Compliance

GDPR Compliance

How e-bon (Crisposoft SRL) processes personal data under the GDPR — data controller, your rights, lawful processing purposes, and how to exercise them.

This page mirrors the legal text published at https://app.e-bon.ro/en/gdpr for documentation discoverability. The portal version is the authoritative legal version; this docs copy is provided as a developer-facing reference. If the two diverge, the portal page wins.

Related legal pages: Privacy Policy · Terms & Conditions. Fiscal-compliance siblings: ANAF reporting (JE / MF / P7B) · F4109 — ANAF inactivity declaration.

Your data rights and our commitment to protecting your information under the General Data Protection Regulation.

Know your data controller

Crisposoft SRL is the data controller for personal data processed through the E-BON platform. We are committed to protecting your data in compliance with GDPR and Romanian data protection legislation.

Company: Crisposoft SRL
Location: Romania
Data Protection Officer: privacy@e-bon.ro

Understand your rights

Under GDPR, you have the following rights regarding your personal data:

Access your data

You can request a copy of all personal data we hold about you. We will respond within 30 days.

Correct your data

You can request correction of inaccurate or incomplete personal data at any time.

Delete your data

You can request deletion of your personal data, subject to legal retention obligations for fiscal records.

Fiscal data cannot be erased on request during the legally mandated retention window. Romanian fiscal legislation requires e-bon to retain receipts, X/Z reports, and Jurnal Electronic (JE) archives for 10 years. While that window is open, those records are kept under the legal-obligation override of GDPR Article 17(3)(b) and will not be deleted, even if you submit a Right to Erasure request.What this means in practice:

Account-level data (your contact details, login credentials, non-fiscal preferences) can be erased on request.
Fiscal records tied to a closed day (receipt payloads, X/Z report contents, JE XML, MF entries, ANAF submission history) are retained for the full 10-year period and are out of scope of erasure until that period elapses for the document in question.
After the retention window expires for a given fiscal record, it falls back under standard erasure rules.

If you need to close your account before the fiscal-retention window expires, your fiscal data remains stored under our legal-obligation basis until that window closes; only then is it eligible for deletion.

Export your data

You can request your data in a structured, commonly used, machine-readable format (JSON/CSV).

Object to processing

You can object to the processing of your personal data for specific purposes, including direct marketing.

Restrict processing

You can request that we limit the processing of your personal data under certain circumstances.

Understand how we process your data

We process personal data for the following purposes:

Deliver the service

To provide the E-BON platform, including device management, receipt processing and fiscal reporting.

Meet legal obligations

To comply with Romanian fiscal legislation, including mandatory data retention and ANAF reporting requirements.

Protect the platform

To prevent fraud, secure the platform and ensure the integrity of fiscal operations.

Improve the service

To analyse anonymised usage patterns and improve the platform's functionality and performance.

Exercise your rights

To exercise any of your data protection rights or to make a complaint, contact our Data Protection Officer at privacy@e-bon.ro.

We will respond to all data protection requests within 30 days.

Edit this page

ANAF reporting — JE, MF, P7B and submission states

How to generate the Jurnal Electronic XML and Memorie Fiscală archive with e-bon, sign them with your P7B certificate, and track the four ANAF submission states.

How Crisposoft SRL collects, uses, discloses and protects personal data when you use the E-BON platform — under GDPR and Romanian data protection law.