Privacy Notice

We collect very little, and only what you give us. If you fill in the contact form, we use it to reply to you. If you take the AI Readiness Scorecard, we send you one email with your result — no newsletter, no sequence. If you apply for a role, we use your application to assess it. We don't sell data, we don't run advertising, and we don't make automated decisions about you. Questions and requests: privacy@empowerbi.com.

The rest of this page is the detail.

Empower BI Advisory Services SRL ("Empower BI", "we") is a data, analytics and AI consultancy registered in Romania (Trade Register J40/8060/2012, VAT RO30421257), with its operating office at Str. Galileea 11-15, Sector 1, Bucharest. For the personal data described in this notice, we are the controller.

Our Data Protection Lead coordinates all privacy matters and can be reached at privacy@empowerbi.com. We have not appointed a statutory Data Protection Officer; the Data Protection Lead performs that coordinating role.

This notice covers what happens on empowerbi.com and when you contact us through it. It does not cover the personal data we handle inside our clients' systems when we deliver work for them — there, the client is the controller and its own privacy notices apply.

2.1 VISITING THE SITE

Our web host records standard technical data for security and to keep the site running: IP address, browser and device type, pages requested, timestamps. Logs are kept for [log retention]. Lawful basis: our legitimate interest in operating a secure website.

We do not currently run analytics or advertising cookies. The site sets only the cookies it needs to function (a session cookie and a security token). If we add analytics, we will update this notice and ask for your consent first. See section 7.

2.2 CONTACTING US

If you use the contact form, we collect what you enter: first and last name, business email, company, role, country, what you're trying to do, and which description fits your situation. We use it to respond to your enquiry and, where it leads somewhere, to run the conversation that follows. Lawful basis: our legitimate interest in responding to people who contact us. Retention: 24 months from receipt, unless the enquiry becomes a client relationship, in which case the contract's records rules apply.

2.3 TAKING THE AI READINESS SCORECARD

The Scorecard is a free, twenty-question self-assessment. When you complete it we collect the answers you select, the phase you told us you thought you were in, the result we compute (scores by pillar and a phase), your work email address, and a timestamp. We use these to show you your result on screen and to send you one copy by email. That is the only thing we do with it: no newsletter, no follow-up sequence, no sales call unless you ask for one. We ask for a work email because the Scorecard is built for organisations, not individuals. Lawful basis: our legitimate interest in providing the tool you asked to use and delivering the result you asked to receive. Retention: [scorecard retention], after which the record is deleted or reduced to anonymous aggregate statistics.

2.4 APPLYING FOR A ROLE

If you apply through the Careers page we collect your first and last name, email, the role you're applying for, your CV, and anything you choose to add in the note field. We use this to assess your application and run the recruitment process described on that page. Lawful basis: our legitimate interest in assessing candidates for roles we are hiring for. We do not ask for, and ask you not to send, special-category data (health, ethnicity, beliefs, and the like) or criminal-record information; we will not use it if it arrives.

Retention: 12 months after the recruitment decision, so that we can answer questions about the process and consider you if the same role reopens. If you'd like us to keep your application on file longer, for other roles, we will ask for your consent separately; you can withdraw it at any time. If you'd like it deleted sooner, email privacy@empowerbi.com.

Applications and CVs are read by the people involved in hiring for that role and are stored [CV storage]. We make no automated decisions in recruitment: a person reads every application.

2.5 BUSINESS CONTACTS

If you are a client, prospect, partner or supplier contact, we hold your business contact details and the correspondence between us to deliver work, manage the relationship and invoice. Lawful basis: performance of a contract where you are a client or supplier; our legitimate interest in business development where you are a prospect. Retention: contracts, invoices and accounting records for 10 years after the end of the financial year, as Romanian law requires; other relationship records for as long as the relationship is active and a reasonable period after.

We use a small number of service providers, each bound by a contract that meets GDPR Article 28 and prohibits them from using your data for their own purposes:

We share personal data with authorities only where the law requires it. We do not sell personal data and we do not share it for advertising.

We are in Romania. Google and Anthropic may process data outside the European Economic Area; where they do, transfers rest on the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework. Our website host [hosting transfer basis].

Empower BI operates an information security management system certified to ISO/IEC 27001:2022 (certificate SI-MCS 1187). The personal data covered by this notice is protected by that system: access limited to the people who need it, multi-factor authentication, encrypted devices and transport, logging, and an incident process with defined notification commitments. If a breach ever puts you at high risk, we will tell you without undue delay, as the law requires.

You can ask us to:

Write to privacy@empowerbi.com. We may ask you to confirm your identity in a way proportionate to the request. We respond within one month; for complex requests we may take up to two months more and will tell you why. We don't charge for this unless a request is manifestly unfounded or repetitive.

If you're not satisfied with our answer, you can complain to the Romanian supervisory authority, the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), at dataprotection.ro, or to the authority in your own EU country.

Today the site uses only strictly necessary cookies: a session cookie and a security token that protect the forms. Neither tracks you across sites and neither needs your consent.

[analytics cookies — section added when analytics ships]

Our services and this site are for organisations and working professionals. We do not knowingly collect data from anyone under 16.

When we change this notice we update the date at the top. If a change materially affects how we use data you've already given us, we will tell you directly where we can.

Empower BI Advisory Services SRL · Str. Galileea 11-15, Sector 1, Bucharest, Romania · privacy@empowerbi.com