Privacy Policy
This policy explains what personal data reaches RomaniaAccount Pro through this website, its forms and the accounting work we do for client companies, why we use it, who receives it, how long we keep it and what rights you have.
Who is responsible for your data
The controller of your personal data is RomaniaAccount Pro, Strada Kiseleff 32, 010789 Bucharest, Romania. You can reach us at info@accounting-romania.com or on +40 21 666 7777, Monday to Friday, 9:00 to 18:00 Bucharest time. How this site uses cookies and similar storage, and how to change your choice, is set out in our Cookie Policy.
What we collect, why, and on what legal basis
Each activity below is listed with the data we receive, what we use it for and the legal ground under the GDPR that allows it.
| Activity | What we receive | Why | Legal basis |
|---|---|---|---|
| Visiting the site | The request data every website receives: IP address, browser and the page asked for. There is no account and no login. | To deliver the site and protect it from abuse | Our legitimate interest in a secure, working site |
| Analytics, on unless you turn it off | How pages are used, measured by Google Analytics and Microsoft Clarity | To see which pages help visitors and which do not | Our legitimate interest in knowing how the site is used; you can object at any time by turning analytics off in the cookie settings |
| Writing to us through the contact page or the home page | Name, email, phone if given, company name or CUI if given, the topic chosen, a ready-made company reference if any, your message, and the visit context described in the next section | To answer your enquiry and prepare an offer | Steps taken at your request before a contract; our legitimate interest for the visit context |
| Starting an engagement on the onboarding page | Contact details, country of residence, the company (an existing SRL or one to be set up), the services chosen, the timeline, the source-of-funds acknowledgement and your message. The page takes no files: identity documents are asked for after first contact. | To review the request and prepare the engagement | Steps taken at your request before a contract |
| Paying an invoice on the payment page | Invoice number, the name or company on the invoice, email, amount, currency and the payment method chosen | To match the payment to the invoice | Performing our contract with you |
| Keeping your company's books, payroll and returns | The engagement records, correspondence and our invoices; the accounting, payroll and tax records of the client company, which carry personal data of its directors, shareholders and employees, such as identity data, employment contracts and salaries | To perform the accounting contract and file what the company must file | Performing the contract with the client company, and the legal duties of accounting, tax filing and the REGES-Online employee register |
| Checking who a new client is | Identity data of the directors and beneficial owners of the client company, and the source-of-funds information | To meet the identity checks of the anti-money-laundering law (Law 129/2019) where that law applies to our work | A legal obligation |
Until online payment is switched on, a payment request reaches us by email and no payment is taken on this site; once it is, card details are entered on Stripe's page and never reach this site. The map on the contact page sends a request from your browser to Google only when you press "Show map".
Context sent with every form
With every form on this site (the contact page, the enquiry on the home page, onboarding and invoice payment) the site sends us, next to what you typed, the technical context of your visit:
- the IP address of your connection
- an approximate, city-level location derived from that address by the network, never your device's own position
- the network: your internet provider or network operator
- your browser, its version and the operating system
- the language your browser asks for
- the referring page: the page or search you came from
- your path through the site: the pages viewed before writing, and the visit number
- time on page before sending
- the device type, screen size and window (viewport) size
- whether cookies are present, your analytics setting, and the analytics id (the Google Analytics client id) unless you turned analytics off
We use this context because of our legitimate interest in answering your enquiry well and in telling real enquiries from spam.
Cookie contents are never sent with a form: only whether cookies are present or absent, plus the analytics id unless you turned analytics off.
The stored parts of the visit (your first visit, the visit number and the pages before this one) are kept on your device unless you turn analytics off. With analytics off, the context covers the page you send from and nothing earlier.
We keep this context with the enquiry email it arrives in, and for as long as we keep that email.
Who receives your data
We share personal data only with the providers and bodies below, and only what each needs for its task.
| Recipient | What it does for us | When it receives data |
|---|---|---|
| Cloudflare | Hosts and protects the site; runs the Turnstile security check on pages with a form; keeps a short-lived counter that limits repeated sending and, if delivery fails, a held copy of the enquiry | On every visit; on every form sent |
| Resend | Delivers form emails to info@accounting-romania.com | On every form sent |
| Our email provider | Hosts the mailbox that receives the emails sent to our address | On every form sent and every email you write to us |
| Google Analytics; Google Maps on the contact page | Analytics on every visit unless you turn it off; the map only when you press "Show map" | |
| Microsoft | Microsoft Clarity | On every visit unless you turn analytics off |
| Stripe | Processes card payments | When you pay an invoice by card, once card payment is available on the payment page |
| NOWPayments | Processes crypto payments | When you pay an invoice in crypto, once crypto payment is available on the payment page |
| Public authorities we file with for a client | ANAF for tax returns, SAF-T and RO e-Factura through SPV; the trade register ONRC for formation, changes and liquidation; the Labour Inspectorate through REGES-Online for employment contracts; the client's bank where we help open an account | Only for the client's own company, and only what the filing requires |
| Professionals who work with us on a client's file | The CECCAR-registered accounting firm that performs the work, where a partner firm performs it; a partner lawyer where a bespoke document has to be drafted | Only for that client's file, and only what the task needs |
We do not sell personal data, we send no newsletter and nothing goes to a messenger app. Where a provider processes data outside the European Economic Area, the transfer relies on the safeguards in that provider's data processing terms. Google Search Console gives us aggregated search figures; the site sends it nothing about you.
How long we keep it
- Enquiries that do not lead to an engagement: deleted once they no longer serve the enquiry, together with their visit context.
- The visit context sent with a form: with the enquiry email, for as long as we keep that email.
- The counter that limits repeated sending, and an enquiry held after a failed delivery: both expire automatically and are used for nothing else.
- Analytics data: for the retention period set in our Google Analytics and Microsoft Clarity accounts, after which those tools delete it.
- Our own accounting records, including the invoices we issue: 10 years from the end of the financial year in which they were drawn up, under article 25(1) of the Accounting Law 82/1991.
- The client company's records we work on: keeping the statutory archive is the client company's own duty under the same article, 10 years for books and supporting documents and 50 years for payroll statements. The engagement letter says what we hold during the engagement and what we hand back when it ends.
- Identity-check records under the anti-money-laundering law: for the period that law sets.
Your rights, complaints and changes
Your rights
You may ask for access to the personal data we hold about you, for its correction or deletion, and for its use to be restricted. You may object to processing based on our legitimate interest, ask to receive data you gave us in a portable format, and withdraw consent at any time, for analytics through the cookie settings described in our Cookie Policy. Withdrawing consent does not affect what was done before.
How to use your rights
Write to info@accounting-romania.com and say which right you want to use. We may ask you to confirm who you are before we act, so that your data is never handed to someone else.
Complaints to ANSPDCP
You may complain to the Romanian supervisory authority, Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP, the national data protection authority), or to the data protection authority of the country where you live or work.
Changes to this policy
This policy changes when the tools on this site or our services change. The "Last updated" date at the top of the page moves with every change.