This notice defines the data-protection and data-management policy applied by Ebill Consulting Srl – tax ID: 54763680, registered office: Lunca de Sus, nr. 952b, Harghita County, Romania as data controller and informs data subjects, visitors to www.ebill.ro, partners and other involved persons about the handling of their personal data.
As data controller, eBill gives special attention to personal data supplied by clients and partners, treats it confidentially and applies the technical, technological and organizational measures required to keep it secure.
Description of eBill activities
Through its web application, eBill provides free and paid cloud invoicing services to companies, associations, foundations, individuals entitled to issue invoices and other entities without legal personality (the service).
Registered users may issue electronic e-Invoices and printed invoices in accordance with current Romanian law and use additional invoicing services included in paid packages.
The service generally uses business information available in public databases. Providing the service nevertheless also requires personal data concerning natural persons to be managed and processed.
Public business data and personal data supplied to eBill cannot always be separated, because the names and contact details of directors, company contacts, sole traders and farmers are also personal data.
Terms used in this notice
Data processing: any operation or set of operations performed on data, including collection, recording, organization, storage, alteration, use, consultation, transmission, disclosure, alignment, combination, restriction, deletion or destruction, prevention of further use, and audio, video or image recording;
Data controller: the natural or legal person or entity that, alone or jointly with others, determines the purposes and means of processing personal data and makes and implements decisions concerning that processing;
Technical processing: performance of technical tasks related to data processing;
Data processor: a person or entity performing technical processing tasks on behalf of the controller;
Data transfer: making data available to an identified third party;
Data deletion: rendering data unrecognizable so that it can no longer be recovered;
Data breach: a security breach leading to accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data;
Data subject: the natural person whose personal data is being processed;
Third party: a natural or legal person or body other than the data subject, controller, processor and persons authorized under their direct authority;
Consent: the data subject’s freely given, specific, informed and unambiguous indication accepting the processing of personal data, in full or for specified operations;
Special-category data: data concerning racial or ethnic origin, political opinions, religious beliefs, trade-union membership, health, addiction, sexual life and criminal history;
Personal data: any information relating to an identified or identifiable natural person, directly or indirectly, including a name, identification number, location data, online identifier, or elements of physical, physiological, genetic, mental, economic, cultural or social identity;
Objection: a declaration by which the data subject opposes processing and requests that processing cease and/or that processed data be deleted;
Profiling: automated processing of personal data to evaluate or predict aspects of a person’s professional performance, economic situation, health, preferences, interests, reliability, behavior, location or movements.
Data-processing activities
Users may register at https://ebill.ro/inregistrare and create an account to access the free or subscription version of eBill and its available options.
Creating a personal account requires confirmation through the link in the automated email. After confirmation, you may provide the information needed for invoicing and communication and create your profile.
Where consent is required, eBill provides registration-related services or discounts and sends cookies or newsletters only with your consent. Before consenting through the checkbox, please read the Privacy Policy and General Terms and Conditions.
Categories of data processed: name, email address, country, postal code, locality, district, street, house number, building, staircase, floor and apartment, telephone number, tax number, EU VAT number, bank account and registration number.
Purposes of processing: registration and confirmation on eBill, creation and use of a personal account, access to invoicing software and, where eligible, participation in eBill support programs.
The legal basis for processing is voluntary consent under Article 6(1)(a) GDPR.
Retention period: three months from registration for unconfirmed accounts; for confirmed accounts, one year from the last sign-in or until a deletion request is received.
Data processing related to the use of eBill invoicing
Using the invoicing service creates a contract between the user and eBill.
eBill can be contacted by email or chat at https://ebill.ro/contact.
The contact form may include details of an accountant or another contact person. Names, email addresses and telephone numbers are personal data and may be used for communication, newsletters or market research after being entered and saved. Other legal relationships may be governed by individual agreements, while this policy remains applicable.
You may unsubscribe using the option in the newsletter. Unsubscribing does not delete your account, and deleting an account does not automatically unsubscribe you. With your consent, newsletters may include offers from contractual partners, but your personal data will not be transferred to them.
Where required by a lawful request, eBill may provide personal data to a court or authority, strictly to the extent necessary for the request.
On eBill social-media pages you may subscribe or send private messages using Facebook, Instagram and LinkedIn functions.
eBill may send invitations recommending the service to persons you specify. You may provide a recipient’s name and email only with their permission. Invitation content is determined by eBill and cannot be changed.
Invoice data is managed and stored anonymously for internal statistics, research and analysis. Under GDPR Recital 26, anonymous data that cannot be linked to individuals is not personal data and does not allow individual business secrets or economic information to be reconstructed. Accepting the policy confirms that the user has read and understood this notice.
Data security
eBill stores the personal data described above at its company premises and on its IT service provider’s servers.
eBill undertakes to secure data in accordance with GDPR requirements.
Information systems use authorization controls, internal organizational measures and appropriate technical solutions to prevent unauthorized access, deletion, extraction or alteration. The same protection and security requirements apply to processors.
eBill maintains a data-protection incident register and informs affected persons where necessary.
eBill ensures that employees and authorized persons know the internal data-protection protocol and handle personal data accordingly.
eBill never collects special-category data for its own purposes.
COOKIE POLICY
Cookies are small text files stored by a website on your device, usually in the browser. They contain information such as preferences or browsing data and help improve the website experience.
Cookies may be temporary session cookies or persistent cookies. They are used for analytics, content personalization, authentication and other functions. You may accept or reject them according to your privacy and security preferences.
Most browsers allow cookies to be controlled and limited. If you do not want eBill to use cookies, you can disable them in your browser settings.
If cookies are disabled, correct operation of the website cannot be guaranteed and your user experience may be affected.
Cookies support correct and convenient operation and collect usage information without identifying visitors. Session cookies are deleted when the browser closes; persistent cookies remain until they expire or are deleted.
Cookies are placed automatically while browsing and can later be deleted in browser settings.
eBill complies with GDPR data-security requirements.
Authorization controls and organizational and technical measures prevent unauthorized access, deletion, extraction or alteration. These requirements also apply to processors.
eBill reserves the right to amend this notice following changes to European Union or Romanian law.