Skip to content
RORequest a quote

Privacy Policy (English summary)

Last updated: octombrie 2026. This page is an English summary of our Privacy Policy, so that you can understand how we handle your data before you contact us. The full policy is published in Romanian at politica de confidențialitate; the Romanian text is the operative legal text and prevails if the two differ. It follows Regulation (EU) 2016/679 (GDPR), Law no. 190/2018 and Law no. 506/2004.

1. Who is the data controller

REALCONT BH SRL, registered office: Calea Floreasca nr. 169, Intrarea B, et. 6, cam. 15, Sector 1, București, tax ID (CUI) 16304499, Trade Register no. J2004005427402 — a company that provides private services to its clients and partners. You can contact us on any data protection matter at office@realcont.ro, by phone at 0765.210.910 or by post at the registered office.

We do not appoint a Data Protection Officer: we are not in any of the situations in Article 37(1) GDPR that make this mandatory (we are not a public authority, our core activity is not large-scale systematic monitoring of individuals and we do not process special categories of data on a large scale). Requests about your data are handled directly by the company’s management at the contact details above.

2. What data we process

  • Identification and contact data — name, e-mail address, phone number — when you contact us through the form, by phone, on WhatsApp or through the virtual assistant (chatbot).
  • Data needed to provide the services you request — the identification data and documents you send us to deliver the service (for example name, contact details and, where relevant, the data needed to prepare documents or issue an invoice), strictly as needed to perform the contract and meet legal obligations.
  • Billing data — the data needed to issue tax documents.
  • Chatbot conversations — the messages you type in the chat window, if that feature is active (see section 6).
  • Technical and usage data — IP address, device and browser type, pages visited, referral source — collected through cookies and similar technologies only with your consent (see the cookie policy, in Romanian).
  • Form security data — to limit automated messages (spam) we temporarily keep a cryptographic value derived from your IP address and browser identifier (an HMAC with a secret site key, from which the IP address cannot be reconstructed); it expires after at most one hour, is physically deleted within at most 24 hours and is not used for anything else.

3. Purposes, legal bases and retention

  • Answering your requests (form, phone, e-mail, WhatsApp, chatbot) and sending quotes — Article 6(1)(b) GDPR, pre-contractual steps at your request — kept for at most 12 months from the last interaction if no contract is concluded.
  • Providing the contracted services (accounting, payroll, consulting) — Article 6(1)(b), performance of the contract — for the duration of the contract plus the general limitation period.
  • Passing documents to our collaborators (law office, other partners) for the requested service — Article 6(1)(b) — same terms as above, limited to the data strictly necessary.
  • Legal accounting, tax and archiving obligations — Article 6(1)(c), legal obligation — for the legal archiving periods (under the Accounting Law no. 82/1991 generally five years, counted from 1 July of the year after the end of the financial year; other laws set different terms for some documents).
  • Temporary storage of messages that could not be delivered by e-mail — Article 6(1)(b) and Article 6(1)(f) (our interest in not losing requests) — at most 180 days, then automatic deletion.
  • Traffic statistics and site improvement through third-party tools — Article 6(1)(a), consent — for the lifetime of the cookies.
  • Marketing and remarketing — Article 6(1)(a), consent — until you withdraw consent; at most 180 days for the stored consent preference.
  • Site security and anti-spam — Article 6(1)(f), legitimate interest — between one minute and one hour (physical deletion within 24 hours).
  • Defending legal claims and preventing fraud — Article 6(1)(f), legitimate interest — until the matter is finally resolved, within limitation periods.

Where we rely on legitimate interest we have carried out a balancing test against your rights; you can ask for information about it by writing to us.

4. Statistics, marketing and cookies

With your consent given through the cookie banner we use third-party tools to understand how the site is used and, where applicable, for marketing campaigns: Google Analytics 4 and Google Tag Manager (Google Ireland Ltd.) only if you accept the “Statistics” category; Google Ads (Google Ireland Ltd.) and Meta Pixel (Meta Platforms Ireland Ltd.) only if you accept the “Marketing” category. We apply Google Consent Mode v2 in its “advanced” form for Google Ads. Before you consent to “Marketing”, Google Ads sets no cookies, receives no advertising identifiers and does not personalise ads. However, when a page loads and when you contact us (form, phone or WhatsApp click), your browser sends Google technical signals without cookies: IP address, browser and device type, the page visited, the time and, if you came from an ad, the parameter in the page address. Google uses them to measure conversions in aggregate and to estimate conversions that cannot be tracked directly, not to build a profile of you. The basis is our legitimate interest in measuring advertising effectiveness (Article 6(1)(f) GDPR); you can object at any time by writing to us. Google Analytics 4, Meta Pixel and the other tools stay off until you consent. You can withdraw consent at any time from “Cookie settings” in the page footer.

