Privacy Policy

Last updated: June 2026

Edkore (INFOSEC CENTER SRL) is responsible for the data collected and processed for its own purposes. We are committed to maintaining the security and confidentiality of the personal data we process, whether through our website or through our interactions with clients or business partners. Whether we are supporting our clients or managing our own data, privacy and security are at the heart of our operations.

Contact details

If you would like to contact us to learn more about how we process personal data, to exercise your rights, to file a complaint or to discuss any privacy matters, please contact us using the following details:

The data we process and the purpose of processing

Information security and privacy consulting services

Although our core services do not concern the collection and processing of personal data, we often process personal data while delivering information security and privacy services. This can range from the data of our clients to the data of our clients' clients. We do not collect personal data as the object of the activities performed in these interactions, except for pre-contractual materials and communications relating to individual activities. This situation and the subsequent processing of data are carried out under a contract or with the aim of entering into a contract, within Edkore's relationship with its clients.

Types of data processed: names, job titles, email addresses, address, phone, signatures.

Requests on the website

To exercise your rights under Regulation 679/2016 on the protection of personal data, contact us on this page and send an email to contact@edkore.com. The email address is monitored at all times to ensure we identify and handle your request efficiently. This data is processed in accordance with our legitimate interests and is used only to respond to your request.

Types of data processed: names, email addresses, subject field and free-text field (which should not include personal data).

Managing employees' personal data

We process personal data to facilitate employment contracts and to provide employees with the benefits associated with working at Edkore. Employees are given internal privacy information about how their data is processed. If you have previously worked at Edkore, you can make a request through our contact form.

Types of data processed: information provided to employees through the internal privacy policy.

Client prospecting

We process basic information about potential clients and opportunities, which may be collected through sales meetings, business cards, verbally, or at events we host or attend. This relates to the prospective client's contact person and includes personal information as well as details of each opportunity. We use a cloud-based solution to host this data, which integrates with our email services, so that we can track interactions and manage the business relationship efficiently. This processing is based on Edkore's legitimate interests or on entering into or performing a contract with a client.

Types of data processed: names, job title, email addresses, address, phone, signatures, email conversations.

Financial management and accounting

Our financial management and accounting services are outsourced and process basic client information to meet legal accounting requirements. These range from invoices, receipts, account details, timesheets, payroll and bank details. We use a cloud-based solution to process and store accounting documents (invoices, receipts, delivery notes).

Types of data processed: names, email addresses, address, phone, bank account details of clients and suppliers, signatures.

Customer satisfaction surveys

When we deliver a service to our clients, we like to make sure they have received excellent service. We use clients' contact information to send a survey asking questions about how we delivered our services. This is done in our legitimate interests and used strictly to ensure we have met our own and our clients' expectations. This processing and the clients' responses are not used to send unsolicited marketing communications.

Suppliers

We process data from our supplier contacts. This information may be collected through our website, email, LinkedIn, recruitment agencies or advertising agencies. Suppliers with whom we have business relationships, or with whom we may collaborate in the future, will have their data stored in a cloud-based solution so that we can track their skills, contact details and availability. This processing is carried out in accordance with Edkore's legitimate interests, for the performance of a contract or with the aim of entering into one.

Types of data processed: names, job title, email addresses, address, phone, skills, employment history, bank account details, insurance policies, ID card, passport, driving license, references and email conversations.

Data retention

Edkore processes personal data for as long as necessary to meet our legal obligations or where there is a legitimate basis for keeping it. We review personal data on a case-by-case basis and document the retention period for each. For more information about how long we keep personal data in our systems and databases, please contact us at contact@edkore.com or +40 740 339 467.

Marketing and events

We only send personalized marketing communications where you have given us your consent. We do not send unsolicited marketing communications. Our main way of presenting our services is through events and online marketing activities. Through events, Edkore presents its services and provides information about its services and skills. We may also exchange business cards at events and will email you to follow up on our interaction with you. This does not mean we will send you marketing materials, but we will enter opportunity information into our sales system to ensure we have provided you with the information you request.

