Privacy Policy

Last updated: 20 October 2026

This policy explains what personal data we process when you visit bcrm.ro or contact us, why we do it and what rights you have under Regulation (EU) 2016/679 (GDPR).

1. Data controller

TDACRM Solutions SRL, Str. Ion Câmpineanu nr. 23, Sector 1, Bucharest, Romania, VAT ID RO45930062, Trade Register J2022006628406, operating the bCRM brand, is the controller of your personal data.

Data protection contact: denis@bcrm.ro or +40 740 267 964.

2. Data we collect

• Contact form: name, email address, phone number (optional), company (optional), topic of interest and your message.
• Email and phone: the details and content of messages and calls you send us directly.
• Technical data: IP address, approximate country, browser type and request logs, processed by our hosting provider for security and delivery of the site.

We do not use analytics, advertising pixels or tracking cookies on bcrm.ro.

3. Purposes and legal bases

• Answering your request and preparing an offer, steps taken at your request before a contract (Art. 6(1)(b) GDPR).
• Performing a contract for Bitrix24 implementation, integration, custom development or support (Art. 6(1)(b)).
• Legal obligations, such as invoicing and keeping accounting records under Romanian law (Art. 6(1)(c)).
• Legitimate interest in keeping the site secure and the form free of spam (Art. 6(1)(f)).

We do not send newsletters or marketing messages without your separate consent.

4. How long we keep data

• Contact form messages and related correspondence: 3 years from our last interaction.
• Contracts and invoices: 10 years, as required by Romanian accounting law.
• Technical logs: kept by the hosting provider for short periods, up to 6 months at most.

5. Who receives the data

• Cloudflare, Inc.: hosting, content delivery, security and the server function that processes the contact form.
• Resend (Plus Five Five, Inc.): delivers the contact form message to our mailbox.
• BunnyWay d.o.o. (Bunny Fonts, Slovenia): delivers the web fonts; it receives your IP address but sets no cookies.
• Our accountants and public authorities, when the law requires it.

We never sell your data or share it with third parties for their marketing.

6. International transfers

Cloudflare and Resend may process data in the United States. These transfers rely on the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.

7. Our Bitrix24 apps

Data processed inside our apps installed from the Bitrix24 Market (WASync, FacturoSync, ROSMS, SendSMS, MailAnyone) is covered by each app's own terms and privacy information, available on its Market page and inside the app.

8. Your rights

• Access (Art. 15), rectification (Art. 16) and erasure (Art. 17) of your data.
• Restriction of processing (Art. 18) and data portability (Art. 20).
• Objection (Art. 21), including to direct marketing.
• Withdrawing consent at any time, without affecting earlier processing.

Send your request to denis@bcrm.ro. We reply within 30 days.

9. Complaints

You may complain to the Romanian supervisory authority, ANSPDCP, B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, Bucharest, www.dataprotection.ro.

10. Cookies

See our Cookie Policy.

11. Changes

We may update this policy. The current version and its date are always published on this page.