Privacy Notice

Version 1.1, effective 5 November 2026. We review this notice periodically and update it as our products and data sources change.

Summary

Sol Associates SRL processes your email address (and your name, if you subscribe to SEAP Radar) to deliver Sol Signals and SEAP Radar. If you buy a SEAP Radar subscription we also process your company, billing and VAT details and payment metadata, to perform the contract, issue invoices and meet tax and accounting law. Legal bases: your consent for the free newsletter, performance of a contract for a paid subscription, legal obligation for accounting and tax records, and our legitimate interest in analysing public register data and keeping the service secure. We do not sell your data. You may access, correct, delete, restrict, port or object to our use of your data by writing to the contact address below.

Who is responsible (controller)

The controller is Sol Associates SRL, a Romanian company registered with the Trade Registry under no. J29/2713/2023, fiscal code RO24172577, registered office Strada Drumul Mare, nr. 608, camera 2, comuna Băneşti, judeţul Prahova, România, Bucharest, Romania. Contact for all privacy matters: contact@sol-associates.ro. We have not appointed a Data Protection Officer because we are not required to under Article 37 GDPR; the same address handles privacy requests.

What we collect and why

• Newsletter sign-up (free Sol Signals): email address, the optional role and company you enter, the consent you gave, sign-up time, and a hashed network identifier used only for abuse prevention. Purpose: send the digest. Basis: your consent (Article 6(1)(a) GDPR). You can withdraw consent at any time via the link in every email.
• Paying subscribers (SEAP Radar): name and email of the account holder and of each named seat user, company name, billing address, VAT identification number, plan and billing history, and payment metadata from Stripe (such as payment status, the last four digits and brand of the card, and Stripe customer and subscription identifiers). We do not receive or store your full card number. Purpose: provide the service, manage seats, take payment, issue fiscal invoices, send service notices, answer support requests. Basis: performance of the contract (Article 6(1)(b)); for invoicing and records, legal obligation (Article 6(1)(c)).
• Usage and access logs: login and access events, alert and export delivery, IP address and device information in server logs, and security events. Purpose: operate and secure the service, prevent sharing of seats and abuse, and troubleshoot. Basis: our legitimate interest in security and in enforcing the licence (Article 6(1)(f)).
• Correspondence: what you send us and our replies. Basis: contract or legitimate interest in handling your request.
• Marketing about SEAP Radar to existing subscribers about similar services: legitimate interest, with an opt-out in each message. Otherwise marketing email is sent only with consent, except messages to a business contact point that a company publishes itself, which are described under “Business contacts and prospecting” below.

Why we process public-register data

Sol Signals and SEAP Radar are built in part from publicly available Romanian tender and register data (SEAP/SICAP, ANRE, Transelectrica), which may incidentally contain the names of company representatives or individual entrepreneurs (PFA). We process this data as a legitimate business interest (Article 6(1)(f)): it is our core intelligence-product line and a natural extension of our existing advisory market-monitoring work. The data is already public by design under Romanian procurement-transparency and freedom-of-information law, and a company representative acting in a public-tender capacity should reasonably expect that record to be reported on and analysed. We have documented a balancing assessment of this interest, and you can ask us for a summary of it.

Safeguards for public-register data

• Representative names, emails and phone numbers, and PFA identity fields, are excluded from every published or resold product.
• A redaction pass – an automated field-level filter plus a human spot-check – runs before any issue ships.
• Access to raw name-bearing snapshots is limited to our ingest and classification pipeline; it is never exposed in any subscriber-facing dashboard or export.
• Raw, name-bearing snapshots are kept only as long as needed for classification, then superseded by an anonymised or aggregate version, on a retention period of approximately 24 months.
• Incidental personal data from an unrelated news article is never carried into a product beyond a headline-and-link citation.

Who receives your data

We share personal data only with providers that help us run the service, under written agreements, and where the law requires:

• Stripe (Stripe Payments Europe, Limited, Ireland, and its affiliates) processes payments. For processing our checkout and subscription billing Stripe acts as our processor; for fraud prevention, anti-money-laundering and its own regulatory obligations Stripe acts as an independent controller under its own privacy policy.
• Our hosting provider, 201.ro, hosts our website and the sign-up and subscriber records stored on it.
• Our email delivery provider (our email delivery provider) sends the digest, alerts and service emails.
• Our accounting firm, Serco, receives invoice and billing data to keep our statutory books and file tax returns.
• Professional advisers (legal, audit) and public authorities, where we are required to disclose by law.
• A successor to our business in a merger or sale, subject to this notice.

