1. The platform provider
CESIRO TRADING SRL develops and operates the Eva-Accounting platform — accounting, payroll, tax filings, e-invoicing and online store integrations, for Romanian accounting practices and companies.
| Company | CESIRO TRADING SRL |
|---|---|
| Tax ID | 37705493 |
| Trade Register | J01/685/2017 · EUID ROONRC.J1/685/2017 |
| Registered office | Str. Theodor Pallady 5, Alba Iulia, jud. Alba, România |
| [email protected] | |
| Service address | https://acc.eva-org.com |
2. How to write to us
All correspondence goes through [email protected]. So that we can help straight away, please include:
- the company or practice name and its tax ID;
- the account subdomain (the address where you sign in);
- the screen and the exact steps that lead to the problem, with the approximate date and time;
- a screenshot, if relevant — never including passwords.
Never send us passwords, two-step authentication codes or your digital certificate. Our staff will never ask for your password, through any channel.
3. Request types and response times
| Subject | Where | Indicative deadline |
|---|---|---|
| Technical support, application errors | [email protected] | 1–2 working days |
| Quotes, subscriptions, invoicing | [email protected] | 2 working days |
| Personal data requests (GDPR) | [email protected], marked “GDPR” | 30 days at the latest |
| Consumer complaints | [email protected] · see Consumer information | 30 days at the latest |
| Security issues | [email protected], marked “SECURITY” | acknowledged within 72 hours |
Working hours: Monday to Friday, 09:00–17:00 (Romanian time), excluding public holidays. Major availability incidents are handled outside those hours as well.
4. Responsible disclosure of a security issue
If you discover a vulnerability in Eva-Accounting, please tell us before making it public:
- Write to [email protected] with the subject “SECURITY”, briefly describing the issue, its impact and the steps to reproduce it.
- We acknowledge receipt within 72 hours and give you an initial assessment within 10 working days at the latest.
- We keep you informed until the fix is deployed and, if you wish, credit you publicly once the case is closed.
Rules for security researchers:
- do not access, alter or exfiltrate data that is not yours; stop testing as soon as you have demonstrated the issue;
- do not degrade the service: no denial-of-service testing, no bulk automated traffic, no attacks on users or staff (social engineering, phishing);
- do not publish details before a fix is deployed or before a jointly agreed date;
- comply with the law; good-faith research within these limits will not be met with action from us.
The same information is available in standard form at /.well-known/security.txt.
5. Personal data protection
Requests concerning your rights (access, rectification, erasure, restriction, portability, objection) go to [email protected]. Details, legal bases and the supervisory authority’s address: Privacy Policy.
If you are an employee of a company whose accountant uses Eva-Accounting, the controller of your data is your employer, not us: address the request to them first, and we will help them answer.
6. The platform’s legal documents
- Terms of Service — the contract of use;
- Privacy Policy — processing of personal data;
- Cookie Policy — the complete list of cookies;
- Data Processing Agreement — Article 28 GDPR, for practices and companies;
- Consumer information — ANPC and the European ODR platform.
Provider identity
- Company
- CESIRO TRADING SRL
- Tax ID
- 37705493
- Trade Register
- J01/685/2017 (EUID ROONRC.J1/685/2017)
- Registered office
- Str. Theodor Pallady 5, Alba Iulia, jud. Alba, România
- [email protected]
- Platform
- Eva-Accounting — https://acc.eva-org.com