Privacy policy

Last updated: 22 September 2026

bng.eu is a presentation site: no accounts, no shopping cart, no trackers. The only place you give us personal data is the contact form. Below is exactly what happens to it.

Who is responsible for your data

The controller for the processing described here is NAV COMMUNICATIONS S.R.L., the company behind the BNG brand, with its registered office at Str. Tămâioarei 116, room 1, floor 1, ap. 1, district 2, Bucharest, Romania, postal code 023644.

Registered with the Romanian Trade Register under no. J1997009914407, tax identification number RO 10019108.

The company appears in the Register of Personal Data Processing Operations under number 32265.

Write to contact@bng.eu or call +40 (21) 655-55-55.

We have appointed a Data Protection Officer. Write to them directly at dpo@bng.eu, for anything concerning your data.

What we process, why, and on what legal basis

Three situations, that is all:

  • The contact form. We process your name and email address and, if you fill them in, your company and phone number, plus the text of your message. Purpose: to reply to you. Legal basis: your consent (Art. 6(1)(a) GDPR), given through the checkbox on the form. You can withdraw it at any time, and withdrawal does not affect processing carried out before that.
  • Technical logs. When a message is sent — or when the form's anti-robot trap is filled in — we log the IP address and the time. We also keep that IP address in the server's memory for at most one hour, to limit submissions to five per hour from the same address. Purpose: keeping the form working and stopping abuse. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).
  • The strictly necessary cookie. A single cookie, bngeu_csrf, set only on the page that carries the form, so that a message sent is really yours. Details are in the cookie policy.

That is all. We have no user accounts, we build no profiles, and we make no automated decisions that produce effects concerning you.

What we do not do

  • We use no traffic analytics tool and we do not count visitors.
  • We have no advertising pixels and we do no remarketing.
  • We load nothing from foreign servers: fonts, images and scripts all come from bng.eu. Verifiable with any browser's network tool: not a single request goes to another domain.
  • We do not use browser storage (localStorage, sessionStorage).
  • We do not sell, rent or trade data with anyone.

Who else sees the data

The message from the form is not saved on the site — there is no database for it to land in. It leaves by email to our mailbox and stays there, like any other message we receive.

The email is our own. Messages leave through NAV COMMUNICATIONS S.R.L. servers, not through an outside provider, so for this processing we have no processor at all.

The site runs in NAV COMMUNICATIONS S.R.L.'s own data centre, in Romania — on our infrastructure, not rented from someone else.

So the data does not leave the company. We may disclose it to a public authority only where the law requires us to.

We transfer no data outside the European Economic Area. Everything processed — the messages, the hosting, the logs — stays in Romania.

How long we keep it

  • Messages from the form: for an indefinite period. We do not delete them automatically after a set term — they stay in the mailbox, like any other correspondence. You can ask us to erase them at any time and we will: see section 06.
  • Application and web server logs, which contain the IP address: 30 days.
  • The in-memory list used for the submission limit: one hour, then it clears itself.
  • The bngeu_csrf cookie: two hours.

Your rights

For the data we process, you have the following rights:

  • access — to find out what data we hold about you and receive a copy;
  • rectification — to have what is wrong or incomplete corrected;
  • erasure — to have it deleted, in the cases provided by law;
  • restriction — to have processing paused while we check a challenge;
  • objection — to object to processing based on our legitimate interest;
  • portability — to receive the data in a machine-readable format, for processing based on consent;
  • withdrawal of consent — at any time, without affecting processing carried out before that.

Write to our Data Protection Officer at dpo@bng.eu. We answer within one month; if the request is complex we will tell you and may extend by up to two further months. So that we do not hand your data to someone who is not you, we may ask you to confirm your identity.

If you are not satisfied with our answer, you can turn to the Romanian National Supervisory Authority for Personal Data Processing (www.dataprotection.ro) or to the courts.

Do you have to give us your data?

No. Reading the site asks nothing of you. If you want to use the form, we need your name, email and message — without them we cannot reply; company and phone are optional. The alternative is to write to us directly at contact@bng.eu or to call.

How we keep it safe

The site is served over HTTPS only, and http requests are redirected. The form has an anti-CSRF token, a trap for robots, a per-IP submission limit and server-side validation, not just browser-side. The content of your message is never written to any database of the site.

Children

The site addresses companies and is not intended for children. We do not knowingly collect data from people under 16.

Changes

If we change anything here, we change the date at the top of the page too. The version published on this page is the one in force.

See also: Cookies