Last updated: 22.09.2026

BBDO Romania respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose and protect personal data when you visit www.bbdoromania.com (the “Website”) or contact us through the Website.

1. Who we are

The data controller responsible for the processing described in this Privacy Policy is:

[FULL LEGAL COMPANY NAME]
Registered office: [REGISTERED ADDRESS]
Company registration number: [REGISTRATION NUMBER]
Tax identification number: [TAX ID]
Email: [PRIVACY OR GENERAL CONTACT EMAIL]

In this Privacy Policy, “BBDO Romania”, “we”, “us” or “our” refers to the company identified above.

2. Personal data we collect

Information you provide to us

When you use our contact form or contact us directly, we may collect:

• your name;
• your email address;
• your telephone number, if provided;
• your company and job title, if provided;
• the content of your message;
• any other information you choose to provide.

Please do not submit sensitive personal data or information that is not necessary for us to respond to your request.

Information collected automatically

When you visit the Website, certain technical information may be collected automatically, including:

• IP address;
• browser type and version;
• device type and operating system;
• language and general location settings;
• pages visited and interactions with the Website;
• referring website;
• date and time of access;
• cookie identifiers and consent preferences.

Some of this information is collected through cookies and similar technologies. Non-essential cookies are used only where you have provided the required consent.

3. How we use your personal data

We may use your personal data to:

• respond to your questions, requests or messages;
• communicate with you regarding a potential project or business relationship;
• take steps at your request before entering into a contract;
• operate, maintain and secure the Website;
• identify and resolve technical problems;
• understand how the Website is used and improve its content and performance;
• prevent misuse, fraud or security incidents;
• comply with applicable legal or regulatory obligations;
• establish, exercise or defend legal claims.

We will not use your personal data for purposes that are incompatible with those described above unless required or permitted by law.

4. Legal bases for processing

Depending on the circumstances, we process personal data based on one or more of the following legal grounds:

• steps taken at your request before entering into a contract, when you contact us regarding a potential project or service;
• performance of a contract, where processing is necessary for an existing business relationship;
• our legitimate interests, including responding to general enquiries, operating and securing the Website and managing our business communications;
• your consent, particularly for optional cookies and similar technologies;
• compliance with a legal obligation applicable to us.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal will not affect the lawfulness of processing carried out before the withdrawal.

5. Contact form

The information submitted through the contact form is used only to review and respond to your request and, where relevant, to initiate or manage a business relationship.

Fields marked as mandatory are necessary for us to process your request. If you do not provide them, we may not be able to respond.

Contact form submissions may be delivered to authorised members of our team by email and may be stored within our Website, email or hosting systems.

We retain contact enquiries only for as long as necessary to respond and manage any resulting relationship, and ordinarily for no longer than [RETENTION PERIOD, E.G. 12 OR 24 MONTHS], unless a longer period is required by law or necessary for the establishment, exercise or defence of legal claims.

6. Cookies and similar technologies

The Website uses cookies and similar technologies to ensure its proper operation, remember your preferences and, where you consent, measure Website usage or support other optional functionality.

Cookies may be classified as:

• Necessary cookies, required for the Website to function and which cannot generally be disabled through the consent banner;
• Preference cookies, which remember settings selected by the visitor;
• Statistics cookies, which help us understand how visitors use the Website;
• Marketing cookies, which may be used to track visitors across websites and display relevant content or advertising.

We use Cookiebot by Usercentrics to manage cookie consent. Through the cookie banner, you can accept or reject non-essential cookie categories. You can change or withdraw your consent at any time through the cookie settings available on the Website.

Detailed and automatically updated information about the cookies and trackers currently detected on the Website is provided below.

Disabling certain cookies may affect some Website functionality.

7. Who we share personal data with

We may share personal data, where necessary, with:

• Website hosting and infrastructure providers;
• IT, maintenance and cybersecurity providers;
• email and communication service providers;
• cookie consent and analytics providers;
• professional advisers, including lawyers, accountants and auditors;
• companies within the BBDO or Omnicom group, where necessary for handling your request or managing a relevant business relationship;
• public authorities, courts or law-enforcement bodies where disclosure is required by law.

These recipients may process personal data only for the relevant purposes and subject to applicable contractual, confidentiality and data-protection obligations.

We do not sell your personal data.

8. International data transfers

Some service providers or affiliated companies may be located outside the European Economic Area.

Where personal data is transferred to a country that has not been recognised as providing an adequate level of protection, we use appropriate safeguards required by applicable data-protection law, such as the European Commission’s Standard Contractual Clauses, together with supplementary safeguards where necessary.

You may contact us for further information about the safeguards applicable to a particular transfer.

9. How long we retain personal data

We retain personal data only for as long as necessary for the purposes for which it was collected, including to comply with legal, accounting, reporting or security requirements.

When determining the appropriate retention period, we consider:

• the nature and sensitivity of the data;
• the purpose for which it is processed;
• the potential risks resulting from unauthorised use or disclosure;
• applicable legal limitation and retention periods.

When personal data is no longer required, it will be deleted, anonymised or securely archived where continued storage is required by law.

10. Data security

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

However, no online transmission or storage method can be guaranteed to be completely secure.

11. Your rights

Subject to the conditions provided by applicable law, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of your personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• receive certain personal data in a structured, commonly used and machine-readable format;
• withdraw consent at any time where processing is based on consent;
• lodge a complaint with a competent data-protection authority.

To exercise your rights, please contact us at [PRIVACY EMAIL ADDRESS].

We may request additional information to verify your identity before responding. We will respond within the period required by applicable law.

You also have the right to lodge a complaint with the Romanian supervisory authority:

The National Supervisory Authority for Personal Data Processing – ANSPDCP
Website: https://www.dataprotection.ro/

We would appreciate the opportunity to address your concerns before you submit a complaint to the supervisory authority.

12. Third-party links

The Website may contain links to websites or services operated by third parties. We do not control these third parties and are not responsible for their content or privacy practices.

We recommend reviewing the privacy notices of any third-party websites you visit.

13. Children’s privacy

The Website is not intended for children and we do not knowingly collect personal data from children through the Website.

14. Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes to the Website, our processing activities or applicable legal requirements.

The latest version will be published on this page, together with the date on which it was last updated.

15. Contact us

For questions regarding this Privacy Policy or the way we process personal data, please contact:

[FULL LEGAL COMPANY NAME]
[POSTAL ADDRESS]
[PRIVACY EMAIL ADDRESS]