Privacy Policy

1. Introduction

BOMAD STRATEGY(“we”, “the operator”) respects the right to privacy of its visitors and customers. This Privacy Policy describes how we collect, use, store and protect personal data, in accordance with:

• Regulation (EU) 2016/679 – General Data Protection Regulation (GDPR)
• Law no. 506/2004 on the processing of personal data in the electronic communications sector
• National legislation applicable in the field

By accessing our website and/or using our services, you confirm that you have read and understood this policy.

2. What Personal Data We Collect

2.1 Data provided directly by you.

We collect data that you provide to us directly, through:

• Filling out the contact form (last name, first name, email, phone number, company, message)
• Requesting a service or consulting offer
• Subscribing to the newsletter or marketing communications (if applicable)
• Correspondence via email, phone or other channels

2.2 Data collected automatically

When you access our website, we automatically collect certain technical information:

• IP address and browser type
• Operating system and device type
• Pages visited, session duration and date/time of access
• Traffic source (referrer URL)
• Cookies and similar technologies (detailed in the Cookies Policy)

2.3 Data about legal entities (B2B)

Du to the fact that BOMAD STRATEGY operates predominantly in the B2B environment, we can also process contact data of representatives of partner companies or potential clients (authorized individuals, administrators, financial directors, etc.).

3. Purposes and Legal Grounds of Processing

4. Data Recipients – To Whom We Transmit Data

BOMAD STRATEGY does not sell or rent your personal data. We may transmit data, in a limited and secure manner, to:

• Technical service providers: hosting, email platforms, web analysis tools (e.g. Google Analytics) – based on processing agreements in accordance with art. 28 GDPR
• Contractual partners involved in the delivery of ordered services – strictly to the extent necessary
• Public authorities or control bodies – exclusively when we are legally obliged to do so (ANAF, courts, etc.)
• Accountants, auditors, legal consultants – under confidentiality obligation

We do not transfer data outside the European Economic Area (EEA) without ensuring the appropriate guarantees provided for by the GDPR (Chapter V).

5. Your Rights as a Data Subject

Under the GDPR, you have the following rights:

• Right of access (art. 15) – to receive a copy of the data we hold about you
• Right to rectification (art. 16) – to correct inaccurate or incomplete data
• Right to erasure / “right to be forgotten” (art. 17) – to request the deletion of data, under the conditions provided by law
• Right to restriction of processing (art. 18) – to limit the way in which we use your data
• Right to portability (art. 20) – to receive data in a structured, machine-readable format
• Right to objection (art. 21) – to object to processing based on legitimate interest or direct marketing
• Right not to be subject to automated decision-making (art. 22) – including profiling with significant effects
• Right to withdraw consent at any time, without affecting the lawfulness of the processing previous

To exercise any right, send a written request to: contact@bomadstrategy.ro or to the registered office address.

The response period is a maximum of 30 calendar days (extendable by another 60 days in complex cases, with prior notification).

You also have the right to file a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP): www.dataprotection.ro.

6. Data Security

BOMAD STRATEGY implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction or disclosure, including:

• HTTPS/TLS encrypted connections for data transmission on the website
• Restricted access to personal data, on a “need-to-know” basis
• Secure passwords and two-factor authentication for internal systems
• Periodic reviews of security policies

In the event of a security incident affecting your data, we will notify you in accordance with art. 34 GDPR, as soon as possible.

7. Cookies

Our website uses cookies and similar technologies. Full details on the types of cookies used, their purpose and how to control them are available in our Cookies Policy.

8. Links to Third Party Sites

The website may contain links to external sites (e.g. LinkedIn, partners). BOMAD STRATEGY is not responsible for the privacy practices of these sites and we recommend that you consult their individual policies.

9. Privacy Policy Changes

We reserve the right to update this policy periodically to reflect legislative, technical or operational changes. The updated version will be published on the website with an indication of the date of the last revision. Your continued use of the website after the publication of the changes constitutes your acceptance.

10. Contact

For any question or request regarding the processing of personal data: