Policy · Legal

Privacy Policy

Updated: May 26, 2026

Contents

  1. Who we are
  2. What data we collect
  3. How we use data
  4. Legal basis
  5. With whom we share data
  6. How long we keep data
  7. Your rights (GDPR)
  8. Cookies
  9. DPO contact

1. Who we are

Data controller: ByteBluu SRL, registered in Bucharest with the Trade Register. Official company details (registration number, VAT) are available on request via contact@bytebluu.ro.

This policy explains how we collect, use, share, and protect your personal data when you interact with our website (bytebluu.ro), our forms, or our services.

2. What data we collect

2.1 Data you provide directly

  • Identification: first name, last name, company, role
  • Contact: email address, phone number
  • Content of messages you send via our forms
  • Information about your project (budget, deadline, scope)

2.2 Data collected automatically

  • IP address (pseudonymized in logs)
  • Browser type and operating system
  • Pages visited, visit duration, referrer
  • Technical cookies (see section 8)

3. How we use data

  • To reply to messages sent via the contact form
  • To send offers, proposals, and documents related to your project
  • To fulfill contractual obligations if we work together
  • To improve the site and our services (aggregate analytics)
  • To comply with legal obligations (invoicing, tax, GDPR)

We do not sell, rent, or share your data with third parties for commercial purposes.

4. Legal basis

We process your data based on:

  • Your consent (art. 6(1)(a) GDPR) — when you fill in a form
  • Contract performance (art. 6(1)(b) GDPR) — for client projects
  • Legal obligations (art. 6(1)(c) GDPR) — invoicing, accounting
  • Legitimate interest (art. 6(1)(f) GDPR) — security, aggregate analytics

5. With whom we share data

We share data only with processors (technical vendors) that help us operate:

  • Formspree (US, GDPR-compliant) — contact form processing
  • Vercel (US, GDPR-compliant) — hosting and CDN
  • Google Workspace (EU) — email and document storage
  • Linear, Figma, Notion — project collaboration (only with active clients)

All processors have signed agreements (DPA — Data Processing Agreement) that enforce the same protection standards.

6. How long we keep data

  • Form data: 24 months from first contact
  • Project data (active clients): contract duration + 5 years (legal obligation)
  • Invoices and tax documents: 10 years (law)
  • Technical logs: 90 days

7. Your rights (GDPR)

Under GDPR you have the following rights:

  • Access: find out what data we hold about you
  • Rectification: correct inaccurate data
  • Erasure ("right to be forgotten"): request deletion of your data
  • Restriction: limit processing in certain cases
  • Portability: receive data in a structured format
  • Objection: object to processing based on legitimate interest
  • Complaint: file a complaint with ANSPDCP (Romania's data protection authority)

For any request, write to contact@bytebluu.ro. We respond within 30 days.

8. Cookies

We use only strictly technical cookies (language preference, session). We do not use marketing or behavioral tracking cookies. See cookies policy for full details.

9. DPO contact

For any question about this policy or your data: