds and management consultancy services. To this end, ILIGRA processes and provides clients with information regarding funding opportunities, related information, and specialised services.

3. HOW TO CONTACT US

If you have any questions regarding this privacy policy or wish to exercise your rights concerning the protection of your personal data, you may send an email to our Data Protection Officer (DPO) at the following electronic address: contact@iligra.com.

4. CE DATE PERSONALE COLECTĂM

We collect personal data from you when you use our website, contact us regarding our activities, hire our services, request information, or through your relationship with our staff or clients. We also collect data if you are associated with legal entities or other professionals in public data sources.

Both our Site and Services are intended for companies, organisations, and users over the age of 18. Consequently, we do not intend to collect or process data from individuals below this age.

Our primary purpose in collecting personal data from you is to assist us in:

verifying your identity and/or the identity of the company/organisation/legal entity you represent;
providing our services and products;
executing our contracts with you;
resolving requests made on the site or related to our business;
investigating or resolving claims or disputes;
protecting our rights, property, or safety, including those of our members, participants, or site users;
recruitment purposes;
business administration and compliance with applicable laws, court orders, or authority requirements;
improving and developing our business lines and new products;
marketing communications and

other cases where required or permitted by law.

To achieve these objectives, we or third parties providing services to us process the following personal data:

a) Website Visitors

We process information obtained through cookie-type files, such as: website display preferences, consent regarding data processing through cookies, or information that cannot be used to identify you with a unique profile. All information about the cookies used on our website can be found in the Cookie Policy.

b) If you enter into a relationship with us using the order form
First name and surname;
Contact details (email address and phone number);
Details of the company/organisation represented, as applicable;
Details necessary for invoicing;
Content of the messages in the completed form;

c) If you act in the capacity of a representative, employee, or any type of agent of a Company/Organisation/Legal entity that is our Client

First name and surname;

Contact details (email address and phone number);

Identification details of the represented legal entity;

Position and/or the relationship you have with the legal entity;

Any identification details from a power of attorney granted by the legal entity;

Physical signature, electronic signature, as applicable, IP;

Details necessary for resolving complaints, including a complaint identifier;

Audio and/or video recordings, screenshots in the case of video conferences, recordings of video conferences, photographs taken during or in connection with our events you participate in, or associated with your profiles on the platforms through which you interact with us (Google mail, for example);

Content of reviews, testimonials, feedback forms.

Depending on requirements, other types of data transmitted by our contractual partner may also be processed.

d) If you act in the capacity of a representative, employee, or any type of agent of a company that provides us with goods or services

First name and surname;
Contact details (email address and phone number);
Identification details of the represented legal entity;
Position and/or the relationship you have with the legal entity;
Any identification details from a power of attorney granted by the legal entity;
Details necessary for resolving complaints, including a complaint identifier;
Audio and/or video recordings, screenshots in the case of video conferences, recordings of video conferences, photographs taken during or in connection with our online or offline events, or associated with your profiles on the platforms through which you interact with us (Google mail, for example).
Depending on requirements, other types of data transmitted by our contractual partner may also be processed.

e) If we process your data in the context of organising events, including workshops, courses, or other similar events

First name and surname;
Contact details (email address and phone number);
Identification details of the Company/Organisation/Legal entity;
Audio and/or video recordings, screenshots in the case of video conferences, recordings of video conferences, photographs taken during or in connection with our events, online or offline, in which you participate, or associated with your profiles on the platforms through which you interact with us (Google mail, for example);
Date and type of event organised by our company in which you participate;
Access/entry code, if applicable;
Content of requests or messages related to the event;
Content of reviews, testimonials, feedback forms;
Special categories of personal data that you provide to us for the purpose of participating in meetings and events, such as dietary preferences, which may reveal information about your health or religious beliefs, or other data that may reveal your state of health, in the context of restrictions imposed by law regarding the holding of events, if applicable;
Statistical information, such as the number of visits.

Depending on requirements, other types of data necessary for organising the event may also be processed.

f) If we process your data based on the instructions or as a result of the actions of third parties

If you are a person whose personal data is processed by us as a result of providing Services to our clients or as a result of the actions of third parties, we may process a variety of different personal data depending on the services provided:

1. If your data is provided to us through social media networks

We may also process your data as a result of the actions of third parties within the use of social media networks, for example, when you are tagged by a friend in a context related to our company. The data we may process on such occasions are:

First name and surname;
Social media and online platform profile details (username, photograph, biography);
Social media message content, posts, reviews, ratings, location data;
Photographs or audio/video recordings.

If you are in a position to provide us with the personal data of other individuals, please inform them of this fact before disclosure, as well as the manner in which the data is to be processed, according to our privacy policy.

2. If we receive your data through a recommendation from our staff, clients, or collaborators

First name and surname;
Contact details (email address and phone number);
Relationship;
Identification details of the represented Company/Organisation/Legal entity;
Content of the recommendation.

3. If we receive your data in the process of providing services to our clients, in the event that you represent a partner or potential partner of theirs, data received from our staff, clients, or collaborators

First name and surname;
Contact details (email address and phone number);
Relationship;
Identification details of the represented company;
Other information necessary for the performance of the service, information requested by a potential funder such as, but not limited to: the presentation of the company/organisation you represent, identification details, curriculum vitae, etc.

g) If you are a potential candidate:

ILIGRA collects information from and about candidates in connection with available employment or collaboration opportunities. This information may include CVs, identification documents, photographs, academic records, courses or certifications obtained, work history, employment, and references.

ILIGRA uses your personal data to match your skills, experience, and education with the specific roles offered. This information is transmitted to the hiring managers and individuals involved in the recruitment process to decide on inviting you for an interview. ILIGRA may collect additional data from you if you are invited to the interview stage (or equivalent) and thereafter.

In connection with our recruitment activities, we may also collect special categories of personal data from candidates regarding which we have an obligation under employment law to do so, if the information is relevant to their future working environment at ILIGRA or the future provision of employment-related benefits, or with the person's explicit consent. For example, we may need to collect information about a candidate's disabilities in order to provide an appropriate working environment for that candidate if they are recruited.

ILIGRA may collect personal data about candidates from the following sources:

Directly from you – for example, information you provide when you apply for a position directly, through the company website, or by using our contact details;
From recruitment agencies – for example, when a recruitment agency identifies you as a potential candidate;
Through publicly available online sources – for example, if you have a professional profile published online that is relevant to the type of role (for example, on your current employer's website, on a recruitment platform, or on a social network such as LinkedIn);
Through a recommendation – for example, through a reference from a former employee / employer or from a person who recommended you;
Through the public employment service.

h) For representatives of clients or potential corporate clients, we also collect data that allows us to promote our products and services that may be of interest. For this purpose, we may collect:

First name and surname;
Contact details (email address and phone number);
Identification details of the represented legal entity;
Data regarding marketing preferences;
Data provided for the purpose of participating in loyalty programmes or promotional offers;
Additional information may be collected, such as the events you attend.

i) Data processed by third parties:

Data processed through social media plugins

Please be advised that, by accessing our website, third parties may collect data about you as a result of the integration of social media plugins, such as Like and Share buttons, even if you have not clicked on them or are not a member of the respective social networks. Our company is not involved in any way in the data processing operations carried out by the social networks, other than the collection and transmission, which occur automatically, without us having access to or control over the data collected by the social networks. For more information, please consult the privacy policies of the social networks whose plugins appear on our website (Facebook, LinkedIn, etc.).

Data processed for payments made through the website

We may use third-party payment services to collect payments made through the website. If you wish to make a payment through the website, you may be redirected to a web page hosted by a payment service provider (or their data processor) and not by ILIGRA. Any personal data you provide through a payment service provider's page will be collected by them and not by ILIGRA, and will be subject to that provider's privacy policy. Our company has no control over, and is not responsible for, the use of information collected by a payment service provider.

External links

Our website may contain links to third-party websites. We provide these links only as a convenience, and our company does not control and is not responsible for the privacy practices or the content of these websites. The responsibility for how your personal data is processed by these third parties rests entirely with them. We kindly ask that, before accessing these websites, you study their privacy policy and terms of use to ensure that your data is processed according to your expectations.

5. HOW WE USE PERSONAL DATA

I Fulfilment of our services and handling of requests

ILIGRA provides products and services containing commercial and financial information about legal entities and other professionals, sourced from public and private sources. Their content varies depending on the type and purpose of the service we provide and may include personal data.

We also collect and retain the personal data you provide to us while using the Website and/or our Services and products, to enable us to finalise and manage contracts and your registration on the site, to carry out the services you request from us, and to resolve the requests you submit to us.

Our website uses various user interfaces to allow you to request information about our Services, including electronic contact and order forms, a telephone information service, or via videoconferencing. Contact details may be requested in each case, along with other personal data details relevant to your request. This information is used to enable us to respond to your requests. Regarding communications concerning your requests, we may send these to you via email or telephone, including by SMS.

