Privacy policy

1Who is responsible for your data

The controller of personal data is TRAM BUSINESS S.R.L., with its registered office in Galați, Str. Științei nr. 157, CUI 32309862, registered with the Trade Register under no. J2013001228171, share capital 200 lei. For any question about your data, write to us at remusbaston@gmail.com or call us on 0752.904.043.

2What data we process

We only process the data we need to help you:

• Contact details: name, phone, email, the messages you send us by phone, email or WhatsApp.
• Data for your file: the details on your identity document (including your personal ID number), your address, details about the company, partners, directors and beneficial owners, and the documents for the registered office premises. The Trade Register requires them for registration.
• Billing data: the data needed for the invoice and for recording payments.
• Online work sheet: when you accept or decline on the website the work sheet we sent you, we keep the name you typed, the drawn signature, the date and time, your IP address and browser type, as proof of your answer, together with a copy of the work sheet as it was when sent.

The website has no forms, uses no traffic analytics tools and does not track you for advertising.

3Why we process it and on what legal basis

• To provide the service you asked for (consultation, preparing and filing your application): the legal basis is the contract or the steps you take before entering into it (Art. 6(1)(b) GDPR).
• To comply with the law (bookkeeping, invoicing, Trade Register requirements): the legal basis is a legal obligation (Art. 6(1)(c)).
• To reply to you when you contact us: the legal basis is our legitimate interest in answering requests (Art. 6(1)(f)).
• The Google map on the home page only loads with your consent (Art. 6(1)(a)), which you can withdraw at any time from "Cookie settings".

4Who we share data with

We do not sell or rent data to anyone. We only share it as far as needed for the service:

• The National Trade Register Office and, where applicable, the Official Gazette, ANAF or other authorities, when the file requires it.
• Our partners (accountant, registered office provider, the company that makes the stamp), only if you ask us for that service.
• The service providers we use for communication, such as email (Google) and WhatsApp (Meta), only if you choose to write to us on these channels.
• The website's technical providers: Netlify, which hosts the website, and Supabase, where the work sheets sent online and the answers to them are stored.

Some of these providers may process data outside the European Economic Area. In these cases the transfer is based on the safeguards provided by the GDPR, for example the EU–US Data Privacy Framework or standard contractual clauses.

5How long we keep data

• Data from files and correspondence, for the duration of the service and then for as long as proof of it may be requested, usually no more than 3 years.
• Accounting documents and invoices, for as long as accounting law requires.
• Messages that did not lead to a service, no more than 1 year.

6Your rights

You have the right to request access to your data, its correction or deletion, restriction of processing, data portability, and to object to processing. If processing is based on your consent, you can withdraw it at any time.

Write to us at remusbaston@gmail.com and we will reply within one month at most. If you are not satisfied with our reply, you can file a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro.

7The website and third-party services

• The fonts used on the website are hosted on the website itself, so no data is sent to Google Fonts.
• The Google map only loads after you give your consent. Details in our Cookie policy.
• The WhatsApp button opens the WhatsApp app; what you write there is also processed by Meta, under WhatsApp's policy.

We do not make automated decisions about you and do not create a profile of you.

8How we protect data

Data is accessed only by our team and by the partners who need it for the service requested. Paper documents are kept at the office, and electronic ones in password-protected accounts.