This policy explains which personal data we process when you visit www.biantodigital.ro or contact us, why we do it and what rights you have. We comply with Regulation (EU) 2016/679 (GDPR) and the applicable Romanian legislation.
1. Who the controller is
The data controller is Bianto Digital S.R.L., tax identification number 51970797, Trade Register number J2025042635003, with its registered office at Str. Molnar Janos nr. 8, ap. 1, Brașov, Brașov County, Romania.
For any question about your data you can write to us at office@biantodigital.ro.
2. What data we process
- Data sent through the contact form: name, email address, phone number (if you provide it), the service you are interested in and the content of your message.
- Correspondence data: the information you send us by email or phone.
- Technical data: IP address, browser and device type, the pages accessed and the time of access, kept in the server logs for security.
- Website usage and ad interaction data: only if you give your consent, cookie identifiers, the pages visited, the source that brought you to the website and the actions taken (for example sending the form). Details are in the Cookie policy.
- Contract and invoicing data: if you become a client, the data needed to conclude the contract and issue invoices.
3. Why we process it and on what legal basis
| Purpose | Legal basis |
|---|---|
| We reply to quote requests and messages | Steps taken at your request before entering into a contract, Art. 6(1)(b) GDPR |
| We conclude and perform contracts | Performance of the contract, Art. 6(1)(b) GDPR |
| We issue invoices and keep accounting records | Legal obligation, Art. 6(1)(c) GDPR |
| We keep the website secure and prevent abuse | Legitimate interest, Art. 6(1)(f) GDPR |
| We measure website traffic with Google Analytics 4 | Your consent, Art. 6(1)(a) GDPR |
| We measure the results of Google Ads and Meta Ads campaigns and show relevant ads to people who have visited the website | Your consent, Art. 6(1)(a) GDPR |
4. The analytics and advertising tools we use
- Google Analytics 4 (Google Ireland Limited): statistics about visits and pages read. It runs only if you accept the “Analytics” category.
- Google Ads (Google Ireland Limited): measures whether a visit that came from an ad ended with a quote request and allows ads to be shown to people who have visited the website. It runs only if you accept the “Marketing” category.
- Meta Ads, through the Meta Pixel (Meta Platforms Ireland Limited): the same role, for ads on Facebook and Instagram. It runs only if you accept the “Marketing” category.
- Google Search Console: shows us how the website appears in Google searches. It works with aggregated data and places no cookies in your browser.
- Semrush: we use it for keyword analysis and technical checks of the website. It works with public and aggregated data and does not collect data about the website’s visitors.
You can withdraw your consent at any time from the “Cookie settings” link in the footer of every page. You can also manage your advertising preferences directly with the providers: Google My Ad Center and Meta ad preferences.
5. How long we keep the data
- Messages received through the form and correspondence: no more than 3 years from the last interaction, if no contract is concluded.
- Contract data and financial and accounting documents: for the period required by tax and accounting legislation.
- Technical server logs: no more than 12 months.
- Google Analytics data: for the period set in our account, no more than 14 months.
- Cookie data: for the period shown in the Cookie policy or until you withdraw your consent.
6. Who we share the data with
We do not sell personal data. We share it only as far as necessary with:
- the provider of web hosting and email services;
- Google Ireland Limited and Meta Platforms Ireland Limited, for the analytics and advertising services described above, only if you have accepted the respective cookies;
- the provider of accounting services, for invoicing data;
- public authorities, when the law requires us to.
Google and Meta may also process data outside the European Economic Area, including in the United States. In these cases the transfer is based on the EU–US Data Privacy Framework or on the standard contractual clauses approved by the European Commission.
7. Your rights
You have the right of access to your data, the right to rectification, erasure, restriction of processing, data portability and objection, and the right not to be subject to a decision based solely on automated processing. You can withdraw your consent at any time, without affecting the processing carried out until then.
To exercise your rights, write to us at office@biantodigital.ro. We reply within one month of receiving the request.
If you believe your data has been processed unlawfully, you can lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro.
8. Data security
We use an encrypted connection (HTTPS), restricted access to data, strong passwords and backups. No system is completely secure, however; if an incident affects your data, we will inform you as the law requires.
9. Minors
The website is addressed to companies and adults. We do not knowingly collect data from children under 16.
10. Changes to this policy
We may update this policy when our services or the legislation change. The date of the last update is shown at the top of the page.