What is our legal basis?

If we process your data in order to make it available to clients with whom we have entered into contracts, we do so for the purpose of fulfilling our company's legitimate interest in providing our services within the contractual terms, as well as in the legitimate interest of participants in the civil circuit to have access to personal data associated with participants in economic activities, as a prerequisite for legal certainty/the security of the civil circuit.

If you contact us as a representative of a company or organisation that is a potential client, client, or supplier, we process your data by virtue of our legal obligation to validly sign and execute the contract with the legal entity you represent. Failure to provide this data automatically results in the impossibility of concluding and/or executing the contract, or respectively, the impossibility of resolving your request.

If we process your data because we have received it from our staff, collaborators, or clients, we do so for the purpose of fulfilling our company's legitimate interest in conducting our business.

It is in our interest to collect browsing data as a result of your visit to our website for statistical purposes and to improve the user experience on the site.

It is in our legitimate interest to access your professional profiles relevant to the type of role during the recruitment process.

II Business administration and legal compliance

We may use your personal data for the following business administration and legal compliance activities:

customer account management;
improving the quality of services and contract maintenance activities;
sales analysis and monitoring;
running promotional campaigns and loyalty programmes;
in connection with potential participation in funding calls managed by various funders;
protecting the rights, safety, or property of the company or its constituent persons, employees, suppliers, or other such parties;
preventing and/or investigating potential fraud;
exercising legal rights, including, but not limited to, organising debt recovery and/or the recovery of company property, and conducting judicial proceedings or extrajudicial formalities in connection with the execution of the contract; resolving any legal and/or judicial situations related to the execution of the contract; resolving disputes or complaints;
compliance with legal obligations and requests from authorities, including the transmission/disclosure of personal data to public institutions or authorities, insofar as it is mandatory by law. obligatoriu prin lege

What is our legal basis?

Where we use your personal data to comply with legal obligations, we do so precisely because it is our legal obligation to use your personal data for this purpose. In other cases, we process personal data because it is in our legitimate interest or that of a third party to do so.

IV Marketing

We may carry out marketing and remarketing activities by using your personal data. Our communications are intended to inform you about our activity or that of our partners, events, or other topics that might be of interest to you.

In this regard, we may send you various types of messages, such as email/SMS/telephone/mobile push/web push/etc., containing general and thematic information, as well as other commercial communications such as market research and opinion polls, and we may display personalised recommendations on the website.

You may change your mind and withdraw your consent for marketing at any time by:

Accessing the unsubscribe link displayed within the messages you receive from us.
Sending an email to contact@iligra.com.

You may also withdraw your consent for remarketing by accessing the links below:

for Google: https://support.google.com/ads/answer/2662922?hl=en
for Facebook: https://www.facebook.com/ads/website_custom_audiences/
by managing your preferences through the cookie banner displayed on the website.

In certain situations, we may base our marketing activities on our legitimate interest in promoting and developing our business. In any situation where we use information about you for our legitimate interest, we take all necessary measures to ensure that your fundamental rights and freedoms are not affected. Nevertheless, you may request at any time, through the means described above, that we stop processing your personal data for marketing purposes.

We may use your personal data to send you important information regarding the Website, our contract, this Privacy Policy, or any other policies, agreements, or transactions relevant to your use of the Website or your participation in our activities or events. This information may be important for your use of the website and/or services and does not constitute direct marketing, but rather a means of managing our contractual relationship with you or the company or organisation you represent and/or complying with a legal obligation.

As part of our promotional activities, we may redistribute your posts that are related to our company or our events.

What is our legal basis?

It is in our legitimate interest to promote our business by using personal data for marketing purposes. You have the right to object at any time to the processing of personal data concerning you for direct marketing purposes, and your personal data will no longer be processed for this purpose.

Whenever necessary, in accordance with applicable legislation, we will seek your consent before processing your personal data for direct marketing purposes. In this case, you will be able to withdraw your consent for marketing purposes at any time, in which case you will no longer receive any marketing communications from us.

V Analysis

We use cookies to provide you with a personalised browsing and user experience of our Website or services. By using this information, we can measure the effectiveness of our content and how visitors use our site and our activity. This allows us to find out which pages of our website are the most attractive to our visitors. The information collected through cookies cannot uniquely identify you. Please refer to our Cookie Policy for further information.

What is our legal basis?

