PERSONAL DATA NOTICE

Privacy policy

The data controller is REXENERG POWER SRL, tax ID 34784425, with registered office at Calea 13 Septembrie no. 102, Bucharest, Romania.

Data we process

The contact form collects your name, email, telephone number, location, requested service and any voluntarily supplied message. The careers form collects your name, email, selected role, CV and, only if supplied, your telephone number and message. The server may also create technical security logs such as IP address, date and time.

Purposes and lawful bases

We process contact details to answer your request and prepare a possible quotation, and recruitment data to assess your application and take steps before a possible employment contract, under Article 6(1)(b) GDPR. We may process data to meet legal obligations under Article 6(1)(c), and technical logs for service security based on our legitimate interests under Article 6(1)(f).

Recruitment and retention

Applications are accepted only for published roles. CVs are not retained for future recruitment and are not used for marketing. Application data and CVs are kept for no longer than six months after the relevant recruitment process ends and are then deleted from active systems, unless a legal obligation or the establishment, exercise or defence of a legal claim requires limited retention.

Your name, email, selected role and CV are required to assess the application. Telephone number and message are optional. Please do not include national identification numbers, identity document copies, medical data or other unnecessary sensitive information.

Recipients and providers

CVs may be accessed only by Rexenerg management and the manager responsible for the relevant recruitment. Hostinger provides website hosting, while Resend transmits form messages through authenticated SMTP. The configured recipient mailbox provider, such as Microsoft 365 or Google, receives and stores the message. If a provider involves a transfer outside the EEA, it will take place only under a mechanism permitted by GDPR; further details may be requested using the contact below.

Other retention

Commercial requests are not retained in the website database; they are transmitted to the configured mailbox and kept there only for as long as needed to handle the request and comply with applicable legal obligations. Technical logs are retained only for as long as needed to secure the service.

Cookies and analytics

Google Analytics is loaded only after explicit consent. Preferences may be changed at any time from the footer.

Your rights

Subject to GDPR conditions, you may request access, rectification, erasure, restriction or portability and object to processing based on legitimate interests. You may lodge a complaint with the Romanian data protection authority (ANSPDCP). Requests are normally answered within one month.

Automated decisions

Rexenerg does not use profiling, automated assessment or solely automated decisions to select candidates.

Contact

For privacy requests, contact office@rexenerg.eu.

Last updated: 28 August 2026.