Alpha Finance

Professional brokerage services

  • Romana
  • English

Personal data protection

Considering the new regulations on personal data protection and privacy, introduced by EU Regulation 2016/679, which represents the basis of the legislation on the processing of personal data and the protection of such data for EU Member States and which shall apply as of May 25, 2018, we would like to reconfirm our commitment of processing your personal data in a transparent manner and with the observance of all the rights you enjoy under the law. For this purpose, please find hereinafter the main elements that we consider useful for you to know on this topic, in your capacity of "data subject".


1.      What does data processing mean?


Under the UE Regulation 2016/679, "data processing" means any operation or set of operations performed on personal data or on personal data sets with or without the use of automated tools, such as the collection, organization, structuring, storage, adjustment or amendment, extraction, consultation, use, disclosure by transmission, dissemination or other supply, alignment or combination, restriction, deletion or destruction.


In its capacity of controller, Alpha Finance Romania shall always see that the processing of data is characterized by legality, fairness and transparency, the data requested being adequate, relevant and limited to what is required in relation to the purposes for which are being processed.


2.      What categories of personal data do we process?


On a case-by-case basis, AFR processes personal data such as, but not limited to:


·         Identification details (last name and first name, CNP (Personal Identification Number) Identitity document/passport series and number, date of birth, citizenship, signature, image);

·         Contact data (home/residence address, e-mail address, phone number);

·         Geolocation/ traffic data (IP, cookie);

·         Civil status data, data on family members;

·         Financial and transactional data;

·         Data on studies and professional training, workplace.


The list of these data may vary depending on the characteristics of the services and products contracted by you or in connection with which you manifest your interest, on the legal provisions applicable to the activities performed by Alpha Finance Romania and on the AFR's prudential policies.

Personal data may be obtained directly from you or by querying databases, under the conditions of the law.


3.      What purpose do we process personal data for?


Data is processed for the following purposes:


-          providing financial investment services;

-          marketing (special offers, including the promotion of any products and services of AFR, advertising/promotion);

-          transmission to third parties, under the conditions of the law (such as, but not limited to, courier companies/postal services or other agents contracted by AFR for the exercise of its legitimate interests);

-          fulfillment of legal obligations (for example, carrying out audit actions or reporting obligations towards state institutions/authorities, such as ANAF, ASF);

-          for statistical purposes.

In some situations, your personal data may be processed automatically however, without excluding human intervention. For example, to ensure that we meet our legal obligations to determine the appropriateness of the financial instrument / service, respectively to warn you if the financial instrument or service does not correspond to your level of knowledge and experience or to establish the target market.


4.       What happens if you do not want your personal data to be processed by AFR?


Initiation and performance of the business relationship and the fulfillment of the obligations set out by the regulations in force may only be carried out based on the processing of personal data. Should you not want to provide us with the necessary information or object to further processing, we will be unable to initiate or continue the business relationship.

Data processing for marketing purposes makes it possible for us to inform you about Alpha Finance Romania's news and offers. The processing for this purpose may be requested to stop, any time, without affecting the AFR – Client relationship.


5.      To whom may personal data be transmitted to?


The categories of potential recipients of data transfers could be:



·         third-party subcontractors (ex: the investment research service that is outsourced to Alpha Bank Romania);

·        ANAF (the tax authority), in order to comply with FATCA („Foreign Account Tax Compliance Act”) and the CRS (Common Reporting Standard), if your personal dataor the transactions you perform fall within the reporting criteria set by FATCA and / or CRS;

·         ASF (the financial supervisory authority), in order to comply with European and local legislation on transactions reporting and other reporting obligations;

·         shareholders;

·         Alpha Bank Group members;

·         employers;

·         other competent authorities (in order to fulfill legal obligations);

·         agents/attorneys-in-fact, in order to fulfil the legitimate interests of AFR (law firms, companies etc);


6.      Can data be transmitted outside the country?


The processing of personal data may involve the transfer abroad, for the purposes mentioned above. Data may be transferred to countries in/outside the European Union, including the United States of America. In all cases, any transfer shall be made with the establishment of necessary safeguards to ensure the protection of personal data against accidental or illegal damage, loss, alteration, disclosure or unauthorized access, as well as against any other type of illegal processing.


7.      Which are your rights in relation to the protection of personal data?


As of May 25, 2018, EU Regulation 2016/679 has reviewed and extended the scope of the rights of natural persons with regard to their personal data.


Please find below a detailed description of these rights, for a better understanding of their legal content:


a)      Right to be informed: the right to be informed about the data and the characteristics of their processing in your relationship with Alpha Finance Romania;


b)    Right to rectification: the right to obtain from AFR, without undue delay, the rectification/completion of inaccurate personal data concerning you;


c)      Right to erasure: you may express the right for your data to be erased from the records of Alpha Finance Romania, in compliance with the applicable legal provisions in the area of personal data protection;


d)      Right to restriction of processing:may be exercised when one of the following cases applies: (i) the data subject challenges the accuracy of the data or the lawfulness of the processing, (ii) the data subject objects to the deletion of the data when AFR no longer requires the personal data for processing but the data subject requires them to establish, exercise or defend a right in court or (iii) where the data subject objects to the processing for the period of time during which it is checked that the legitimate interests of AFR override those of the data subject;


e)      Right to data portability: consists in the possibility to request AFR to transmit the personal data you provided in a structured format that is currently used and can be readable automatically; the transmission of data may be done directly to another controller only where this operation is feasible in terms of the technical capabilities used by Alpha Finance Romania;


 f)      Right to object: the right to object, at any time, based on legitimate and valid grounds relating to your particular situation, to the processing of personal data, except when there are legal provisions stating otherwise. This right may be exercised under the following conditions: a written request is submitted to Alpha Finance Romania, which will include the data that the objection is requested for and the grounded and legitimate reason relating to your particular situation;


g)      Right not to be subject of an automated individual decision-making process: represents your possibility of requesting AFR not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning the data subject or similarly significantly affecting him or her. With regard to the adoption of a decision based solely on automatic processing, you have the possibility to express your point of view, to request the intervention of a human operator as well as the possibility of challenging such a decision, in the ways described in this information;


h)    Right to lodge a complaint with the National Authority of Surveillance of the Personal Data Processing (ANSPDCP);


i)      Right to file lawsuits.


8.      For how long are personal data processed by Alpha Finance Romania?


Your personal data will be processed for the duration of the entire business relationship with Alpha Finance Romania, and furthermore, in compliance with the legal provisions on the basis of which the terms of processing of such data are regulated (for example, the legal provisions regulating the archiving of documents).






For any request, information or notification about the exercise of your rights, including in the event you wish to withdraw your consent for the processing of data for marketing purposes, you may contact us using the following means of communication:


·         by e-mail, at the address:;

·         in writing at the AFR’ headquarters, located in 237B Calea Dorobantilor, District 1, Bucharest.


We mention that the information presented above shall be permanently available to you in an updated format on