Privacy Policy

This policy explains how Blureon SRL (Tax ID 49374555), acting as data controller, collects and processes personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Romanian law.

Who we are

Blureon SRL is a provider of electronic communications services. Registered office: Str. Pararului nr. 2B, demisol, Cluj-Napoca, Romania. You can reach us by phone at (0374) 550 147 or through the contact form on this site.

What data we collect

• Contact data — name, company, phone number and email address, submitted through the contact form or provided by phone.
• Traffic and communications data — required to provide telephony services (numbers dialled, call duration and call type), processed strictly for service delivery and to meet legal obligations.
• Technical data — information about your use of the site, under the conditions described in our cookie policy.

Purposes of processing

• Responding to enquiries and preparing quotations.
• Providing and administering the telecommunications services under contract.
• Meeting legal obligations: tax, regulatory and data retention requirements.
• Network security and prevention of fraudulent use of the services.

Legal basis

We process data on the basis of contract performance, your consent where applicable, our legal obligations, and our legitimate interest in providing and securing the services.

How long we keep data

We keep data for as long as necessary for the purposes above and for the periods required by law. As a guide: contact data from enquiries that do not lead to a contract is deleted or anonymised within 12 months of the last interaction; contract data and data required for tax purposes is kept for the duration of the contract and afterwards for the statutory archiving periods; traffic data is kept in line with the retention obligations applicable to providers of electronic communications services. The exact periods that apply to your contract are set out in your contractual documents.

Who we share data with

We do not sell your data. We may disclose it, strictly as far as necessary, to the following categories of recipients: hosting and technical infrastructure providers; telecommunications operators with whom we interconnect traffic or to whom porting requests are submitted; accounting and invoicing service providers; legal advisers; and public authorities where the law requires it. All processors act under contracts that include confidentiality and security obligations.

Transfers outside the European Economic Area

The infrastructure our services run on is hosted in Romania. Where a particular service involves a transfer outside the European Economic Area, it takes place only on the basis of a transfer mechanism provided for by the GDPR, and information about that transfer is made available to you on request.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal. You can exercise these rights by contacting us using the details above. You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP).

Security

We apply technical and organisational measures to protect data: encryption of traffic in transit, controlled access to systems, separation of environments, and hosting of the infrastructure in our own data centre.

Changes

We may update this policy. The current version is always published on this page, together with the date it was last updated.