Privacy Policy
This policy explains how BMadlen 071727 SRL (“BMadlen”, “I”, “we”) processes personal data when you visit bmadlen.com or contact me through it. I follow the EU General Data Protection Regulation (GDPR) and Romanian data protection law.
1. Who is responsible for your data
For anything related to this policy or your data, write to the email above.
2. What data I process, why, and on what basis
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact form, email, WhatsApp, booking a call | Name, email, topic, your message, and any details you choose to share (e.g. phone number) | To reply to your inquiry and prepare a proposal | Steps at your request before entering into a contract, and my legitimate interest in answering business inquiries (GDPR Art. 6(1)(b) and (f)) |
| Working together | Contact and invoicing details, project communication | To deliver services, issue invoices, keep legally required records | Contract and legal obligations (Art. 6(1)(b) and (c)) |
| Analytics (only if you accept cookies) | Pseudonymous usage data such as pages viewed, approximate location, device and browser type, and cookie identifiers | To understand how the site is used and improve it | Your consent (Art. 6(1)(a)); you can withdraw it at any time |
| Technical operation of the site | IP address and request data in server logs | Security, preventing abuse, keeping the site running | Legitimate interest (Art. 6(1)(f)) |
I do not sell your personal data and I do not use it for automated decision-making or profiling that has legal effects on you.
3. Cookies and similar technologies
This site stores one small item in your browser (in local storage) to remember your cookie choice. Analytics and measurement tags are loaded through Google Tag Manager only after you click “Accept” in the cookie banner. If you decline, these tags are not loaded. You can change your choice at any time with the “Cookie settings” link in the footer, and you can also delete cookies in your browser settings.
4. Who receives your data
Your data is shared only with providers that help me operate the site and my business, under data processing terms where required:
- web hosting and email providers;
- Google (Tag Manager and any analytics tools configured through it), only if you accept cookies;
- scheduling and messaging tools you choose to use to contact me (such as Google Calendar appointment booking or WhatsApp);
- accountants, legal advisers and public authorities, when required by law.
If a provider processes data outside the European Economic Area, I rely on a valid transfer mechanism such as the EU–US Data Privacy Framework or Standard Contractual Clauses.
5. How long I keep data
I keep data only as long as needed for the purpose it was collected for. Inquiries that do not lead to a project are deleted once the conversation is over. Client and invoicing records are kept for the periods required by Romanian accounting and tax law. Analytics data is kept according to the retention settings of the analytics tool. Server logs are kept for a short period for security purposes.
6. Your rights
Under the GDPR you have the right to:
- access your personal data and receive a copy;
- have inaccurate data corrected;
- have your data erased, where the law allows;
- restrict or object to certain processing, including processing based on legitimate interest;
- receive your data in a portable format, where applicable;
- withdraw your consent at any time, without affecting processing done before withdrawal.
To exercise any of these rights, email contact@bmadlen.com. I will reply within one month.
You also have the right to lodge a complaint with a data protection authority. In Romania this is the National Supervisory Authority for Personal Data Processing (ANSPDCP), dataprotection.ro, or the authority in your own EU country.
7. Security
I use reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS), access controls and limiting data collection to what is necessary. No method of transmission over the internet is completely secure, so please avoid sending sensitive information through the contact form.
8. Children
This site is intended for businesses and adults. I do not knowingly collect personal data from children.
9. Changes to this policy
I may update this policy from time to time. The date at the top shows when it was last revised.