Privacy Policy

This document describes how we process your personal data when you contact us, use our website, access our services, or when you are our employee or partner. Please also read our Cookie Policy for additional details. In this document, we explain:

  1. who we are;
  2. how you can contact us;
  3. the privacy policy;
  4. the purpose and legal basis for processing your personal data;
  5. how we obtain your personal data and what data we process;
  6. how we use your personal data;
  7. the security of personal data processing and data retention period;
  8. whether there are other recipients of your personal data;
  9. whether we intend to transfer your data to another country;
  10. your rights regarding personal data;
  11. updates to this document.

1. Who we are

Controller: The Controller is SEMA Group, consisting of: SEMA REAL ESTATE MANAGEMENT SRL (exercising control), SEMA BUSINESS ONE S.R.L., SEMA BUSINESS TWO S.R.L., SEMA BUSINESS THREE S.R.L., SEMA BUSINESS FOUR S.R.L., SEMA BUSINESS FIVE S.R.L., SEMA REAL ESTATE S.A., PUMAC S.A., and SERVAGROMEC DÂMBOVIȚA S.A.

Website maintenance is carried out by our processor: M2M Events Loft S.R.L., which has a contract with SEMA REAL ESTATE S.A.

SEMA REAL ESTATE MANAGEMENT SRL is a Romanian legal entity with registered office in Bucharest, Splaiul Independenței no. 319L, Paris Building, Entrance C, Ground Floor, Sector 6, registered with the Trade Registry Office attached to the Bucharest Tribunal under no. J2025051041004, having Unique Registration Code 52142024, sole administrator of the following companies within the Group (SEMA Group):

  1. SEMA BUSINESS ONE S.R.L., a Romanian legal entity with registered office in Splaiul Independenței no. 319L, Paris Building, Entrance C, Ground Floor, Sector 6, Bucharest, registered with the Bucharest Trade Registry under no. J2008004823405, (EUID) ROONRC.J2008004823405, Unique Registration Code 23506202;
  2. SEMA BUSINESS TWO S.R.L., a Romanian legal entity with registered office in Splaiul Independenței no. 319L, Paris Building, Entrance C, Ground Floor, Sector 6, Bucharest, registered with the Bucharest Trade Registry under no. J2008004837400, (EUID) ROONRC.J2008004837400, Unique Registration Code 23508220;
  3. SEMA BUSINESS THREE S.R.L., a Romanian legal entity with registered office in Splaiul Independenței no. 319L, Paris Building, Entrance C, Ground Floor, Sector 6, Bucharest, registered with the Bucharest Trade Registry under no. J2008004848402, (EUID) ROONRC.J2008004848402, Unique Registration Code 23508238;
  4. SEMA BUSINESS FOUR S.R.L., a Romanian legal entity with registered office in Splaiul Independenței no. 319L, Paris Building, Entrance C, Ground Floor, Sector 6, Bucharest, registered with the Bucharest Trade Registry under no. J2008004825407, (EUID) ROONRC.J2008004825407, Unique Registration Code 23506210;
  5. SEMA BUSINESS FIVE S.R.L., a Romanian legal entity with registered office in Splaiul Independenței no. 319L, Paris Building, Entrance C, Ground Floor, Sector 6, Bucharest, registered with the Bucharest Trade Registry under no. J2008004822404, (EUID) ROONRC.J2008004822404, Unique Registration Code 23506229;
  6. SEMA REAL ESTATE S.A., a Romanian legal entity with registered office in Bucharest, Splaiul Independenței no. 319, Sector 6, registered with the Trade Registry Office attached to the Bucharest Tribunal under no. J2002005123403, (EUID) ROONRC.J2002005123403, having Unique Registration Code 14703086;
  7. PUMAC S.A., a Romanian legal entity with registered office in Splaiul Independenței no. 319L, Paris Building, Entrance C, Ground Floor, Sector 6, Bucharest, registered with the Bucharest Trade Registry under no. J1991000200400, (EUID) ROONRC.J1991000200400, Unique Registration Code 447042;
  8. SERVAGROMEC DÂMBOVIȚA S.A., a Romanian legal entity with registered office in Greci Village, Petrești Commune, Dâmbovița County, registered with the Dâmbovița Trade Registry under no. J1991000580153, (EUID) ROONRC.J1991000580153, Unique Registration Code 919013.

2. How you can contact us

You may contact us at: Municipality of Bucharest, Splaiul Independenței no. 319L, Paris Building, Entrance C, Ground Floor, District 6, tel: 0724578782, email: dpo@sema.ro.

3. Privacy Policy

This Privacy Policy aims to explain in a simple and transparent manner what types of personal data the CONTROLLER collects through the website in relation to natural persons (visitors and users), hereinafter referred to as “Persons”, and how we process such data. It applies to the following categories of persons:

  • Users – persons who use the website and complete the contact form (current, former, or potential clients of the controller, press representatives, general public, etc.);
    • Visitors – persons who only access the website without completing the contact form (anonymous users).

