Privacy Policy

1. Data Controller

The controller responsible for the processing of personal data collected through www.windsolarmarket.com is:

Data Controller: CONSULTRIO SRL
Registered office: 40G Predeal Street, 1st floor, flat 2, 400073 Cluj-Napoca, Romania
Tax identification number: RO41973060
Trade Register No.: J12/4606/2019
Email: arnau@windsolarmarket.com
Telephone: +40 723 117 711
Website: www.windsolarmarket.com

Hereinafter, the controller may be referred to as Wind Solar Market, CONSULTRIO SRL or the Data Controller.

This Privacy Policy explains how personal data relating to people who visit, register on or use the platform is collected, used, retained and protected.

2. Applicable legislation

Personal data will be processed in accordance with:

  • Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR);
  • Romanian legislation applicable to the implementation of the GDPR;
  • applicable rules on privacy and electronic communications;
  • any other legislation that may apply.

3. Persons to whom this policy applies

This Privacy Policy applies, among others, to:

  • website visitors;
  • registered users;
  • project owners and developers;
  • company representatives;
  • buyers and investors;
  • financiers and strategic partners;
  • people requesting information;
  • suppliers and collaborators;
  • people whose personal data is lawfully included in documents submitted to the platform.

Wind Solar Market is intended for people aged 18 or over who have sufficient legal capacity.

4. Personal data we may process

Depending on how a person uses the platform, we may process the following categories of personal data:

4.1. Identification and contact data

  • first name and surname;
  • email address;
  • telephone number;
  • country or locality;
  • company or organisation;
  • job title or professional role;
  • preferred language of communication.

4.2. Registration and account data

  • username;
  • email address;
  • password stored in protected form;
  • internal user identifier;
  • registration date;
  • account status and type;
  • access history;
  • account-related preferences.

4.3. Project-related data

When a user submits or publishes a project, we may process:

  • the identity and contact details of the author or representative;
  • the project name and characteristics;
  • location;
  • technology used;
  • installed capacity;
  • stage of development;
  • information concerning land, permits and grid connection;
  • descriptions and comments;
  • photographs;
  • technical, legal or administrative documents;
  • communications relating to review or publication;
  • change history.

4.4. Personal data contained in documents

Documents submitted by users may contain names, job titles, signatures, contact details or other information relating to individuals.

Users should avoid including personal data that is not necessary and must have authorisation or another valid legal basis for providing information relating to third parties.

Wind Solar Market may hide, restrict or remove personal data that is unnecessary, excessive or particularly sensitive.

4.5. Enquiries and communications

We may retain:

  • enquiries submitted through forms;
  • emails;
  • requests for information about projects;
  • complaints;
  • support communications;
  • attachments;
  • responses and follow-up communications.

4.6. Financial and contractual data

If paid services are offered, we may process:

  • billing details;
  • the contracting company or individual;
  • tax address;
  • tax identification number;
  • the service purchased;
  • amounts;
  • taxes;
  • payment status;
  • invoices and supporting documents.

Wind Solar Market will not retain full bank card details where payment is processed directly by a financial institution or payment service provider.

4.7. Technical and browsing data

The website may automatically collect certain information, such as:

  • IP address;
  • browser type;
  • operating system;
  • device used;
  • date and time of access;
  • pages visited;
  • technical errors;
  • security logs;
  • session identifiers;
  • cookies and similar technologies.

Information about the cookies used on the website is available in the Cookie Policy.

5. Sources of personal data

Personal data may be obtained:

  • directly from the data subject;
  • from a user acting as an authorised representative;
  • through registration, publication or contact forms;
  • from documentation provided by project owners or developers;
  • through communications with Wind Solar Market;
  • from companies or collaborators lawfully connected with a project;
  • from publicly accessible sources, where their use is lawful;
  • from technical systems, logs and cookies.

Where personal data has not been obtained directly from the data subject, the information required by law will be provided where applicable.

6. Purposes of processing

Personal data may be used for the following purposes:

6.1. Managing registration and user accounts

  • creating the account;
  • identifying the user;
  • enabling login;
  • managing permissions and access;
  • recovering credentials;
  • sending communications necessary for the account;
  • preventing unauthorised access.

6.2. Managing renewable energy projects

  • receiving projects;
  • reviewing submitted information;
  • requesting clarifications or documentation;
  • publishing, editing or withdrawing projects;
  • classifying projects;
  • displaying public or restricted information;
  • maintaining a review history;
  • informing the author of the publication status.

6.3. Facilitating contact between interested parties

  • receiving requests for information;
  • putting interested parties in contact;
  • forwarding enquiries to the relevant owner or representative;
  • managing expressions of interest;
  • facilitating initial communications relating to a potential transaction.

Submitting an enquiry does not oblige any party to negotiate or enter into a transaction.

6.4. Providing contracted services

  • managing subscriptions or plans;
  • providing publication or promotional services;
  • processing payments;
  • issuing invoices;
  • managing cancellations;
  • fulfilling contractual obligations.

6.5. Handling enquiries and complaints

  • answering questions;
  • resolving incidents;
  • managing complaints;
  • investigating potentially false or unlawful content;
  • handling privacy-related requests.

6.6. Security and fraud prevention

  • protecting user accounts;
  • detecting improper access;
  • preventing impersonation;
  • preventing fraudulent publications;
  • protecting technological infrastructure;
  • investigating incidents;
  • retaining evidence where necessary.

6.7. Legal compliance

  • complying with tax, accounting and administrative obligations;
  • responding to legally valid requests;
  • cooperating with competent authorities;
  • establishing, exercising or defending legal claims;
  • retaining documentation where required by law.

6.8. Improving the platform

We may analyse platform use in aggregated or limited form in order to:

  • identify errors;
  • improve navigation;
  • understand which features are useful;
  • optimise forms and content;
  • develop new functionality.

Analytics tools requiring consent will only be used after the user has provided that consent.

6.9. Marketing communications

Wind Solar Market may send news, opportunities, sector information or communications about its services where:

  • the user has given consent;
  • there is an existing contractual relationship and the law permits information about similar services to be sent;
  • another valid legal basis applies.

Subscription is voluntary. Users may stop receiving these communications free of charge by using the unsubscribe link included in each message or by writing to arnau@windsolarmarket.com.

Creating an account does not, by itself, constitute automatic consent to receive marketing communications. Romanian legislation generally requires prior consent for electronic marketing communications, subject to certain exceptions for similar services offered to existing customers.

7. Legal bases for processing

The legal bases we may rely on include:

7.1. Performance of a contract or pre-contractual steps

This basis applies where processing is necessary to:

  • create and manage an account;
  • publish or manage a project;
  • respond to an enquiry concerning a potential service;
  • provide a contracted service;
  • manage payments and invoicing.

7.2. Consent

Consent will be relied upon where the user voluntarily authorises:

  • non-essential cookies;
  • marketing communications;
  • certain publications or uses of information;
  • other processing activities requiring consent.

Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.

7.3. Compliance with legal obligations

This basis applies where processing is necessary to comply with obligations relating to:

  • tax;
  • accounting;
  • commercial law;
  • administrative requirements;
  • judicial matters;
  • data protection;
  • requests from competent authorities.

7.4. Legitimate interests

We may process personal data where necessary for legitimate interests such as:

  • maintaining platform security;
  • preventing fraud;
  • protecting rights and assets;
  • moderating projects;
  • improving platform operation;
  • retaining evidence;
  • managing complaints;
  • maintaining reasonable professional relationships.

Before relying on legitimate interests, the rights and reasonable expectations of the individuals concerned will be taken into account.

7.5. Establishment, exercise or defence of legal claims

Personal data may be retained and used where necessary to establish, exercise or defend legal claims.

8. Mandatory data

Fields marked as mandatory are necessary in order to provide the requested service.

If the user does not provide this information, they may be unable to:

  • register;
  • publish a project;
  • access certain areas;
  • request information;
  • contract a service;
  • receive a response.

Optional data may help complete a profile or improve available information but will not be required where it is not necessary.

9. Publication and visibility of data

Certain project information may be displayed publicly, including:

  • title;
  • project type;
  • general location;
  • capacity;
  • stage of development;
  • description;
  • photographs;
  • selected technical characteristics.

Other information and documents may be restricted to registered users or authorised persons.

Access settings may vary depending on the project and the nature of the information.

The author's personal contact details will not generally be made public unless consent has been given or disclosure is necessary for the requested purpose.

Users should carefully review documents before submitting them and should not include personal data they do not wish to disclose.

10. Recipients of personal data

Personal data may be disclosed to or accessed by:

  • web hosting providers;
  • email service providers;
  • maintenance and technical support providers;
  • cybersecurity providers;
  • providers of forms, storage or user-management services;
  • payment service providers, where paid services exist;
  • legal, tax, accounting or technical advisers;
  • public authorities, courts or competent bodies;
  • project owners or representatives;
  • buyers, investors or other interested persons, where necessary to manage an enquiry;
  • other users, solely in relation to information configured as public or otherwise accessible.

Service providers acting on behalf of Wind Solar Market must process personal data in accordance with instructions and apply appropriate security measures.

Wind Solar Market does not sell its users' personal data.

