Privacy Policy (GDPR)
Last updated: 1 July 2026
We process personal data in accordance with Regulation (EU) 2016/679 (GDPR).
1. Data controller
ExpertCo acts as a processor for the client data managed by accounting firms, under a Data Processing Agreement (DPA).
2. Categories of data
Company identification data (CUI, name), accounting and fiscal data, and user contact details.
3. Basis and purpose
Processing is based on contract performance and legal fiscal obligations.
Data is used solely to provide the service.
4. Retention
Receipts and fiscal documents are kept for 10 years, per audit requirements.
Other data is deleted per the retention policy or on erasure request.
5. Your rights
You have the right of access, rectification, erasure, restriction and portability.
DSAR export and erasure requests are handled through the platform.
This document is an indicative template and does not constitute legal advice.