Privacy policy

1. The controller

The controller is HABITMON DIGITAL SRL, CUI 48476590, J12/3002/2023, Muncii nr. 89-91, 400641 Cluj-Napoca, jud. Cluj, România. For any question about your data, write to [email protected].

2. What data we process and why

• Visiting the site: technical data (IP address, browser type, page visited), processed by our hosting provider to deliver and secure the site. Legal basis: our legitimate interest in operating a secure site (Art. 6(1)(f) GDPR). We use no analytics or marketing cookies.
• Booking a meeting and correspondence: your name, email address, company, role and message, to organise the meeting and reply. Legal basis: steps taken at your request before a contract (Art. 6(1)(b)) and our legitimate interest in answering requests (Art. 6(1)(f)).
• B2B prospecting: if you received an email from us, we used professional contact data (name, role, work email and phone, company) obtained from public sources such as public company registers, the company's website or public professional profiles. The purpose is to present services relevant to your role. Legal basis: our legitimate interest in promoting services to businesses (Art. 6(1)(f)).
• Clients: contract and invoicing data, to perform the contract (Art. 6(1)(b)) and meet legal obligations, including accounting and tax (Art. 6(1)(c)).

3. Your right not to be contacted

You can object to prospecting at any time: reply "stop" to our email or write to [email protected]. We will never contact you again, for any service. We keep only the minimum needed (your email address) on a suppression list so we can honour your request.

4. How long we keep data

• Prospecting data: at most 12 months from the last contact, unless you become a client or ask us otherwise; the suppression list is kept for as long as needed to respect your objection.
• Correspondence and meetings: at most 3 years from the last interaction.
• Contract and accounting records: for the periods required by accounting and tax law.

5. Who we share data with

Data is accessed only by the brsblue team and by providers that help us operate (hosting: Cloudflare; email and booking: Google; CRM), acting as processors under contract. We do not sell personal data.

Some providers may process data outside the European Economic Area (for example, in the US). In those cases we rely on European Commission adequacy decisions (including the EU-US Data Privacy Framework) or standard contractual clauses.

6. Your rights

• right of access
• right to rectification
• right to erasure
• right to restriction of processing
• right to data portability
• right to object, including to prospecting
• right to lodge a complaint with the Romanian data protection authority, ANSPDCP (www.dataprotection.ro). To exercise your rights, write to [email protected]; we reply within one month.

7. Automated decisions and security

We do not make decisions with legal effects on you based solely on automated processing. We apply appropriate technical and organisational measures to protect data.

8. Changes

We may update this policy; the version in force is the one published on this page, with its last-updated date.