PRIVACY POLICY

Last updated: December 2025

​

This Privacy Policy explains how UPTOWN CAPITAL STRATEGIES SRL ("UPTOWN CAPITAL STRATEGIES", "we", "us", "the company") collects, uses, stores and protects the personal data of visitors and users of the www.uptowncap.ro website. We are committed to complying with the provisions of Regulation (EU) 2016/679 (GDPR) and applicable national data protection legislation.

​

1. Who We Are (Data Controller)

​

Operator: UPTOWN CAPITAL STRATEGIES SRL

Registered office: Strada Nerva Traian nr. 27-33, staircase B, 1st floor, office 6, Sector 3, Bucharest

CUI: 52901973

Trade Register: J2025087534000

E-mail: office@uptowncap.ro

Phone: +40 726 685 150

Website: www.uptowncap.ro

 

Data Protection Officer (DPO): The Company is not legally obliged to appoint a Data Protection Officer according to Art. 37 GDPR. For any data protection issue, you can contact us at: office@uptowncap.ro.

​

2. What Data We Collect

​

2.1. Data provided directly by you

​

Through the forms on the website or through direct communication:

​

• Name and surname

• Email Address

• Phone Number

• Company name / function

• Any other information voluntarily entered in the message

 

This data is necessary to respond to you or to initiate a professional dialogue.

The data marked as mandatory is necessary for the processing of the request.

​

2.2. Data collected automatically

​

When you visit the site we may collect:

​

• IP Address

• Browser type and version

• Device data

• Pages accessed and duration of the visit

• Server logs

• Cookies and similar technologies

• ​

Details on cookies are available in the Cookie Policy.

We do not collect or solicit sensitive data within the meaning of Art. 9 GDPR.

The Site is not directed to minors and we do not intentionally collect data about them.

​

3. Purposes and Legal Bases of the Processing

​

Purpose of processing | Legal Basis (GDPR)

Reply to messages sent via form/email | Art. 6(1)(b) – pre-contractual measures

Providing information about the company's services upon request | Art. 6(1)(a) – consent

Communication in the context of the performance of a contract | Art. 6(1)(b) – performance of the contract

Fulfillment of legal obligations (accounting, tax, etc.)| Art. 6(1)(c)

Ensuring the technical operation and security of the site | Art. 6(1)(f) – legitimate interest

Anonymous statistical analysis of traffic (non-essential cookies) | Art. 6(1)(a) – consent

​

Our legitimate interest consists of:

– ensuring the proper functioning of the website,

– preventing cyber attacks and fraud,

– improving the user experience.

​

4. Duration of Data Storage

​

• Data submitted via the contact form: up to 12 months after the request is resolved, if a contractual relationship does not result.

• Contractual data: for the duration of the contract + 5 years (legal obligation).

• Data collected through cookies: according to the individual durations mentioned in the Cookie Policy.

 

The durations were established on the basis of legal obligations and the need to respond to any subsequent requests.

After the deadlines expire, the data is deleted or anonymized.

​

5. To whom we may transmit data

​

We can only transmit the data to:

​

• IT service providers, server hosting, email or technical maintenance;

• public authorities, where there is a legal obligation;

• contractual partners, only if necessary for the provision of a service requested by you.

 

All partners are contractually bound by privacy and GDPR requirements. We do not sell, rent or sell personal data.

​

6. Transfer of Data Outside the EU

​

We do not currently transfer data outside of the European Economic Area (EEA). If such a transfer is necessary, it will only be carried out with the guarantees provided by Art. 45–46 GDPR (Standard Contractual Clauses, adequacy decision, etc.), and the policy will be updated.

 

7. Your Rights

​

Under the GDPR, you have the following rights:

 

• Right of access to personal data

• Right to rectification

• Right to erasure ("right to be forgotten")

• Right to restriction of processing

• Right to data portability

• Right to object

• The right to withdraw your consent at any time, without affecting previous processing

• The right to lodge a complaint with ANSPDCP: www.dataprotection.ro

 

To exercise your rights, you can contact us at office@uptowncap.ro.We will respond within a maximum of 30 days, with the possibility of extending the deadline in complex situations (according to art. 12 GDPR).

​

8. Data Security

​

We apply appropriate technical and organizational measures, including:

​

• securing servers and IT infrastructure

• use of the HTTPS protocol

• internal access limitation and control

• backup and restore procedures

• measures to prevent loss, alteration or unauthorized access to data

 

The data is only accessible to authorized personnel and only to the extent necessary.

​

9. Automated Decisions and Profiling

​

UPTOWN CAPITAL STRATEGIES does not:

​

• make decisions based solely on automated processing,

• use profiling that produces legal or similar effects on users.

 

10. Cookies and Similar Technologies

​

The site uses:

​

• cookies necessary for the operation of the website,

• statistical and/or marketing cookies only based on your consent.

 

Full details on the types of cookies, their duration and how to manage consent are available in the Cookie Policy.

Consent can be changed or withdrawn at any time by accessing the dedicated areas of the site.

​

11. Changes to the Privacy Policy

​

We may periodically update this policy to reflect legislative changes or changes in our business. The updated version will be published on the website and will indicate the date of the last change.

​

12. Contact

​

For any questions regarding data protection:

​

• 📧 office@uptowncap.ro
   

• 🏢 Nerva Traian Street no. 27-33, Staircase B, 1st floor, office 6, Sector 3, Bucharest
   

• 📞 +40 726 685 150

​