Terms & Conditions and Privacy Policy (GDPR)

We collect only the data the user provides voluntarily in the triage form: first and last name, email address, phone number and self-declared financial data (estimated instalment value, approximate income, type of employment/B2B contract). We do NOT collect national identification numbers, identity document series or bank account numbers during online screening.

The data is used strictly to draw up the preliminary financial profile, to contact the user and to schedule the video consultation through secure platforms (Google Meet / Calendly).

The Operator guarantees that all financial data and all answers given by employees are STRICTLY CONFIDENTIAL. Employing companies (HR departments, management) do NOT have and will never have access to individual answers, to diagnostic records or to the discussions held during consultation sessions.

The user has the right of access to their data, the right of rectification, the right of erasure (“the right to be forgotten”) and the right to withdraw consent at any time, by a simple email to the Operator.

The data is stored only for as long as is needed to complete the programme (a maximum of 12 months), after which it is anonymised or permanently deleted from the integrated third-party systems.

To provide a secure and compliant digital experience, the Operator stores no databases on its own physical servers. Collection and booking are carried out through the following third-party SaaS (Software as a Service) platforms, which act as processors (Data Processors):

• Typeform SL (Spain / EU) — for collecting and temporarily storing the answers to the triage form;
• Calendly LLC (USA) — for managing bookings in the calendar;
• Google Workspace — for holding video sessions and for the email ecosystem.

The relationship between NOEL CAPITAL S.R.L. and these platforms is strictly governed by Data Processing Addendums (DPAs) compliant with Art. 28 GDPR. Any transfer of data outside the European Economic Area (including to the servers of sub-processors such as AWS) is protected by Standard Contractual Clauses (SCCs) issued by the European Commission, or by recognised adequacy mechanisms (Data Privacy Framework).

Note on communication: for operational efficiency, booking notifications and correspondence may be technically routed using email addresses on the @fin.imobiliare.ro domain. This infrastructure is used solely as a transit/communication medium, strictly subject to the professional secrecy protocol.

The Operator has taken all reasonable legal and technical steps to select processors (Typeform, Calendly, Google) that maintain international cyber-security certifications (AES-256 encryption, TLS 1.2+, ISO 27001, SOC 2 Type II).

Because the data entered is processed and stored directly in these providers’ encrypted cloud infrastructure, NOEL CAPITAL S.R.L. holds no technical control over their servers. Consequently, responsibility for preventing cyber-security breaches at server or network level rests with those providers, in accordance with international standards and their own Terms of Service.

In the unlikely event of a security incident affecting the third-party platforms, the liability of NOEL CAPITAL S.R.L. is limited strictly to the notification and coordination obligations imposed by the GDPR, the Operator exercising its right to seek remedies directly from the affected providers under the DPAs.