11. International data transfers

Some technology providers may process personal data from countries outside the European Economic Area.

Where an international transfer takes place, a legally recognised safeguard will be used, such as:

  • an adequacy decision of the European Commission;
  • Standard Contractual Clauses;
  • Binding Corporate Rules;
  • another safeguard permitted under applicable law.

Data subjects may request further information about the safeguards used by writing to arnau@windsolarmarket.com.

12. Data retention

Personal data will be retained only for as long as necessary to fulfil the relevant purpose.

The following criteria will apply, among others:

  • account data will be retained while the account remains active;
  • project information will be retained while the project is published, pending review or otherwise managed through the platform;
  • after an account is closed or a project withdrawn, certain information may be retained for as long as necessary to manage liabilities or claims;
  • enquiries will be retained for as long as necessary to respond and carry out reasonable follow-up;
  • contractual, tax and accounting data will be retained for the periods required by law;
  • data used for marketing communications will be retained until the user withdraws consent or objects;
  • a minimal suppression record may be retained in order to prevent unwanted communications from being sent again;
  • technical and security logs will be retained for a limited period proportionate to the relevant risk;
  • backup copies will be deleted in accordance with their ordinary rotation cycles.

When personal data is no longer required, it will be deleted, anonymised or otherwise restricted, as appropriate.

13. Data subject rights

Where applicable, individuals may exercise the following rights:

  • Access: to know whether we process their personal data and to obtain a copy.
  • Rectification: to correct inaccurate or incomplete data.
  • Erasure: to request deletion where the data is no longer necessary or another legal ground applies.
  • Restriction: to request that processing be restricted in certain circumstances.
  • Data portability: to receive data they have provided in a structured format and, where applicable, transmit it to another controller.
  • Objection: to object to processing based on legitimate interests or carried out for direct marketing.
  • Withdrawal of consent: to withdraw consent previously given.
  • Rights relating to certain automated decisions: to request human intervention where a decision based solely on automated processing produces legal or similarly significant effects.

These rights and their limitations are governed by the GDPR. Organisations must facilitate the electronic exercise of rights and, as a general rule, respond within the statutory one-month period.

To exercise a right, the data subject may write to:

arnau@windsolarmarket.com

The request should state:

  • the data subject's first name and surname;
  • the right they wish to exercise;
  • the information needed to locate the relevant data;
  • an address or other contact detail for the response.

Where there is reasonable doubt as to the identity of the person making the request, additional information may be requested in order to verify their identity.

14. Complaint to a supervisory authority

If a person considers that their personal data has not been processed correctly, they may lodge a complaint with the competent data protection authority.

In Romania, the supervisory authority is:

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)

Where applicable, the person concerned may also contact the data protection authority in their country of residence.

15. Automated decision-making

Wind Solar Market does not currently make decisions based solely on automated processing that produce legal effects or similarly significantly affect an individual.

Automated security controls or systems for detecting unusual activity may be used, but material decisions concerning accounts or publications may be reviewed by a person.

If automated decision-making systems producing significant effects are introduced in the future, this Privacy Policy will be updated.

16. Children's data

The platform is not intended for the registration of persons under the age of 18.

If Wind Solar Market becomes aware that personal data relating to a minor has been received without appropriate authorisation, reasonable steps will be taken to delete the data or restrict its processing.

17. Security

Wind Solar Market will apply reasonable technical and organisational measures intended to protect personal data against:

  • loss;
  • alteration;
  • unauthorised access;
  • disclosure;
  • destruction;
  • misuse.

These measures may include access controls, passwords, backups, encryption of communications, updates, security logs and restricted permissions.

No system can guarantee absolute security. Users must also protect their login credentials and report any suspicious access.

18. External links

The website may contain links to websites operated by third parties.

Wind Solar Market does not control the privacy policies or practices of those websites. Users should review the relevant terms before providing personal data.

19. Cookies

The platform uses cookies that are necessary for its operation and may use other categories of cookies where consent has been given.

Detailed information is available in the Cookie Policy. Users may change their preferences at any time using the Manage cookies link in the website footer.

20. Changes to this Privacy Policy

This Privacy Policy may be amended to reflect:

  • legislative changes;
  • new features;
  • new service providers;
  • paid services;
  • new analytics tools;
  • changes to the business model;
  • security improvements.

Where a change is material, notice will be given through the website, by email or by another appropriate means.

21. Contact

For enquiries relating to this Privacy Policy or the processing of personal data:

Email: arnau@windsolarmarket.com
Telephone: +40 723 117 711
Address: 40G Predeal Street, 1st floor, flat 2, 400073 Cluj-Napoca, Romania

Last updated: 24 July 2026.

Scroll to Top