With the exception of strictly necessary cookies, we use your personal data collected through cookies only if you have provided your consent, so as to ensure that we offer the best experience for you.

You have the right to withdraw your consent at any time, via the cookie management module which you can access through our website, without affecting the lawfulness of processing based on consent before its withdrawal.

VI Recruitment

We use your personal data to assess your suitability for any position for which you might apply within our company, whether it is an employee or collaborator position, and regardless of whether such an application was received online, on paper, or as an in-person application.

What is our legal basis?

Where we use your personal data within the recruitment process, it is because it is in our legitimate interest to review your candidacy in order to assess your suitability for any position for which you might apply within our company.

Where we use your personal data within the hiring process or when finalising a collaboration, it is because we are taking steps at your request to enter into a contract we may have with you. Failure to provide this information automatically leads to the impossibility of entering into and/or executing the contract.

In connection with our recruitment activities, we may also process special categories of personal data from candidates when:

processing is necessary for the purposes of carrying out our specific obligations in the field of employment (e.g., health data);
processing relates to personal data which are manifestly made public by you (e.g., sexual orientation, philosophical or religious beliefs).

We may process personal data relating to criminal convictions and offences when the processing is authorised by Union or Member State law providing for appropriate safeguards for the rights and freedoms of data subjects.

Please refer to the Recruitment Privacy Policy for full details.

VII Profiling and automated decision-making

We may use your personal data for profiling purposes in order to conduct our remarketing campaigns. Thus, we may collect and process certain information regarding your behaviour while visiting our website to personalise your online experience and provide you with information tailored to your profile. We always ensure that such processing is carried out with respect for your rights and freedoms and that decisions based on this do not have legal effects on you or similarly affect you to a significant extent.

If you have provided your consent for remarketing and subsequently wish to exercise your right to opt-out, you can opt out of remarketing in accordance with point IV, section 5 of this Privacy Policy.

ILIGRA does not make decisions concerning you by processing your personal data through automated means and does not use your personal data for profiling in any way other than as described above.

6. WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA

We process your personal data:

to fulfil our obligations under any contract we may have with you;
when it is in our legitimate interest or the legitimate interest of a third party to use personal data so as to ensure that we provide the services in the best possible way;
when it is our legal obligation to use your personal data to comply with applicable legal regulations;
when you have provided us with your consent.

We may process special categories of data when:

processing is necessary for the purposes of carrying out our specific obligations in the field of employment (e.g., health data);
processing is necessary for the establishment, exercise, or defence of legal claims;
processing relates to personal data which are manifestly made public by you (e.g., data regarding religious beliefs or sexual orientation);
processing is necessary for reasons of public interest in the area of public health.

7. WHO WE SHARE YOUR PERSONAL DATA WITH

ILIGRA may share personal data with various categories of third parties, as necessary:

third parties involved in the services we provide to clients, such as payment processors, banking service providers, potential partners and suppliers for event organisation, loyalty campaigns or promotional offers, marketing, PR, advertising and production agencies, and event management;
internet and telephony providers, IT systems and software, AI solutions, cloud and hosting providers, IT support, document and information storage, confidential waste disposal, document and activity management or review platforms and/or providers, document processing and translation, secretarial services, audit, and training;
our professional advisors, such as lawyers, valuers, tax consultants and accountants, or other experts;
human resources and payroll companies and platforms, security firms and building management bodies, delegates, postal service providers or couriers;
third-party service providers who assist us in operating and interpreting data obtained from online promotional campaigns or who manage the newsletter service;
potential buyers of the business or parts of our business;
public or regulatory authorities, and tax authorities.

Please note that this list is not exhaustive, and there may be other instances where we must share personal data with other parties in order to provide the services as efficiently as possible or to protect the rights, safety, and property of our company or its members, employees, suppliers, or other such persons, to respond to claims, or to prevent fraud and illegal activities.

8. USE OF COOKIES

Our website uses cookies for the purpose of analysing traffic trends and our users' preferences, or to be able to send you advertising messages through remarketing techniques (for example, you may see our advertising banners on other websites that provide advertising space after you have visited our site).

Cookies are generally text files, modules, or similar technologies that your computer, tablet, or mobile phone browser may store when you visit our website. These types of files have fixed retention periods and remain passive; they do not contain malware and do not access information on your hard drive. These types of files can only be accessed by the webserver that placed them.

