GDPR Compliance
Your data rights and our commitment to protecting your information under the General Data Protection Regulation.
Data controller
Crisposoft SRL is the data controller for personal data processed through the E-BON platform. We are committed to protecting your data in compliance with GDPR and Romanian data protection legislation.
Your rights
Under GDPR, you have the following rights regarding your personal data:
Right of access
You can request a copy of all personal data we hold about you. We will respond within 30 days.
Right to rectification
You can request correction of inaccurate or incomplete personal data at any time.
Right to erasure
You can request deletion of your personal data, subject to legal retention obligations for fiscal records.
Right to data portability
You can request your data in a structured, commonly used, machine-readable format (JSON/CSV).
Right to object
You can object to the processing of your personal data for specific purposes, including direct marketing.
Right to restriction
You can request that we limit the processing of your personal data under certain circumstances.
Data processing purposes
We process personal data for the following purposes:
Service delivery
To provide the E-BON platform, including device management, receipt processing and fiscal reporting.
Legal obligations
To comply with Romanian fiscal legislation, including mandatory data retention and ANAF reporting requirements.
Security
To protect the platform, detect fraud and ensure the integrity of fiscal operations.
Service improvement
To analyse anonymised usage patterns and improve the platform's functionality and performance.
Exercise your rights
To exercise any of your data protection rights or to make a complaint, contact our Data Protection Officer:
We will respond to all data protection requests within 30 days.