Best Practices← Back to site

Privacy policy

Last updated: September 2026

1. Data controller

Best Practices S.R.L., Tax ID (CUI) 16189330, Companies Register No. J08/393/2004, registered office in Brasov, Romania.

2. What data we collect

Through the contact form: name, email address, the service you're interested in, and the content of your message. We do not collect other personal data through the site (we do not use analytics or marketing cookies).

3. How the data is used

Solely to respond to your enquiry and, if the conversation continues, to prepare a quote or carry out the collaboration. We do not use the data for marketing purposes without your explicit consent.

4. Legal basis

Consent given by completing and submitting the form (Article 6(1)(a) GDPR).

5. Who receives the data

Messages from the form are processed through the third-party service Web3Forms, used purely as a technical means of delivering the message to our email address. This service may involve a transfer of data outside the European Economic Area (EEA); where this occurs, the transfer is carried out on the basis of the Standard Contractual Clauses approved by the European Commission, under Article 46 GDPR. We do not sell or share data with other third parties for marketing purposes.

6. How long we keep the data

For as long as needed to handle your enquiry or collaboration, and afterwards in line with applicable legal retention obligations (e.g. contractual/financial records, if a contractual collaboration follows).

7. Your rights

Access, rectification, erasure, restriction of processing, objection, and data portability. Any request can be sent to office@bestpractices.ro. You have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP).

8. Security

Data submitted through the form is protected via an encrypted connection (HTTPS) and is not stored publicly on the site.

Legislation →