The websites iligra.ro, euconsultants-iligra.com, and iligra.com may use Google AdWords and Facebook remarketing services to advertise on third-party websites to previous visitors of our site. This may mean that we advertise to previous visitors who have not completed an action on our site, such as using the contact form to make an inquiry. This could be in the form of an advertisement on the Google search results page, on a site in the Google Display Network, or somewhere on Facebook. Third-party vendors, including Google and Facebook, use cookies to serve ads based on a user’s past visits to the website iligra.ro. All data collected will be used in accordance with our own privacy policy, as well as the privacy policies of Google and Facebook.

Thus, through the cookies and action tags that we and our partners use on this website (via advertising servers, content servers, website analytics agents, etc.), we may have access to anonymous information related to you:

IP address;
the country and the server to which your computer is connected;
the operating system, browser type, and type of computer you are using;
Java or cookie configurations;
your behaviour on this website (pages visited, searches performed, products viewed and purchased, date and time of the visit or order, number of visits and orders, number of visits per browsing session and per server type, referral URLs, domain names and web pages you browse, and groups you are affiliated with);
demographic information and area code information associated with your server;
applications and plug-ins, as well as any terms used in searches on our website;
the address of the website that referred you to our website.

We collect this information in a manner that does not allow for your personal identification. However, it is possible that at some point – we and/or our partners – may associate this information with your identity if you have a user account. We may also collect and subsequently process certain information regarding your behaviour while visiting our website to personalise your online experience and provide you with offers tailored to your profile.

Please refer to the Cookie Policy on our website, iligra.ro, to find all the information about the cookies we use, their purpose, how to manage and delete cookies, and how you can exercise your preferences.

9. DATA PROCESSORS, INDEPENDENT CONTROLLERS, AND JOINT CONTROLLERS

Your data privacy is important to us, which is why the transfer of personal data to data processors, independent controllers, and joint controllers is carried out only on the basis of a commitment that guarantees these data are kept secure and that the management of this information is conducted in accordance with current legislation and applicable policies. In any case, we will only ever disclose to recipients the information strictly necessary to achieve the respective purpose.

We may appoint data processors as subcontractors as necessary to deliver the Services. We perform appropriate due diligence and implement the necessary contractual documentation in relation to any subcontractor to ensure that they process personal data appropriately and in accordance with legal and regulatory obligations.

Furthermore, we may appoint independent personal data controllers when it is in connection with the delivery of the Services (for example, but without limitation, consultants, lawyers, recruitment agencies or other third-party experts, clients), while complying with legal and regulatory obligations regarding personal data, including, but without limitation, the implementation of appropriate safeguards.

We may also share this information, in accordance with applicable legislation, with joint data controllers, such as affiliated or partner entities.

We and the independent and joint data controllers we work with establish our mutual rights and obligations within a Personal Data Processing Agreement between Independent/Joint Controllers (the Agreement) to which we are Parties. The Agreement adequately reflects our roles and relationships, as independent/joint controllers, towards you.

As a rule, the essence of this agreement is as follows:

The Parties act as Independent/Joint Data Controllers, determining independently/jointly the purposes and means of processing personal data.
The data are processed for the primary purpose of conducting business and resolving inquiries, as well as for fraud prevention, dispute or claim resolution, and the protection of the rights, safety, and property of the Controller-company or its members, employees, suppliers, or other such persons, for compliance with legal obligations and requests from authorities, or for marketing (secondary purposes).
Each Independent/Joint Controller is exclusively responsible for ensuring that the personal data under their respective control are processed lawfully.
Each Independent/Joint Controller shall respond to Data Subject requests addressed to them. If a Data Subject's request refers to data or processing operations for which the other Joint Controller is responsible, the Data Subject's request shall be forwarded to the latter for resolution, and the Data Subject shall be notified accordingly.
Each Independent/Joint Controller is exclusively responsible for ensuring that the Personal Data Processing Information (Privacy Notice) is provided to the Data Subjects whose data they originally held.

Irrespective of the terms of the Agreement, the Data Subject may exercise his or her rights under the GDPR in respect of and against each of the Controllers.