The CONTROLLER collects personal data when a Person accesses or uses the functionalities of the website. Such data is recorded when the contact form is completed for the purpose of requesting information necessary to benefit from our services and assistance. Personal data refers to any information that tells us something about a Person or that we can correlate with that Person.

The personal data processed may include: name, surname, date of birth, username, phone number, email address, public social media profile: name, URL, profile, photos, likes, location, and other publicly available information from the profile; location information; browser and device information: IP address, (device ID), server log file information; application usage data. Personal Activity/Engagement Data (for example, date and time of activity on relevant websites, how many times a website is visited, which elements are accessed). Additionally, we collect data regarding how the person interacts with our services, expressed preferences, as well as settings chosen in relation to the services.

Sema may use, in online advertising campaigns conducted on its own LinkedIn, Facebook, or Instagram accounts (possibly associated with the website), statistical profiling of potential clients carried out by our partners specialized in advertising through Meta Ads.

In certain cases, the CONTROLLER may use cookies, pixel tags, and other similar technologies that allow the creation and maintenance of a unique identifier. These include (in the contact form): name, surname, and email address. Processing refers to all operations we may perform on data, such as collection, recording, storage, adjustment, organization, use, disclosure, transfer, and deletion.

We request that you do not send or disclose any sensitive information on or through the website or in any other way. Although you may access the content of the website without providing any personal information, except for cookies and IP address (in this regard please consult the Cookie Policy for further details), such data may fall under the category of personal data (visitor).

If you provide personal information online, the Sema Group may subsequently use it for the purposes stated in this document. Your personal data will be processed exclusively based on your express and unequivocal consent for such processing. Therefore, providing the data/information requested through the website is considered to represent your express consent for your personal data to be used by the controller in accordance with the purposes mentioned below.

We expressly inform visitors and users that all personal data processing refers exclusively to persons who have reached the age of 16. The use of the website by children under the age of 16 is prohibited. If such a situation nevertheless occurs, resulting in the processing of personal data of children under 16, we will cease processing such data immediately upon becoming aware of this fact. Responsibility for the use of the website by children lies exclusively with their parents.

If you do not agree with the processing of your personal data, please do not complete the user form on the website; you may send us your message by email or phone using the contact details provided on the website. In situations where your personal data is completed by a third party, we do not assume responsibility regarding the author of such submissions.

4. Purpose and Legal Basis for the Processing of Personal Data

The purpose of collecting personal data is to carry out management, advertising, marketing, and sales activities. The legal basis for processing your data, in accordance with GDPR, Article 6(a), (b), (c), and (f), may be, as applicable:

  • consent (for cookies when accessing the website or for newsletters);
  • steps taken prior to entering into a contract with you;
  • legal obligation in areas such as financial and tax matters;
  • legitimate interest pursued by a third party (for example through Google Analytics cookies).

5. How we obtain your personal data and what data we process

We obtain your personal data from you when you access or use the functionalities of the website.

The personal data we may process, including upon or prior to the conclusion of a contract, includes: name, surname, date of birth, username, phone number, address, email address, personal numerical code (CNP), ID card series and number, public social media profile: name, URL, profile, photos, likes, location, and other publicly available information from the profile; location information; browser and device information: IP address, (device ID), server log file information; application usage data; Personal Activity/Engagement Data (for example, date and time of activity on relevant websites, how many times a website is visited, which elements are accessed).

Additionally, we collect data regarding how the person interacts with our services, expressed preferences, as well as settings chosen in relation to the services. In certain cases, the CONTROLLER may use cookies, pixel tags, and other similar technologies that allow the creation and maintenance of a unique identifier. These include (in the contact form): name, surname, and email address.

6. How we use your personal data

We use personal data only for legitimate business purposes, namely for communicating with our clients, attracting new clients, and monitoring visitors’ use of the website, as well as for carrying out our current business activities. The purposes for which we process the personal data you provide by completing the contact form are:

  • to receive further information by email regarding our marketing campaigns, by freely expressing your consent through accessing the existing form;
  •  to understand your preferences, by freely expressing your consent through accessing the existing form;
  • to enable you to send us comments regarding our services and products;
  • for subsequent correspondence with you;
  • for transmitting offers specifically requested through comments written on the website; processing requests for offers until they are taken over by the sales/rental department or by a real estate agency; and for carrying out steps prior to the conclusion of a contract;
  • for resolving various requests, questions, notifications, or complaints submitted by users;
  • for the legitimate interest of the controller, for example for the establishment, exercise, or defense of a legal claim, for internal administrative purposes, for invoicing services provided and processing related payments, as well as for the protection of copyright and related rights;
  • for customer relationship management: we may request feedback regarding the products and services offered and share it with certain members of our staff for quality improvement purposes. We may also use notes from conversations conducted online, by phone, or in person in order to personalize the products and services we provide;
  • for improving and developing products and services: analyzing how the Controller’s products and services are used helps us better understand them and identify areas for improvement. We analyze the results of our marketing activities in order to measure their effectiveness and the relevance of our campaigns.

We do not use automated decision-making processes and we do not create profiles based on your personal data.

