Privacy Policy
Last updated: January 7, 2026
1. Introduction
At Bigdan Web, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website or use our services.
Please read this Privacy Policy carefully. By accessing or using our website and services, you acknowledge that you have read and understood this Privacy Policy.
2. Information We Collect
We may collect the following types of information:
- Personal Information: Name, email address, phone number, and other similar contact data you provide through our contact forms or email communications.
- Usage Data: Information about how you interact with our website, including the pages you visit, the time spent on each page, the links clicked, and other similar metrics.
- Technical Data: IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system, and platform.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our website and services
- Respond to your inquiries and fulfill your requests
- Send you service-related communications
- Analyze how visitors use our website to improve user experience
- Protect against, identify, and prevent fraud and other illegal activities
4. Sharing Your Information
We do not sell, trade, or rent your personal information to third parties. We may share your information with:
- Service providers who perform functions on our behalf (e.g., hosting, data analysis, payment processing)
- Professional advisors such as lawyers, auditors, and insurers
- Authorities when required by law or to protect our rights
Data Processors
In accordance with GDPR Article 28, we have Data Processing Agreements (DPAs) in place with the following third-party service providers who process personal data on our behalf:
- Google Analytics & Google Tag Manager
Provider: Google LLC (United States)
Purpose: Website analytics and tracking
Data Processing Agreement: Google Data Processing Amendment
Privacy Policy: Google Privacy Policy - Vercel (Hosting Provider)
Provider: Vercel Inc. (United States)
Purpose: Website hosting and content delivery
Data Processing Agreement: Vercel Data Processing Agreement
Privacy Policy: Vercel Privacy Policy
All data processors are contractually bound to process personal data only in accordance with our instructions and GDPR requirements. We regularly review our data processors to ensure continued compliance.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:
- Encryption of sensitive information
- Regular security assessments
- Access controls and authentication procedures
- Secure development practices
While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.
The following are our specific data retention periods:
- Contact Form Data: Retained for 2 years from the date of last contact, unless a longer retention period is required by law or for legitimate business purposes.
- Email Communications: Retained for 3 years from the date of last communication, unless required longer for legal or contractual purposes.
- Analytics Data: Google Analytics data is retained according to Google's data retention settings (default: 14 months). We may configure longer retention periods up to 50 months for aggregated analytics.
- Cookie Consent Data: Retained for 1 year from the date of consent, after which consent will be requested again.
- Technical Data (IP addresses, browser info): Retained for 90 days for security and fraud prevention purposes.
- Legal and Accounting Records: Retained for 7 years as required by Romanian tax and accounting laws.
In some circumstances, we may anonymize your personal data so that it can no longer be associated with you, in which case we may use such information indefinitely without further notice to you.
If you request deletion of your personal data, we will delete it within 30 days of your request, unless we are required to retain it for legal or legitimate business purposes.
7. Cookies and Similar Technologies
We use cookies and similar tracking technologies to collect and track information about how you use our website. Cookies are small text files that websites place on your device to store information about your browsing session.
We use cookies to:
- Understand and save your preferences for future visits
- Compile aggregate data about site traffic and site interactions
- Enhance your user experience on our website
You can set your browser to refuse all or some browser cookies or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly.
8. Your Rights
Depending on your location, you may have certain rights regarding your personal data, including:
Access
The right to request copies of your personal data
Rectification
The right to request correction of inaccurate data
Erasure
The right to request deletion of your personal data
Restriction
The right to request limiting of processing your data
To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below.
Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal data violates data protection laws.
National Authority for the Supervision of Personal Data Processing (ANSPDCP)
B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, București, Romania
Website: www.dataprotection.ro
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time in response to changing legal, technical, or business developments. When we update our Privacy Policy, we will take appropriate measures to inform you, consistent with the significance of the changes we make.
We encourage you to periodically review this page for the latest information on our privacy practices.
10. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at: