PowerIT S.R.L., IDNO 1012600017309, hereinafter referred to as the “Company”, with its registered office at mun. Chișinău, sec. Rîșcani, str. Albișoara, 42/1, ap.(of.) 67, Republic of Moldova, email info@lucrez.ro, is the owner of the Lucrez application (hereinafter the “Application”) and acts as the data controller for the processing activities described in this policy.
Personal data are processed in accordance with Regulation (EU) 2016/679 (“GDPR”) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
By registering as a Service Provider in the Application, you expressly and unequivocally consent to the processing of the following personal data, noting that such data may also be processed under another legal basis, as detailed below:
| Processed Data | Purpose of Processing | Legal Basis | Processing Duration |
|---|---|---|---|
| First name, last name, phone number, email address | Creating the service provider account in the Application | Consent (Art. 6(a) GDPR) and contract execution (Art. 6(b) GDPR) | Until you deactivate your service provider account |
| Identification data from the identity card or another official document | Identity verification for the person requesting a service provider account | Consent (Art. 6(a) GDPR) and contract execution (Art. 6(b) GDPR) | Until you deactivate your service provider account |
| Data regarding professional training/qualifications | Determining the areas in which you will appear as a Service Provider | Consent (Art. 6(a) GDPR) and contract execution (Art. 6(b) GDPR) | Until you deactivate your service provider account |
| Data mentioned in the insurance policy | Confirming the existence of an insurance policy covering the risks of the services provided | Consent (Art. 6(a) GDPR) and contract execution (Art. 6(b) GDPR) | Until you deactivate your service provider account |
| Mandatory data required for issuing an invoice and bank data | Issuing invoices to Clients on behalf of and for the Service Provider (where applicable), issuing invoices from the Company to the Service Provider, legal reporting and withholding tax payments | Consent (Art. 6(a) GDPR), contract execution (Art. 6(b) GDPR), and the Company’s legal obligation (Art. 6(c) GDPR) | For the duration of the relevant legal obligation (e.g., some personal data related to fiscal matters must be kept for 10 years) |
| Identification data from the identity card and information from the insurance policy | Documenting potential legal actions arising from the contractual relationship | Contract execution (Art. 6(b) GDPR) and the Company’s legitimate interest (Art. 6(f) GDPR) | Until you deactivate your service provider account plus an additional 3-year period |
| Email address | Marketing | Consent (Art. 6(a) GDPR) | Until you withdraw your consent |
| Detailed information in the cookie policy | Use of cookies for analysis, statistics, advertising, or evaluation of services provided | Consent (Art. 6(a)) and the Company’s legitimate interest (Art. 6(f) GDPR) | See our cookie policy |
The legitimate interest pursued by the Company when processing personal data regarding the insurance policy is to establish criteria of reliability for the services offered to clients by service providers through the Application.
Regarding identity confirmation for account registration, payments made via Stripe, and obtaining the insurance policy, personal data may be processed directly, as controllers, by the entities providing these services. We recommend reviewing the information made available by these entities regarding the processing of personal data.
The Company does not have access to your credit card information for payments/collections made through Stripe; the Company only receives information about the amount involved in the transaction.
For processing based on consent, you have the right to withdraw your consent at any time by sending an email to info@lucrez.ro. Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal or processing based on another legal basis.
Personal data will not be transferred to a third country or international organization. There is no automated decision-making, including profiling.
You have the following rights: the right of access, rectification or deletion, the right to restrict or object to processing, as well as the right to data portability.
If you consider that your rights have been violated, you may submit a complaint to the National Centre for Personal Data Protection of the Republic of Moldova: www.datepersonale.md, str. Serghei Lazo, 48, MD-2004, Chișinău, Republic of Moldova, tel. +373 22 820 801.
The Company may disclose personal data to cloud storage providers, IT maintenance providers, or accounting service providers, on the basis of a personal data processing agreement and only for the purposes mentioned above.