International transfers

We aim to keep personal data within the European Economic Area. Stripe and some of our providers may process data outside the EEA, including in the United States. Where that happens the transfer relies on an adequacy decision (such as the EU-US Data Privacy Framework where the recipient is certified) or on Standard Contractual Clauses approved by the European Commission, together with supplementary measures where needed. You may ask us for details of the safeguards for a given provider.

How long we keep it

• Newsletter data: until you unsubscribe or withdraw consent, then deleted, except a minimal suppression record kept to honour your opt-out.
• Subscriber account data: for the life of the subscription, plus 12 months for support and dispute handling.
• Invoices, payment records and other accounting documents: for the period required by Romanian accounting and tax law, which is up to 10 years.
• Server and access logs: up to 12 months.
• Raw source snapshots containing incidental personal data from public registers: approximately 24 months, then anonymised or aggregated.
• Records of business prospecting messages: up to 6 months if there is no reply, longer only where a business relationship follows. After an objection or a STOP reply we keep a minimal do-not-contact record.
• Enquiries you send us and our replies: up to 6 months if there is no further reply from you, longer only where a business relationship follows.
• Evidența mesajelor comerciale către companii și a solicitărilor primite de la dumneavoastră: până la 6 luni dacă nu primim niciun răspuns, mai mult doar dacă se stabilește o relație de afaceri. După o opoziție sau un răspuns STOP păstrăm o evidență minimă „nu contactați”.

Business contacts and prospecting

Sol Associates SRL (CUI RO24172577, registered office Bănești, Prahova) may write to companies in the Romanian energy sector using business contact points that the company itself publishes, such as a general contact form or a general business mailbox. We use the company name, the published business contact point and a record of our messages and replies. We find these on company websites and in public registers (for example the ANRE attestation register and public procurement data). Our basis is legitimate interest (Art. 6(1)(f) GDPR) in offering consulting services to companies. You can object at any time (Art. 21 GDPR), ask for access or erasure of your data, or stop further messages by replying STOP or writing to contact@sol-associates.ro. We then keep only the minimum needed to honour your request. You may also complain to the Romanian data protection authority (ANSPDCP).

Sol Associates SRL (CUI RO24172577, sediul social în Bănești, Prahova) poate scrie companiilor din sectorul energetic din România folosind date de contact comerciale pe care compania le publică singură, de exemplu un formular general de contact sau o adresă generală de e-mail. Folosim denumirea companiei, punctul de contact publicat și evidența mesajelor și a răspunsurilor. Le găsim pe site-urile companiilor și în registre publice (de exemplu registrul de atestări ANRE și datele de achiziții publice). Temeiul este interesul legitim (art. 6 alin. 1 lit. f GDPR) de a oferi servicii de consultanță companiilor. Vă puteți opune oricând (art. 21 GDPR), puteți cere acces la datele dumneavoastră sau ștergerea lor, sau puteți opri mesajele următoare răspunzând STOP ori scriind la contact@sol-associates.ro. Vom păstra apoi doar minimul necesar pentru a vă respecta cererea. Puteți depune plângere la Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP).

Enquiries about our services

If you write to us about our services, for example by email to contact@sol-associates.ro, through the enquiry form on our Contact page, or from a button such as “Request a briefing” that opens a draft message in your own email program, the controller is Sol Associates SRL, as named under “Who is responsible (controller)” above. Nothing is sent from a draft message until you send it. We receive your email address; your name, organisation and role if you give them; what you write; any attachments; and, if you choose to include one, a campaign source code. Giving us these details is voluntary; without an email address we cannot reply.

Campaign source code. This is a short code, for example the name of a page or post, that tells us which of our pages or posts brought you to us. It is optional: you choose whether to include it, whether you type it or leave it in a draft message, and you can change or delete it before you send. We use it only to know which post or page brought the enquiry. It is not a cookie and we do not store it in your browser. Please do not send confidential information.

Why and on what basis. We use these details to reply, to decide whether we can help and to scope the work, to keep a record of the enquiry and follow up, and to see which post or page brought it. Our legal bases are steps taken at your request before a contract (Article 6(1)(b) GDPR) and our legitimate interest in answering business enquiries and in knowing which content leads to them (Article 6(1)(f) GDPR). If an engagement follows, the contract and accounting bases described in this notice apply. We share enquiry details only with the providers named under “Who receives your data” above, namely our hosting provider (201.ro) and our email provider, which act for us under written agreements, and with professional advisers and public authorities where the law requires. Transfers outside the EEA are covered under “International transfers” above. We do not sell your data.

LinkedIn. If you react, comment or message us on LinkedIn, LinkedIn is an independent controller of that data under its own privacy policy. We see what LinkedIn shows us, such as your name, headline, organisation and what you wrote, and use it only to reply and to record which posts lead to conversations.

How long and your rights. We keep an enquiry and our replies for up to 6 months if there is no further reply from you, longer only where a business relationship follows; invoices and accounting records are kept as stated under “How long we keep it” above. You have the rights listed under “Your rights” below, including the right to object, which you can exercise by writing to contact@sol-associates.ro; the complaint route stated there also applies.

Versiunea în limba română. Dacă ne scrieți despre serviciile noastre, de exemplu prin e-mail la contact@sol-associates.ro, prin formularul de solicitare de pe pagina noastră de contact sau de la un buton precum „Solicitați un briefing”, care deschide un mesaj-ciornă în programul dumneavoastră de e-mail, operatorul este Sol Associates SRL, așa cum este indicat la începutul acestei notificări. Nimic nu este trimis dintr-o ciornă până nu o trimiteți dumneavoastră. Primim adresa dumneavoastră de e-mail; numele, organizația și funcția, dacă le indicați; conținutul mesajului; eventualele atașamente și, dacă alegeți să includeți unul, un cod de sursă al campaniei. Furnizarea acestor date este voluntară; fără o adresă de e-mail nu vă putem răspunde.

Cod de sursă al campaniei. Este un cod scurt, de exemplu numele unei pagini sau al unei postări, care ne arată din ce pagină sau postare ați ajuns la noi. Este opțional: dumneavoastră alegeți dacă îl includeți, fie că îl tastați, fie că îl lăsați în mesajul-ciornă, și îl puteți modifica sau șterge înainte de trimitere. Îl folosim numai pentru a ști ce postare sau pagină a dus la solicitare. Nu este un cookie și nu îl stocăm în browserul dumneavoastră. Vă rugăm să nu trimiteți informații confidențiale.

De ce și pe ce temei. Folosim aceste date pentru a vă răspunde, pentru a stabili dacă vă putem ajuta și a delimita lucrarea, pentru a păstra evidența solicitării și a o urmări, și pentru a vedea ce pagină sau postare a dus la ea. Temeiurile sunt demersurile făcute la cererea dumneavoastră înainte de încheierea unui contract (art. 6 alin. (1) lit. (b) GDPR) și interesul nostru legitim de a răspunde solicitărilor de afaceri și de a ști ce conținut duce la ele (art. 6 alin. (1) lit. (f) GDPR). Dacă urmează o colaborare, se aplică temeiurile de contract și de contabilitate descrise în această notificare. Datele unei solicitări le transmitem numai furnizorilor indicați mai sus în lista destinatarilor, adică furnizorului nostru de găzduire (201.ro) și furnizorului nostru de e-mail, care acționează pentru noi pe baza unor acorduri scrise, precum și consilierilor profesionali și autorităților publice, când legea o cere. Transferurile în afara SEE sunt tratate mai sus, la transferurile internaționale. Nu vă vindem datele.

LinkedIn. Dacă reacționați, comentați sau ne scrieți pe LinkedIn, LinkedIn este operator independent pentru aceste date, potrivit propriei politici de confidențialitate. Vedem ce ne arată LinkedIn, de exemplu numele, titlul profesional, organizația și ce ați scris, și folosim aceste informații numai pentru a răspunde și pentru a înregistra ce postări duc la discuții.

Cât timp păstrăm datele și drepturile dumneavoastră. Păstrăm o solicitare și răspunsurile noastre până la 6 luni dacă nu primim niciun alt răspuns din partea dumneavoastră, mai mult doar dacă se stabilește o relație de afaceri; facturile și evidențele contabile se păstrează așa cum se arată mai sus, la perioadele de păstrare. Aveți drepturile enumerate mai jos, inclusiv dreptul de opoziție, pe care le puteți exercita scriind la contact@sol-associates.ro; se aplică și calea de plângere indicată acolo.

Your rights

You may request access, rectification, erasure, restriction, objection, or data portability at any time, and you may withdraw consent where we rely on it. You have an absolute right to object to direct marketing. We aim to respond within 30 days, which the law allows us to extend where a request is complex. We may need to verify your identity. Contact us at contact@sol-associates.ro. Erasure does not apply to records we must keep by law.

If you are not satisfied you have the right to lodge a complaint with the Romanian data protection authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest, www.dataprotection.ro, or with the authority in your own Member State.

We do not use your data for decisions based solely on automated processing that produce legal effects on you. Classification of tenders is applied to tender content, not to subscribers.

Cookies and analytics

Our website uses only the cookies necessary for its own operation. Page-visit counts are collected server-side as anonymous daily totals per page, without cookies and without storing individual visitors’ IP addresses; sign-up forms store only a hashed identifier for abuse prevention. We do not run advertising or cross-site tracking cookies. Third-party analytics (Google Analytics 4) is not enabled on the site today; if we ever switch it on we will update this notice and ask for your consent first where the law requires. Stripe’s hosted checkout pages set their own cookies under Stripe’s policy.

Security

We protect personal data with access controls, encrypted connections, limited access to raw data, and provider security measures. No system is perfectly secure; if a personal-data breach is likely to put you at risk we will notify you and the authority as the law requires.

Children

Our services are for businesses and professionals and are not directed at children. We do not knowingly collect data from anyone under 16.

Changes to this notice

We may update this notice as our products and data sources change. Material changes will be communicated to active subscribers by email, and the version date at the top of this page will change.

Romanian Energy Grid Atlas (demo)

The Romanian Energy Grid Atlas (demo) is a free map published by Sol Associates SRL, which is the controller for the processing described in this section. Its map files are hosted via GitHub Pages and it is presented on sol-associates.ro on the page Romanian Energy Grid Atlas (demo).

The Atlas has no accounts, sets no cookies and uses no analytics or advertising. If you use the light and dark switch, your choice is stored in your browser on your device only; we do not receive it.

What is sent and to whom. Opening the Atlas, or the page on sol-associates.ro that shows it in a frame, makes your browser contact GitHub Pages, which hosts the map files, and the OpenStreetMap Foundation, whose tile servers (tile.openstreetmap.org) draw the base map. Each receives your IP address, browser details, the time and the address of the page that requested the file. The base-map tiles are delivered through a content delivery network operated for the OpenStreetMap Foundation, which also receives the request. They handle this data under their own privacy terms (GitHub privacy statement; for the OpenStreetMap Foundation, its tile usage policy and its privacy policy). GitHub's privacy statement names GitHub, Inc. or GitHub B.V. as the data controller, depending on the service. We do not receive their logs and do not control how long they keep them. GitHub may process data in the United States; GitHub states that it complies with the EU-US Data Privacy Framework and generally relies on the European Commission's standard contractual clauses for transfers to countries without an adequacy decision.

Why and on what basis. We use this data only to deliver the map and keep it secure. Our legal basis is our legitimate interest (Article 6(1)(f) GDPR) in offering a working free map. The map cannot be drawn without these requests, so no consent banner is shown. You can object at any time by writing to contact@sol-associates.ro.

Links. Clicking “Find on Google Maps” or a link to another site sends the place name and county you clicked to that site; its privacy terms apply. Links to Sol Associates pages carry a campaign tag (utm_source=grid-atlas) so that we can count visits arriving from the Atlas and from its page on sol-associates.ro; the tag does not identify you, and those pages see the address of the site you came from as the referrer.

Public-register data. To build the county totals of the ATR layer we read the Government of Romania’s published list of ATR holders, which includes holder names. Rows identified as natural persons are excluded before aggregation and the published figures are county totals. Small groups are handled by threshold rules (at least 5 distinct holders per released figure, no holder above 80 percent of its MW), and figures that fail these tests are merged or withheld. These rules reduce, but cannot eliminate, the risk that a holder can be inferred when the figures are combined with the public Government list or other sources. Our legal basis is our legitimate interest (Article 6(1)(f) GDPR) in publishing aggregate figures built from public information.

Contact. Privacy requests about the Atlas go to contact@sol-associates.ro.