7. Security of personal data processing and data retention period

We apply an internal framework of policies and minimum standards at all our levels to keep data secure. These policies and standards are periodically updated to comply with regulations and market developments. Specifically and in accordance with the law, we implement appropriate technical and organizational measures (policies and procedures, IT security, etc.) to ensure the confidentiality and integrity of personal data and the manner in which they are processed. Employees of the Controller and its processors are required to maintain confidentiality and may not disclose personal data. Additionally, we have appointed a Data Protection Officer (DPO) to independently advise and coordinate our activities regarding personal data protection.

The period during which we retain website users’ data is determined according to the following criteria:

  • if offers are requested, data is retained for the period necessary to finalize the relationship between the offeror and the requesting user;
  • for clients who finalize the offer period by signing a contract – for a period equal to the contractual duration, plus the period necessary to comply with legal provisions regarding archiving and protection of the controller’s interests;
  • for other users who do not meet the above criteria, data will be processed by the company without a fixed time limit, with the possibility of withdrawing your consent at any time, which will also be reminded to you at least once every 5 (five) years;
  • for occasional visitors, no personal data is collected or stored, except for cookies and IP address, for which the Cookie Policy applies.

8. If there are other recipients of your personal data

In order to provide the best services and maintain competitiveness in the specific market sector, we communicate certain data within and outside the Sema Group.

We transfer data within the controller’s departments for operational purposes. The parties agree to use the collected personal data exclusively in connection with the services and not to disclose them without prior written approval, except where such disclosure is required by law or specific regulations or requested by a legally authorized institution.

The personal data you enter on this website may also be processed by other legal entities, namely our associated operators within the Sema Group, as well as our processors such as the website maintenance company or partners in the advertising field and real estate agencies.

In the course of these server transfer processes, your data may be transferred strictly for the purposes listed and under the conditions set out in this Privacy Policy.

To comply with our legal obligations, we may disclose data to governmental authorities, for example for the prevention of money laundering. In some cases, we are legally required to communicate data to external parties, including:

  • tax authorities that may require us to report assets held by clients;
  • judicial authorities;
  • lawyers and notaries managing the interests of other parties, and the controller’s auditors.

9. If we intend to transfer your data to another country

If, on occasion, we transmit your information to a country outside the European Economic Area (EEA), we will ensure that the information is adequately protected. We will always ensure that there is an appropriate legal contract covering the data transfer in accordance with standards approved by the European Commission. Furthermore, if the country is deemed not to have data protection laws equivalent to EU standards, we will require the third party to enter into a legal contract reflecting these standards.

10. Your rights regarding personal data

The rights you benefit from under GDPR are correlated with the reason for which we process your personal data, as follows:

Right to be informed. This is an essential right that applies from the very first interactions you have with the controller, including when you visit our website.

Right of access to personal data You have the right to request that we:

  • confirm whether we process your personal data;
  • provide you with a copy of such data;
  • provide other information about your personal data, such as what data we have, how we use it, how we protect it, how long we retain it, what rights you have, how you can file a complaint, and where we obtained your data from, to the extent that such information has not already been provided in this notice.

There are some exceptions, meaning that you may not always receive all the information we process, for example if your request would adversely affect the rights and freedoms of others.

Right to rectification. You have the right to request that we correct personal information you consider inaccurate. You also have the right to request that we complete information you consider incomplete. This right always applies.

Right to restriction of processing. You may request that we restrict the processing of your personal data if:

  • its accuracy is contested, to allow us to verify it;
  • the data is no longer needed for the purposes for which it was collected, but you need it to establish, exercise, or defend a legal claim;
  • you have exercised your right to object and verification of whether our legitimate grounds override yours is pending.

We may continue to use your personal data after a restriction request if:

  • we have your consent;
  • for the establishment, exercise, or defense of a legal claim – for example, in the case of video recordings that you wish us to retain for possible requests by competent authorities.

Right to erasure (right to be forgotten). You have the right to request that we delete your personal data in certain circumstances.

Right to object. You may object at any time, for reasons related to your particular situation, to the processing of your personal data based on our legitimate interest, if you consider that your fundamental rights and freedoms prevail over this interest. You may also object at any time to processing for marketing purposes without providing any reason, in which case we will cease such processing as soon as possible.

Right to data portability. This right applies only to information you have personally provided to us. You have the right to request that we transfer this information to another organization. This right applies only if processing is based on your consent or a contract and is carried out by automated means.

Right to object to automated decision-making or profiling. If the controller carries out such processing, you will be informed so that you can exercise this right.

Right to lodge a complaint. If you wish to make a request regarding your rights, you may contact our Data Protection Officer:

  • by email: dpo@sema.ro, with the subject line “For the attention of the DPO”, or by phone: 0724578782.

If you are dissatisfied with how we have handled your request, you may lodge a complaint regarding our processing of personal data with the National Supervisory Authority for Personal Data Processing (ANSPDCP). Contact details are available at www.dataprotection.ro.

11. Updates to this document

This document on personal data processing is periodically updated to ensure it is correct and accurate. Whenever we make a change, we will publish it on our website and inform you accordingly.

Date of last update: 2026