1. The Data Controller

The servers and associated IT infrastructure are managed by RUFF ENERGY CONTROL LTD EOOD, based in Bulgaria, Ruse, Kapitan Lt Evstati Vinarov no 10 ap 39.

2. Purpose of using servers

Servers are made available exclusively to authorized employees, collaborators and partners, for the purpose of:

  • carrying out commercial and administrative activities,
  • management of accounting data and internal documents,
  • remote access to company applications and resources.

3. Categories of processed data

By connecting to the server they can be processed:

  • user identification data (name, user, IP address, authentication logs),
  • activity in the remote session (logon/logoff, accessed files),
  • technical data required for security and monitoring.

4. Legal basis

The data are processed according to art. 6 para. (1) lit. b and f GDPR:

  • to execute employment/collaboration contracts,
  • for the legitimate interest to ensure the security and proper functioning of the IT infrastructure.

5. Monitoring & SecurityMonitoring & Security

  • Unauthorized access is prohibited,

  • All server activities can be monitored and recorded (security logs, RDP sessions, file activity),

  • Monitoring is done exclusively for security and internal audit purposes.

6. Data storage

  • Logs are kept for a period of 6 months,

  • After the period expires, they are deleted or anonymized.

7. Users' rights

Under the GDPR, you have the right to:

  • access to own data,
  • rectification and deletion,
  • restriction of processing,
  • opposition to processing (within the law),

Solicitările se trimit la: gdpr@ruffe.pro.

8. Third Party Transfers and Access

Data is not transferred to any entity, except as required by law or accredited IT providers (eg hosting, cloud).

9. User responsibility

  • Any improper use or unauthorized access may attract disciplinary sanctions and/or civil/criminal liability.

  • The user has the obligation to maintain the confidentiality of credentials and the data to which he has access.

10. Updates

This policy is updated periodically. The current version is permanently available on https://ruffe,pro/politica-confidentiality.