WhatsApp: if you write to us through the WhatsApp button, the conversation takes place in the WhatsApp application and is governed by the privacy policy of Meta Platforms Ireland Ltd., over which we have no control. We process only the content of the messages you send us, in order to answer you. If you prefer to avoid this channel, you can write to us by e-mail or through the contact form.

Visit statistics

We count visits to this site with our own tool, without cookies and without storing your IP address. We keep only daily aggregate figures: the page visited, language, country (derived from the IP address in memory, after which the address is discarded), the domain you came from and an anonymous code valid for a single day to count unique visitors. If you accept the “Statistics” category, we also add the device type (phone, tablet, computer) and whether you are a new or returning visitor, through a marker in your browser’s local storage. We respect “Do Not Track” and “Global Privacy Control”: if either is on, we do not count you. Aggregate data is kept for 26 months. The country is derived using IP Geolocation by DB-IP data (CC BY 4.0 licence) stored on this server.

5. Who may receive your data

We do not sell or rent your data. Strictly for the purposes above, it may be accessed by: the collaborating law office (a member of the Bucharest Bar, an independent controller bound by professional secrecy) for the legal services you request; professional partners and collaborators involved in delivering the service, under confidentiality obligations; competent public authorities (ANAF, the Trade Register, the Labour Inspectorate, insurance houses) where the service or the law requires it; IT service providers (hosting, e-mail, maintenance, backup) acting as processors under Article 28 GDPR agreements; statistics and marketing providers (Google, Meta), only with your consent; the AI assistant provider, if that feature is active, as a processor; and legal advisers, auditors and insurers where needed to defend our rights.

6. Virtual assistant (AI chatbot)

If a virtual assistant based on artificial intelligence is active on the site, it gives general information about our services and can take a contact request. The conversation may be processed through a third-party AI technology provider acting as a processor under a data processing agreement. Answers are informative and indicative, may contain inaccuracies and are not individual professional advice. Please do not enter sensitive data (such as a personal numeric code or identity document details) in the chat. You can ask at any time to speak to a person.

7. Messages sent through the contact form

Messages sent through the form are delivered to us by e-mail. If e-mail delivery fails for technical reasons, the message is saved in a private area of the site’s administration panel, accessible only to administrators, so that your request is not lost. These messages are deleted automatically and permanently after at most 180 days, and their number is technically capped. You can ask for immediate deletion of your message by writing to office@realcont.ro. Messages received by e-mail are kept in our mailbox in line with the terms in section 3 (at most 12 months from the last interaction if no contract is concluded).

8. Transfers outside the EEA

As a rule, data is processed in Romania and the European Economic Area. Some digital service providers (for example Google, Meta or the AI assistant provider) may process data, including IP addresses, on servers outside the EEA. Such transfers rely on appropriate safeguards under Articles 44–49 GDPR: the adequacy decision for the EU–US Data Privacy Framework or the standard contractual clauses adopted by the European Commission, supplemented where needed by additional security measures. You can ask for a copy of the applicable safeguards by writing to us.

9. Your rights

  • Access (Art. 15) — to learn what data we process about you and receive a copy;
  • Rectification (Art. 16) — to correct inaccurate data or complete incomplete data;
  • Erasure (Art. 17), the “right to be forgotten” — limited by the legal obligations to keep accounting documents;
  • Restriction of processing (Art. 18) — in the cases set out in the regulation;
  • Data portability (Art. 20) — to receive your data in a structured, commonly used, machine-readable format;
  • Objection (Art. 21) — including to processing based on legitimate interest and, at any time and unconditionally, to direct marketing;
  • Not to be subject to automated decisions (Art. 22), including profiling, with legal or similarly significant effects;
  • Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

How to exercise them: write to office@realcont.ro or to our registered office. We reply within one month of receiving the request; the period may be extended by up to two further months for complex or numerous requests, in which case we tell you within the first month. Exercising your rights is free of charge; for manifestly unfounded or excessive requests we may charge a reasonable fee or refuse, with reasons. To protect your data we may ask for additional identification. Right to complain: you can contact the National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, Bucharest — www.dataprotection.ro — and the competent courts.

10. Other information

Providing identification and contact data is necessary to conclude and perform a contract; without it we cannot provide the services. Providing data for statistics and marketing is always optional and refusing has no consequence for the services. Where the service or a legal obligation requires processing a personal numeric code (CNP), we apply the safeguards of Article 4 of Law no. 190/2018. We do not take decisions based solely on automated processing that produce legal or similarly significant effects on you. Our site and services are for persons with full legal capacity; we do not knowingly collect data of minors under 16. We apply technical and organisational measures appropriate to the risk (Article 32 GDPR) and, in case of a data breach likely to result in a risk to your rights, we notify ANSPDCP within 72 hours and, where the risk is high, you as well. We may update this policy; the version in force is the one published on this page, with the date of the last update shown at the top.

Contact: office@realcont.ro · 0765.210.910 · Calea Floreasca nr. 169, Intrarea B, et. 6, cam. 15, Sector 1, București.

WhatsApp