Social Media

Edkore uses social media platforms such as LinkedIn. As users of these platforms, we have subscribed to the terms and conditions of these online communication tools in order to communicate with other users. If you do not wish to receive any form of communication from Edkore, you can let us know by email at contact@edkore.com.

Use of third parties

We use third-party system providers to enable us to deliver our services efficiently and to keep information (including personal data) secure, which allows us to focus on delivering services to our clients.

Our providers

We use world leaders in cloud-based infrastructure services, which means the provider handles all physical equipment and its management. Email, office applications and document storage, we use an external hosting provider, a world-renowned expert; the data is processed in Europe and it is our responsibility to ensure it is managed securely. Web hosting, we use a provider that demonstrates a high level of security and transparency. Financial management software, we use a solution recognized as a market leader in Romania, hosted in Ireland, with which we have signed a comprehensive set of terms and conditions. Human Resources (HR), for recruitment activities we use a system recognized in the online recruitment field, hosted in Romania.

Cookies and similar technologies

The edkore.com website uses cookies (small text files stored in your browser) to work properly and, only with your consent, for statistics and marketing. Strictly necessary cookies are set automatically, because the website cannot work without them; all other categories are enabled only after you give your consent, in accordance with the ePrivacy Directive and Regulation (EU) 679/2016 (GDPR).

We use the following categories of cookies:

• Strictly necessary, essential for navigation, security and for remembering your cookie choices. They cannot be disabled.
• Preferences, remember your choices (for example, language) for a personalized experience.
• Statistics, help us understand, in an anonymous/aggregated way, how the website is used, so we can improve it.
• Marketing, allow relevant content and ads to be shown on other platforms.

You can manage or withdraw your consent at any time, with the same ease as you gave it, using the Cookie settings button (also available in the footer of every page). Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. You can also delete cookies from your browser settings.

Personal data security

At Edkore we take the security of personal data seriously. We have implemented a mix of cybersecurity controls. We assess security for confidentiality, integrity and availability, to ensure that data remains protected, accurate and available for its intended purposes. Some of the core controls we have implemented are:

• multi-factor authentication (MFA) on all internet-based systems;
• encryption of data at rest and in transit;
• technical assessments of our systems for vulnerabilities and misconfigurations;
• ongoing employee training;
• policies and procedures on operations and system configuration.

Locations of the systems used: email, office applications and document storage, Ireland and the Netherlands; web hosting, the Netherlands; email marketing, USA; cloud financial management application, Ireland; online recruitment portal (HR), Romania. Edkore has implemented appropriate measures to ensure an adequate level of protection for your personal data when it is processed in countries outside Europe. If you have questions or wish to obtain copies of the safeguards for a particular set of activities and processing, please contact us.

Your rights regarding the processing of personal data

You have the following rights regarding the processing of personal data, under the conditions provided by law:

• the right to request a copy of the personal data we hold about you;
• the right to have any inaccurate or incomplete personal data corrected;
• the right to object to, or restrict, our use of your personal data;
• the right to withdraw your consent for data processed on the basis of consent (withdrawal does not affect the lawfulness of processing before withdrawal);
• the right to erasure of personal data, where you have withdrawn consent, where processing is no longer necessary, or where processing is contrary to law;
• the right to data portability, allowing us to transfer a copy of the processed data received from you to an entity you designate.

If you have questions about the processing of your data, or wish to send us a request or exercise any of your rights, please contact our Data Protection Officer at contact@edkore.com. We will review each request and inform you of the actions taken as soon as possible, within a maximum of one month. If we need more information, or if we encounter difficulties in resolving your request, we will inform you without delay.

If you consider that we have not resolved all your requests, or you are not satisfied with our responses, you may lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP). You may also turn to the courts.

To whom and why we share personal data

The confidentiality of personal data is one of the most important aspects for us. We do not share this data with third parties unless necessary, and only the data needed for compliance with legal or accreditation requirements.