LEGAL DOCUMENT

Privacy Policy

Last updated: 15 mai 2026

This policy explains what personal data we process when you use businessroom.ro, for what purpose, on what legal basis, and what rights you have under the EU General Data Protection Regulation 2016/679 ("GDPR") and Romanian Law 190/2018.

1. Data controller

The data controller is:

[Numele SRL]
Tax ID: [CUI]
Trade Reg. No.: [Nr. Reg. Com.]
Registered office: [Adresa sediu social]
Email: hello@businessroom.ro

2. What data we collect and why

2.1 Newsletter

When you subscribe to the newsletter, we collect your email address and the subscription source. Purpose: to send you the weekly Business Room newsletter. Legal basis: your explicit consent — Art. 6(1)(a) GDPR. You can unsubscribe at any time via the link in every email.

2.2 Forms (Contact, Apply as guest, Pitch)

When you submit a form, we collect: name, email, phone (optional), company, LinkedIn profile, message/bio, and — for the pitch form — uploaded files (pitch deck, one-pager). Purpose: to respond to your request and evaluate potential collaboration. Legal basis: pre-contractual steps at your request (Art. 6(1)(b) GDPR) or our legitimate interest in responding to inquiries (Art. 6(1)(f) GDPR).

2.3 Cookies and local storage

We use strictly necessary cookies for site functionality (language, theme, session preferences) and — with your consent — cookies for analytics and third-party content (YouTube, LinkedIn). Full details in the Cookie Policy.

2.4 Technical and log data

Our hosting provider (Supabase, in the EU) keeps technical logs that may include IP address, user agent, and timestamp for each request. Purpose: security, abuse prevention, debugging. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Logs are auto-deleted after 30 days.

2.5 Analytics (if accepted)

If we adopt Plausible Analytics: aggregated visit metrics (page, country, referrer), with no cookies, no identifying data, no cross-site tracking. Legal basis: legitimate interest. Aggregated data retained for 24 months.

3. Who we share data with

We share data with the following processors:

Supabase — database and storage hosting, EU infrastructure.
YouTube (Google LLC) — video embeds (only if you enable marketing cookies). US transfer covered by Standard Contractual Clauses.
LinkedIn (LinkedIn Ireland) — post embeds (only if you enable marketing cookies).

We never sell your data to anyone. We do not use it for profiling or automated decisions.

4. How long we keep data

Newsletter — until you unsubscribe, or 24 months of inactivity.
Contact forms — 12 months from submission.
Guest / pitch applications — 24 months, or for the duration of any resulting collaboration.
Technical logs — 30 days.
Consent cookie — 6 months from your latest choice.

5. Your rights

Under the GDPR you have the following rights:

right of access (Art. 15);
right to rectification (Art. 16);
right to erasure ("right to be forgotten", Art. 17);
right to restriction of processing (Art. 18);
right to data portability (Art. 20);
right to object (Art. 21);
right to withdraw consent at any time (Art. 7);
right to lodge a complaint with the Romanian DPA (ANSPDCP).

To exercise any of these rights, contact us at hello@businessroom.ro. We respond within 30 days.

6. Complaints to the supervisory authority

If you believe your rights have been infringed, you may file a complaint with the Romanian National Authority for the Supervision of Personal Data Processing (ANSPDCP):

B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, București, cod 010336
Email: anspdcp@dataprotection.ro
Web: www.dataprotection.ro

7. Changes to this policy

We may update this policy to reflect legal or technical changes. The current version is the one published on this page, with the last-updated date shown above. If changes are material, we will notify you via newsletter (if subscribed) and a visible site notice.