Privacy Policy
We process only the contact details you send us, and only to reply to you and work with you. We do not sell data or run automated marketing.
1. Who we are
The data controller is THUNDER LIGHTNING & CO S.R.L., which operates the TULICO Energy brand. CUI 48367339 · Trade Register no. J40/11468/2023 · Email: office@tulico.ro.
2. Data we process
- Contact form: name, company, email, phone (optional), the service you are interested in and the project details you write.
- Correspondence: details from emails and calls you send us (name, role, company, email, phone).
- Clients and partners: contact persons named in contracts, offers and invoices.
- Technical data: IP address and browser data, processed automatically by our hosting provider for operation and security.
Please do not send sensitive data, or data about other people without their consent, through the form.
3. Purposes and legal bases (GDPR)
| Purpose | Legal basis |
|---|---|
| Replying to enquiries and preparing proposals | Art. 6(1)(b) pre-contractual steps; Art. 6(1)(f) legitimate interest |
| Performing consultancy contracts | Art. 6(1)(b) performance of a contract |
| Invoicing, accounting and tax obligations | Art. 6(1)(c) legal obligation |
| Website operation and security | Art. 6(1)(f) legitimate interest |
4. How long we keep data
- Enquiries that do not lead to a contract: up to 2 years after the last contact.
- Contract and accounting records: 10 years, as required by Romanian Accounting Law no. 82/1991.
- Server logs: according to the hosting provider's policy, usually a few weeks.
5. Who receives the data
We do not sell or rent personal data. Data may be received only by our website and email hosting provider (as processor), our external accountant, project partners with your consent and under confidentiality, and public authorities where the law requires it. Transfers outside the European Economic Area use GDPR safeguards such as standard contractual clauses.
6. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection, and you may withdraw your consent at any time. Write to office@tulico.ro; we reply within one month. You may also complain to the Romanian data protection authority, ANSPDCP, B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest (www.dataprotection.ro).
7. Security and changes
We use reasonable technical and organisational measures (HTTPS, restricted access, strong passwords). We may update this policy; the current version is the one published here.
Cookie Policy
tulico.ro does not set cookies of its own and does not use analytics or advertising tools. If we introduce any non-essential cookies in the future, we will ask for your consent first and update this page.
Fonts. To display the Montserrat and Lato typefaces, pages load fonts from Google Fonts. Your browser therefore connects to Google's servers, which receive your IP address. Google Fonts does not set cookies. You can find details in Google's privacy policy.
LinkedIn. Links to LinkedIn load no scripts on our site; LinkedIn may set its own cookies only once you visit linkedin.com.
Managing cookies. You can block or delete cookies at any time in your browser settings (Chrome, Firefox, Safari, Edge).
Last updated: 3 November 2026