Privacy

Privacy Policy

How AGRECORE S.R.L. collects, uses and protects personal data, in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679) and applicable Romanian data protection law.

Last updated · September 2026

1 · Data Controller

Controller
AGRECORE S.R.L.
Registered office
Str. Justiției 51–53, Etaj 1, Ap. 2
Sector 4, București, România
Trade Register No.
J2026052272002 · CUI 55511118
Administrators
Hagai Verejenski · Sascha Lazzerini

For all data protection inquiries, please contact us at contact@agrecore.com. We will respond within 30 days.

2 · Cookies and tracking

This website is a static information site. It sets no cookies of any kind — neither technically necessary nor analytical nor advertising cookies. It stores nothing on your device and it does no cross-site profiling. There is nothing to consent to and nothing to opt out of.

All fonts and images are served from our own hosting in Germany. The only element your browser loads from a third party is the visitor-statistics script described in section 5.

3 · Personal Data We Process

We process only the personal data that is necessary for the specific purposes described in this policy. We do not sell personal data to third parties.

Correspondence by email. When you write to us at contact@agrecore.com, we process your name and email address, any other personal data you voluntarily include in your message, and the date and time of correspondence.

Legal basis: Art. 6(1)(f) GDPR — legitimate interests (responding to inquiries). Where the inquiry relates to a pre-contractual relationship: Art. 6(1)(b) GDPR. Retention: we retain email correspondence for 3 years, unless a longer period is required by law or the correspondence relates to an ongoing business relationship.

Contact form. When you use the contact form we process the name, email address, organisation, country and message you enter, together with the subject area you select. The form is processed on our own hosting in Germany; no third-party form service is involved. Legal basis and retention are as stated above.

Investor access requests. When you request access to the investor area we additionally process your role, telephone number if given, the type of investor you select, the kinds of participation you are interested in, an optional indicative size, and how you came across us. We use this solely to decide on and prepare your access and to prepare our response. Legal basis: Art. 6(1)(b) GDPR — steps taken at your request prior to entering into a contract, and Art. 6(1)(f) GDPR — legitimate interests (assessing enquiries relating to our financing). Providing the optional fields has no effect on whether access is granted.

Access logging. Access keys to the investor area are issued to a named individual. We record who was granted a key, when, and when the material was accessed. Legal basis: Art. 6(1)(f) GDPR — legitimate interests (protecting confidential business information and documenting who received it). Retention: for the duration of the financing process and for 3 years thereafter.

Spam protection. To keep automated submissions out we use a hidden form field, a minimum time between opening and submitting the form, and a short-term count of submissions per IP address. The IP address is stored only as an irreversible hash and only for one hour. No captcha and no third-party service is used.

4 · Server Log Files

Each time this website is accessed, our hosting provider automatically collects and stores standard server log data, including referring URL, browser type and operating system, IP address, date, time and duration of visit, and HTTP status code.

Legal basis: Art. 6(1)(f) GDPR — legitimate interests (website security and operational monitoring). This data is not combined with other data sources to identify individual users. Retention: up to 30 days, then automatically deleted.

5 · Third-Party Service Providers

We engage third-party service providers who may process personal data on our behalf as data processors. ALL-INKL.COM — Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany, provides web hosting, domain registration and email hosting. Data is processed on servers in Germany, where the GDPR is directly applicable. A data processing agreement pursuant to Art. 28 GDPR is in place.

Plausible Analytics. For visitor statistics we use Plausible Analytics, a privacy-focused service hosted in the European Union and operated by Plausible Insights OÜ (Estonia). Plausible sets no cookies, stores nothing on your device and collects no personal data. It records only aggregated, non-identifying information: page URL, referring source, country derived from the IP address, and browser and device type. IP addresses are never stored — they are processed in memory only, as part of a daily-rotating one-way hash, and cannot be traced back to you. Data is processed and stored exclusively on servers within the European Union.

Because Plausible neither sets cookies nor accesses information stored on your device, it does not require consent under Art. 5(3) of the ePrivacy Directive. Legal basis: Art. 6(1)(f) GDPR — legitimate interests (understanding how our website is used in order to improve it). You may object to this processing at any time under Art. 21 GDPR using the contact details in section 1.

All service providers are contractually bound to process personal data only as instructed by AGRECORE S.R.L. and to implement appropriate technical and organisational security measures.

6 · Your Rights Under GDPR

As a data subject, you have the following rights under applicable EU data protection law:

  • Right of access (Art. 15) — request a copy of the personal data we hold about you.
  • Right to rectification (Art. 16) — request correction of inaccurate or incomplete data.
  • Right to erasure (Art. 17) — request deletion of your personal data, subject to legal retention obligations.
  • Right to restriction (Art. 18) — request that we restrict the processing of your data in certain circumstances.
  • Right to object (Art. 21) — object to processing based on our legitimate interests.
  • Right to portability (Art. 20) — receive your data in a structured, machine-readable format.

To exercise any of these rights, please contact us at contact@agrecore.com. We will respond within 30 days. We may ask you to verify your identity before processing your request.

7 · Right to Lodge a Complaint

You have the right to lodge a complaint with the competent data protection supervisory authority. The lead supervisory authority for AGRECORE S.R.L. is Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru, Nr. 28–30, Sector 1, 010336 București, România. Email: anspdcp@dataprotection.ro · www.dataprotection.ro

If you are based in another EU member state, you may also contact your local data protection authority. We encourage you to contact us directly first so that we can resolve any concern promptly.

8 · Data Security

We implement appropriate technical and organisational security measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include encrypted connections (HTTPS/TLS) and access controls on our systems.

Despite these measures, no internet transmission is completely secure. If you have reason to believe that your interaction with us is no longer secure, please notify us immediately at contact@agrecore.com.

9 · Automated Decision-Making & Profiling

We do not engage in automated decision-making or profiling as defined under Art. 22 GDPR. No decisions with legal or similarly significant effects are made about individuals by automated means.

10 · Children's Privacy

This website is intended exclusively for business purposes and is not directed at children under the age of 16. We do not knowingly collect personal data from minors. If you believe that a minor has provided us with personal data, please contact us and we will take steps to delete such information.

11 · Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we use. The date at the top of this document indicates when the most recent changes were made. For material changes that affect your rights, we will endeavour to provide prominent notice on this website before the change takes effect.

12 · Contact

For any questions, requests, or concerns regarding this Privacy Policy or our data processing practices, please contact AGRECORE S.R.L. by email at contact@agrecore.com or by post at Str. Justiției 51–53, Etaj 1, Ap. 2, Sector 4, București, România.