Last updated: 17 July 2026
This policy describes what personal data we handle when you visit our website or get in touch with us, and what rights you have over that data. We follow the General Data Protection Regulation (GDPR).
BGDT is a two person development team based in Cluj-Napoca, Romania. The controller of data submitted through this site is Dávid Balázs-Gál, operating as a registered sole trader (PFA) in Romania. Name: Balázs-Gál Dávid Persoană Fizică Autorizată Registered office: Str. Corneliu Coposu nr. 169, et. 1, ap. 19, Cluj-Napoca, Cluj County, Romania Trade register no.: F2026042872003 Tax ID (CUI): 55549228 Email: bgdt.tech@gmail.com Phone: +40 740 048 856 We have not appointed a data protection officer, because our activity does not reach the scale where one is required. For privacy matters, reach us at the email above.
Contact form: your name, email address, phone number, company name and the message itself. Name and email are required, the rest is optional. If you arrive from the Services page with a package selected, the chosen package and billing mode are saved too, so we can see what you asked a quote for. Consent record: when you submit the form we store the time of submission, so we can demonstrate that consent was given. Abuse protection: on submission our system briefly stores a technical identifier so it can limit repeated submissions in a short window. We do not collect special category data (health, political, religious and similar), and we run no analytics or advertising trackers.
To answer your enquiry and prepare a quote. Legal basis: your consent, given when you submit the form, and taking steps at your request before entering into a contract. To keep the website secure and working, for example to filter out automated spam submissions. Legal basis: our legitimate interest in protecting our service. To meet any legal obligations we may have, for example if an authority makes a lawful request. Legal basis: compliance with a legal obligation. We do not use your data for automated decision making or profiling, and we do not send marketing messages you did not ask for.
We only use cookies that are strictly necessary, which is why there is no cookie banner on this site. They are: theme: remembers whether you chose the light or dark theme. Lasts one year. NEXT_LOCALE: remembers which language you chose. Cloudflare Turnstile: a technical cookie for the spam filter on the contact form, which tells humans apart from automated submissions. admin-session: used only for signing in to our own admin panel. As a visitor you never receive it. We do not use Google Analytics, Facebook Pixel or any other tracking or advertising cookie.
We do not sell your data and we do not pass it to third parties for marketing. To operate, we rely on the following providers as data processors: Google (Firebase and Google Cloud): serving the website and storing submitted messages. Data is stored inside the European Union, in a European region. Resend: sending us a notification email about a new enquiry. Cloudflare (Turnstile): protecting the form against spam. We have a data processing relationship with each of them, and each acts under its own privacy policy. Where a provider transfers data outside the European Union, it does so under the standard contractual clauses approved by the European Commission.
Messages sent through the contact form are kept for 24 months from our last contact, so that we have the history if you come back to us. After that we delete them. If a contract is formed between us, we keep the project correspondence and documents for as long as they may be needed in a possible legal dispute. The technical identifiers stored for abuse protection expire automatically within a few hours. You can ask us to delete your data sooner at any time, at the email address below.
Under the GDPR you can ask us for the following: Access: a copy of the data we hold about you. Rectification: correction of inaccurate data. Erasure: deletion of your data, where we no longer have a reason to keep it. Restriction and objection: restriction of processing, or objection to processing based on legitimate interest. Portability: the data you gave us, in a machine readable format. Withdrawal of consent: where processing is based on consent, you can withdraw it at any time. This does not affect the lawfulness of processing before withdrawal. Write to bgdt.tech@gmail.com and we will respond within one month. There is no charge. If you are not satisfied with our answer, you can lodge a complaint with the Romanian data protection authority (Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal, ANSPDCP, Bucharest, B-dul G-ral. Gheorghe Magheru 28-30, anspdcp.ro), or with the supervisory authority where you live.
The website is served over an encrypted connection (HTTPS). Submitted messages are stored in a database that no browser can reach directly, only our signed in admin panel, using Google sign-in restricted to a pre-approved list of email addresses. If a data breach did happen and it was likely to put you at risk, we would notify the authority within 72 hours and inform you as well.
If the way we handle data changes, we will update this page and change the date above. For significant changes we will also tell you directly, if we have a way to reach you.
For any question or request about privacy, write to bgdt.tech@gmail.com.