Privacy policy

Privacy policy

1. Data about the operator

BDHS SOLUTIONS SRL
Head Office: Ilfov, Sat Afumați, Comuna Afumați, Str. Traian nr. 16
J20 24004488231
C.U.I. 50258805
Email: contact@bdhs-solutions.com
Phone: +40 767 645 471

The operator processes data for the purpose of providing IT consultancy, cyber security and NIS2 services.

2. What data do we collect?

2.1. Data provided directly through the form:

  • full name
  • e-mail
  • phone
  • company / function
  • message content

2.2. Data collected automatically:

  • IP address
  • browser type and OS
  • pages visited
  • cookie identifiers
  • approximate geographical area

This information does not allow direct identification without additional data.

3. Legal grounds for processing

Data processing is done in accordance with Art. 6 GDPR:

  • legitimate interest: assessing requests, securing infrastructure
  • pre-contractual measures: reply to requests
  • consent: non-essential cookies
  • legal obligation: compliance with NIS2 requirements, record keeping

4. Purposes of processing

According to the documents submitted by you (NIS2 + BDHS services), the goals are:

  • reply to requests
  • preliminary technical analysis for services
  • improving website security
  • preventing abuse
  • traffic analysis (statistical cookies)

5. Duration of storage

  • requests sent by form: time needed for processing + internal archiving
  • Technical data: 12 months or in accordance with security policies
  • cookies: as per Cookies Policy

6. Recipients of the data

Data can only be accessed by:

  • BDHS SOLUTIONS SRL staff (strictly necessary)
  • IT hosting and email providers
  • public authorities, if required by law

We do not sell, rent or transfer data for commercial purposes.

7. Transfers outside the EEA

  • If we use global services (Google, Meta etc.), transfers are protected by:
  • Standard Contractual Clauses (SCC)
  • technical and organizational risk assessments

8. User rights

According to art. 15-22 GDPR, you can:

  • right of access
  • right to rectification
  • right to erasure
  • right to opposition
  • right to restriction
  • right to portability
  • the right to withdraw consent

Applications should be sent to contact@bdhs-solutions.com

9. Protection of minors

The website is not intended for persons under 16 years of age. We do not knowingly collect data from minors.

10. Technical and organizational measures

In line with BDHS security services (e.g. EDR/XDR controls, MFA, encryption, IT/OT hardening), we implement:

  • encryption in transit
  • network segmentation
  • access policies
  • anti-abuse monitoring
  • log activities
  • regular security updates