10. WHERE DO WE TRANSFER PERSONAL DATA?

In order to provide the Services or for other processing purposes listed herein, and particularly if a foreign element is involved, it is sometimes necessary to transfer your personal data to locations outside the European Economic Area. In any case, before transferring personal data to another jurisdiction, we ensure that an adequacy decision exists, or that the controller or processor in that jurisdiction provides appropriate safeguards, or that one of the following derogations applies:

you have explicitly consented to the proposed transfer, after having been informed of the potential risks such transfers may involve;
the transfer is necessary for the performance of a contract between you and us or for the implementation of pre-contractual measures taken at your request;
the transfer is necessary for the conclusion or performance of a contract concluded in your interest between us and another natural or legal person;
the transfer is necessary for important reasons of public interest;
the transfer is necessary for the establishment, exercise, or defence of legal claims;
the transfer is necessary in order to protect your vital interests or those of other persons, where the data subject is physically or legally incapable of giving consent;
the transfer is made from a register which is intended to provide information to the public and which is open to consultation by the public.

11. DATA RETENTION PERIOD

We retain the personal data we collect from and about you for as long as necessary to fulfil the purposes for which it was collected and for the purpose of satisfying any legal, accounting, or reporting requirements.

If you have been involved in pre-contractual activities, we retain your data for 2 years from the time of the event, your last account interaction, or our last contact with you.

Data required for issuing invoices and data contained in legal and related documents (e.g., correspondence, minutes) that form the basis of invoices will be retained for 10 years.

Data used for marketing purposes will be processed until you unsubscribe from the newsletter service or exercise your right to object and, in any case, for no longer than 3 years since our last contact with you.

We retain recorded telephone conversations or video conferences for 5 years to allow for any evidentiary needs, taking into account the general statute of limitations and any potential suspensions or interruptions thereof.

Should it be reasonably determined that the data are no longer necessary, we may destroy them immediately without notice or liability (for example, in the case of candidates who were not selected for a position within our company, their CVs will not be retained).

In cases where we do not provide an exact period for the processing of your personal data, we rely on the following principles:

we process information only for as long as we need it for the activities mentioned in this policy / until the termination of the legitimate interest;
we always comply with the time limits imposed by legal provisions;
we assess security risks in the context of the use and storage of your data.

12. CONFIDENTIALITY AND SECURITY OF YOUR PERSONAL DATA

We apply appropriate technical, physical, and organisational measures that are reasonably designed to protect personal data against destruction, loss, alteration, unauthorised disclosure or access, and against other unlawful forms of processing. Access to personal data is limited to authorised recipients on a need-to-know basis. We maintain a comprehensive information security programme, proportionate to the risks associated with the processing. The programme is continuously adapted to mitigate operational risks and to protect personal data, taking into account industry-accepted practices. We will also use enhanced security measures when processing any special categories of personal data.

All our partners, employees, consultants, workers, controllers, and processors (i.e., those who process your personal data on our behalf for the purposes listed above) who have access to and are associated with the processing of personal data are obliged to respect the confidentiality of such personal data and to guarantee the same level of protection as that provided by our company.

13. RIGHT OF ACCESS AND OTHER RIGHTS

It is important to note that, while ILIGRA treats all data it processes with the utmost care, data relating to natural persons associated with legal entities in public sources are not subject to the provisions of the Regulation, in view of the provisions of Recital 14 of the Regulation. According to Recital 14, the protection afforded by the Regulation concerns natural persons, whatever their nationality or residence, in relation to the processing of their personal data. This Regulation does not cover the processing of personal data which concerns legal persons and in particular undertakings established as legal persons, including the name and the form of the legal person and the contact details of the legal person. Personal data concerning legal persons consists of nothing other than the data of shareholders, directors, and other persons holding a capacity within the legal person, as the legal person does not have personal data per se.

Furthermore, the Regulation applies to the processing of personal data (Art. 2 of the Regulation), and personal data means any information relating to an identified or identifiable natural person (data subject). Consequently, the Regulation does not apply to data concerning legal persons.

If you are a natural person whose data falls within the scope of the Regulation, you have the following rights in relation to the personal data we process about you:

Right of access

If you ask us, we will confirm whether we are processing your personal data and, if permitted by law, provide you with a copy of that personal data (along with certain other details). If you require additional copies, we may need to charge a reasonable fee based on administrative costs.

Right to rectification

If the personal data we hold about you is inaccurate or incomplete, you are entitled to request its rectification. If you are entitled to rectification and if we have shared your personal data with others, we will inform them of the rectification where possible. If you ask us, where possible and lawful to do so, we will also tell you who we have shared your personal data with so that you can contact them directly.

Right to erasure

You can ask us to delete certain personal data of yours in specific situations provided by law. If you are entitled to erasure and if we have shared your personal data with others, we will inform them of the erasure where possible. If you ask us, where possible and lawful to do so, we will tell you who we have shared your personal data with so that you can contact them directly.

Your right to restrict processing

You can ask us to block or suppress the processing of your personal data in certain circumstances, such as where you contest the accuracy of that personal data or have objected to it. If you are entitled to restriction and if we have shared your personal data with others, we will inform them of the restriction where possible. If you ask us, where possible and lawful to do so, we will also tell you who we have shared your personal data with so that you can contact them directly.

Right to data portability

You have the right, in certain circumstances, to obtain the personal data you have provided to us in a structured, commonly used, and machine-readable format and to reuse it elsewhere or to ask us to transfer it to a third party of your choice. Please note that this right only applies to automated information for which you initially provided consent for our use or where we used the information to perform a contract with you.

Right to object

You can ask us to stop processing your personal data, and we will do so if:

We are relying on our legitimate interests or those of a third party to process personal data, unless we can demonstrate compelling legitimate grounds which override your interests, rights, and freedoms;
We are processing your personal data for direct marketing purposes.

You can ask us to stop sending marketing messages at any time by using the following methods:

By following the opt-out links on any marketing message sent to you;
By sending an email to contact@iligra.com.

We will never use your personal data to subject you to an automated individual decision which produces legal effects concerning you or similarly significantly affects you. However, you may object at any time to profiling or automated decision-making within our remarketing activities, in accordance with point IV, section 5 – Marketing above.

In the context of events organised at or in connection with our company, photo/video images may be captured to help us promote our brand and services. It is not our intention to capture images that single out a specific person, as our purpose is solely to share details about our company with the public. However, if you are identifiable in the photo/video materials disseminated by us, you have the right to object to the processing for reasons relating to your particular situation. In any case, respecting your right to privacy, we will announce in advance that images are to be captured before any photo and/or video session.

Your right to withdraw consent

If we rely on your consent as the legal basis for processing your personal data, you have the right to withdraw that consent at any time.

Your right to lodge a complaint with the supervisory authority

If you are concerned about any aspect of our privacy practices, including the way we have handled your personal data, you may report it to the competent supervisory authority (www.dataprotection.ro).

If you wish to exercise your rights set out in this privacy policy, please contact us by sending an email to contact@iligra.com.

Please note that we may request specific information from you to help us confirm your identity. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask for further information in relation to your request to speed up our response.

14. CHANGES TO THIS PRIVACY POLICY

To ensure that you are always aware of how we use your personal data, we will update this Privacy Policy from time to time to reflect any changes in the use of your personal data. We may also make changes to comply with updates to applicable legislation or regulatory requirements. Where possible, we will notify you by email of any significant changes. However, we recommend that you periodically review this privacy policy on our website to stay informed about how we use your personal data.

COOKIE POLICY

1. Purpose of this policy

This policy regarding the use of cookies and similar technologies refers to specific files, known as cookies, used on the iligra.ro, euconsultants-iligra.com, and iligra.com websites operated by ILIGRA SRL.

The information presented in this document aims to inform the users of this website about the placement, use, and management of cookies by ILIGRA during the user's navigation on this website.

br>2. Who we are and what we do

We are SC ILIGRA SRL (ILIGRA), a Romanian legal entity, with its registered office in Balotești, Ilfov County, Romania, registered with the Ilfov Trade Register Office under no. J2016005119234, tax identification code 36869722, email contact@iligra.com, telephone +40758968501, legally represented by SC ILIGRA SRL through Ms Dinu Alexandra-Ilinca, in her capacity as Director.

3. How to contact us

If you have any questions regarding this privacy policy or wish to exercise your rights concerning the protection of your personal data, you may send an email to our DPO at the electronic address contact@iligra.com.

4. What cookies are

Cookies are text files, modules, or similar technologies that your browser can store when you visit our website. Through these, we automatically collect information to provide you with an optimal, personalised browsing experience.

A cookie is a small file consisting of letters and numbers, stored on your computer, laptop, tablet, smartphone, or any other device used to access the internet. These cookies are installed through a request sent by a web server to your browser (e.g., Chrome, Firefox, Internet Explorer, Edge, etc.). Once installed, cookies have a fixed duration and remain passive. Specifically, cookies do not contain malware and do not access information on your hard drive. A cookie consists of two parts: its name and its content or value. Technically, only the web server that sent the cookie can access it again when you return to the website associated with that specific web server.

