Privacy Policy

PRIVEin - The Prive Collective S.R.L.

Last updated: 08.01.2026

1. INTRODUCTION

The Prive Collective S.R.L. (“PRIVEin”, “the Company”, “we”) operates a controlled-access platform built on selection, discretion, and premium standards.

This Privacy Policy explains how PRIVEin collects, uses, stores, and protects personal data when you access www.privein.io, the PRIVEin mobile application, or interact with PRIVEin services (collectively, the “Platform”).

PRIVEin processes personal data strictly in accordance with:

  • Regulation (EU) 2016/679 (“GDPR”);
  • applicable Romanian data protection legislation;
  • internal confidentiality, representation, and NDA standards.

Personal data is processed only to the extent strictly necessary, with priority given to discretion, security, and reputational protection.

2. DATA CONTROLLER

The Prive Collective S.R.L.

CIF: 50847290

Trade Register: J08/39283/2024

Registered address: Brașov, Str. Traian Grozavescu nr. 7, Romania

Email: contact@privein.io

Phone: +40 758 575 746

3. PRINCIPLES GOVERNING DATA PROCESSING

All personal data processed by PRIVEin is governed by the following principles:

  • Controlled access - data is accessible only to authorized personnel;
  • Discretion and confidentiality – aligned with PRIVEin NDA obligations;
  • Purpose limitation – data is used only for clearly defined purposes;
  • Data minimization – no excessive or unnecessary collection;
  • Security and integrity – technical and organizational safeguards applied;
  • Reputational protection – data use must not harm PRIVEin, its Members, or Partners.

4. CATEGORIES OF PERSONAL DATA

Depending on your interaction with PRIVEin, we may process:

  • Identification data (name, surname);
  • Contact data (email address, phone number);
  • Account and access credentials;
  • Contractual and billing data (for Partners and collaborators);
  • Communication records (messages, requests, support interactions);
  • Technical data (IP address, device, browser, log data);
  • Public social media profile data only when voluntarily shared or interacted with PRIVEin.

PRIVEin does not intentionally collect sensitive personal data and does not engage in data resale or advertising-based profiling.

5. PURPOSES AND LEGAL BASES OF PROCESSING

a) Access management and contractual relationships

Legal basis: Art. 6(1)(b) GDPR

For onboarding, account management, access control, and contractual obligations.

b) Operational integrity and confidentiality

Legal basis: Art. 6(1)(f) GDPR - legitimate interest

To protect PRIVEin’s internal operations, enforce NDA obligations, prevent misuse, and safeguard the platform.

c) Controlled communications

Legal basis: Art. 6(1)(a) GDPR - consent

For essential operational communications related to access, platform updates, or service continuity.

PRIVEin does not conduct mass marketing or unsolicited advertising.

d) Legal and regulatory compliance

Legal basis: Art. 6(1)(c) GDPR

For accounting, tax, archiving, and statutory obligations.

e) Protection of rights, security, and reputation

Legal basis: Art. 6(1)(f) GDPR

For prevention of abuse, dispute management, legal defence, and protection of PRIVEin’s brand and confidential information.

6. AUTOMATED DECISION-MAKING & PROFILING

PRIVEin does not use automated decision-making or profiling within the meaning of Art. 22 GDPR that produces legal or significant effects on users.

Selection, access, and moderation decisions are based on human evaluation, internal standards, and contextual criteria.

7. COOKIES AND TECHNICAL DATA

PRIVEin uses cookies and similar technologies exclusively for:

  • functionality;
  • security;
  • limited analytical purposes.

Details are provided in the Cookie Policy. PRIVEin does not rely on intrusive tracking or advertising profiling.

8. DISCLOSURE OF PERSONAL DATA

Personal data may be disclosed only when strictly necessary to:

  • authorized service providers (IT, hosting, payment, legal, accounting);
  • contractually bound collaborators or Partners, subject to confidentiality obligations;
  • public authorities, where legally required.

All recipients are bound by GDPR-compliant agreements and confidentiality standards aligned with PRIVEin NDA principles.

9. DATA RETENTION

Personal data is retained only for the period necessary to fulfill:

  • contractual relationships;
  • legal and regulatory obligations;
  • legitimate business and reputational protection purposes.

After expiration of retention periods, data is securely deleted or anonymized.

10. DATA SECURITY & BREACH MANAGEMENT

PRIVEin implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse.

In the event of a personal data breach, PRIVEin will:

  • assess the risk promptly;
  • notify the competent authority where required;
  • inform affected data subjects when legally necessary.

11. DATA SUBJECT RIGHTS

Under GDPR, you have the right to:

  • access your data;
  • rectification;
  • erasure (“right to be forgotten”);
  • restriction of processing;
  • data portability;
  • objection to processing;
  • withdraw consent at any time;
  • lodge a complaint with the supervisory authority.

Requests may be submitted to contact@privein.io.

12. SUPERVISORY AUTHORITY

National Supervisory Authority for Personal Data Processing (ANSPDCP)

B-dul G-ral Gheorghe Magheru nr. 28–30, Sector 1, Bucharest, Romania

anspdcp@dataprotection.ro

13. CHANGES TO THIS PRIVACY POLICY

PRIVEin may update this Privacy Policy periodically.

Any changes will be published on this page and become effective upon posting.

Users are encouraged to review this Policy regularly.

14. CONTACT

For privacy or data protection inquiries:

contact@privein.io