Cookies may contain information about your IP address, the type of browser you use, the device you use, as well as display, navigation, or content preferences. It is important to know that cookies cannot identify you directly; however, your IP address can be associated with a country, a city, or an internet service provider. Additionally, our website may store cookies in your browser from traffic analysis or advertising services, such as Google or Facebook.

5. For what purposes we use cookies on our website

Cookies may be used to provide you with a personalised and optimised browsing experience by:

Improving the use of this website, including by identifying potential errors or disruptions that may occur during its use by visitors or registered users;
Providing anonymous statistics on how this website is used;
Providing anonymous traffic statistics.

Based on the information received through cookies regarding how this website is used, our company may take a series of measures to make this site more efficient and easily accessible for its users, by remembering certain settings or preferences established by users, such as:

Maintaining browsing or cookie-related preferences;
Optimising certain areas of the website pages.

6. How long do cookies last

The duration of cookies may vary depending on the purpose for which they are used. There are two main categories, as follows:
Session cookies – these are deleted the moment you close your browser;
Fixed (persistent) cookies – these remain stored on your device until they reach their expiry date (which may vary from a few minutes to several years) or until you decide to delete them via your browser settings. To do this, please consult your browser's dedicated help section.

7. Third-party cookies

Certain functionalities or sections on this website's pages are provided by third parties; therefore, some cookies may originate from third parties such as Google Analytics, Google Tag Manager, and Facebook Pixel. Additionally, by accessing our website, third parties may collect data about you as a result of the integration of social media plugins, such as Like and Share buttons, even if you have not clicked on them or are not a member of the respective social networks.

We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioural metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first-party and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimisation, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

Our company is in no way involved in the data processing operations carried out by social media networks, other than the collection and transmission which occur automatically, without us having access to or control over the data collected by these networks. For information regarding cookies and plugins provided by social media networks or analytics services, please consult their respective privacy policies (Facebook, LinkedIn, Google, etc.).

8. Which cookies we use

Our website uses traffic analysis cookies. These tell us whether a specific user has viewed this website or its pages in the past and are used solely for statistical purposes.

Cookie Name	Duration	Technology Description
_shopify_s	12 months	Shopify functional cookie used to maintain the user session and ensure the correct operation of the platform.
_shopify_y	12 months	Shopify analytical cookie used to collect anonymous statistical data regarding website usage.
_shopify_essential	12 months	Strictly necessary cookie for security, authentication, and the operation of Shopify services.
shopify_essential	12 months	Technical variant of the Shopify cookie required for platform operation and fraud prevention.
_merchant_essential	12 months	Shopify cookie required for secure transaction processing and merchant identification.
shop_app_essential	12 months	Necessary cookie for Shop app integration and the operation of associated Shopify services.
cart	14 days	Functional cookie that remembers the products added to the shopping cart.
cart_currency	14 days	Functional cookie that remembers the currency selected by the user.
localization	12 months	Functional cookie that saves the user's language or region preference.
tinycookie	12 months	Cookie used to remember the display of the cookie consent banner.
tinycookie_acc	12 months	Cookie that saves the consent options expressed by the user (necessary, functional, analytical, marketing).
_ga	24 months	Google Analytics cookie used to distinguish users and generate traffic statistics.
_ga_*	24 months	Google Analytics cookie used to collect session and site interaction data.
_clck	12 months	Microsoft Clarity cookie used to analyse user behaviour on the site.
CLID	12 months	Microsoft Clarity cookie used to identify the user's first visit.
MUID	12 months	Microsoft cookie used for recognising users across multiple Microsoft sites.
_fbp	90 days	Meta (Facebook) cookie used for delivering and measuring advertising effectiveness.
_gcl_au	90 days	Google Ads cookie used for testing the effectiveness of advertising campaigns.
_uetvid	13 months	Microsoft Advertising cookie used for analytics and remarketing.
intercom-device-id-*	9 months	Cookie used by Intercom for device identification for communication purposes.
intercom-session- *	Session / 7 days	Intercom session cookie used for support and online chat.
laravel_session	Session	Technical cookie used for maintaining the session in Paperform forms.

9. How you can stop cookies

We respect your right to privacy; therefore, you can choose to enable or disable certain types of cookies. You can express your preferences by accessing the cookie management menu. Before doing so, please be advised that disabling or refusing to receive certain cookies may lead to difficulties in navigating this website and may also limit the possibilities of using the site.
Additionally, you can configure your browser to reject or accept cookies. These settings can usually be found in the Options section or the Preferences menu of your browser.
For further questions regarding how we use cookies through this website, please send us an email at contact@iligra.com.