BBalsDigital
ENRO

Privacy Policy

Last updated: October 1, 2026

This policy explains how BALS DIGITAL SRL (“we”, “us”) processes personal data when you visit https://balsdigital.com (the “Site”) or contact us. Each of our apps has its own privacy policy (section 10).

At a glance

  • No cookies, no analytics, no tracking and no advertising on this Site.
  • No accounts. The Site does not ask you to sign up and stores nothing in your browser.
  • The contact form opens your own email app. Nothing you type is sent to us until you send the email yourself.
  • Cloudflare hosts and delivers the Site. It processes standard technical data, such as your IP address, to deliver and protect the Site.
  • Emails to [email protected] are forwarded by Cloudflare to our Gmail mailbox, provided by Google, where we read and keep them.
  • We do not sell or rent personal data.
  • Each app has its own privacy policy, which applies to that app (section 10).

1. Controller

The controller of the personal data described in this policy is:

  • BALS DIGITAL SRL, a Romanian limited liability company
  • Registered office: Oradea, Bihor County, Romania
  • Trade Register no.: J5/16/2024
  • Fiscal code (CUI): 49356591
  • Email (support, privacy and legal requests): [email protected]
  • Website: balsdigital.com

We have not appointed a Data Protection Officer, as this is not required for our processing under Article 37 GDPR. For any privacy request, write to [email protected].

2. Scope

This policy covers the Site and the messages you send us, including messages about our apps. It does not cover how our mobile apps process data — each app has its own privacy policy (section 10) — nor third-party websites we link to.

3. Data we process

Visiting the Site. When you open a page, your browser necessarily sends technical data to our hosting and content-delivery provider, Cloudflare: your IP address, the page requested, the date and time, browser and operating-system information (user agent), the referring page and similar request data. This data is used to deliver the Site, keep it secure and protect it against abuse. Cloudflare may also receive technical network-error reports from your browser (Network Error Logging) to monitor the reliability of its network. We do not use this data to build profiles.

Contacting us. The contact form works entirely in your browser: when you press “Send message”, it opens your email app with a pre-filled email to [email protected] containing the name, email address and message you typed. Nothing is sent to us until you send that email yourself, through the email service you use. When you send it — or write to us directly — Cloudflare Email Routing forwards the email to our Gmail mailbox, provided by Google, and we receive your email address, your name (if you include it), the content of your message and any attachments, together with standard email metadata (such as the date and time). Please do not include health information or other sensitive data in your messages; we do not need it to help you.

What the Site does not do. It does not use cookies, local storage or similar technologies, analytics, advertising, social-media plugins or third-party scripts; its fonts are served from the Site itself. It has no user accounts, and we do not collect your location, contacts or any other data from your device.

4. Purposes and legal bases

  • Delivering the Site and keeping it secure (technical data) — our legitimate interest in operating a working and secure website, Article 6(1)(f) GDPR.
  • Answering your messages and handling support, feedback, privacy and legal requests — our legitimate interest in responding to you, Article 6(1)(f) GDPR, or steps taken at your request in connection with a contract with you (for example about an app you bought), Article 6(1)(b) GDPR.
  • Complying with our legal obligations, for example answering requests to exercise your rights or requests from competent authorities — Article 6(1)(c) GDPR.
  • Establishing, exercising or defending legal claims — our legitimate interest in protecting our rights, Article 6(1)(f) GDPR.

We do not rely on consent for any processing on the Site, and we do not make decisions based solely on automated processing that produce legal or similarly significant effects for you.

5. Recipients

  • Cloudflare, Inc. (United States) — DNS, content delivery (CDN) and hosting for the Site, and email routing: it receives the emails sent to [email protected] and forwards them to our Gmail mailbox. It acts as our processor. Cloudflare Privacy Policy
  • Google Ireland Limited (Ireland) and Google LLC (United States) — provide the Gmail mailbox where the emails forwarded by Cloudflare are delivered and stored, as our service provider. Google Privacy Policy
  • The email service you write from — chosen by you; it handles the emails you send under its own terms, not on our behalf.
  • Professional advisers, public authorities and courts — only where required by law or needed to establish, exercise or defend legal claims.
  • A successor business — if BALS DIGITAL SRL is involved in a merger, acquisition or sale of assets, under this policy or an equally protective one.

We do not sell or rent personal data, and we do not share it for advertising.

6. International transfers

Cloudflare, Inc. and Google LLC are based in the United States, and Cloudflare and Google may process data outside the European Economic Area, including in the United States. Transfers to the United States rely on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework and/or on the Standard Contractual Clauses adopted by the European Commission.

7. How long we keep data

  • Technical data — kept by Cloudflare for a limited period, under its retention policies. We use it only to keep the Site running and secure, for example to investigate an incident or abuse.
  • Messages — up to 3 years after our last exchange (the general limitation period under Romanian law), unless a longer period is needed for an ongoing claim or required by law. You can ask us to delete them earlier.

8. Security

We take reasonable technical and organisational measures to protect personal data. The Site is served only over encrypted HTTPS connections. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security. Email is not end-to-end encrypted by default; please keep this in mind when deciding what to write to us.

9. Your rights

Under the GDPR, you have the right to: access your personal data; rectification; erasure; restriction of processing; data portability; object at any time to processing based on our legitimate interests; and withdraw consent at any time where processing is based on consent (we currently do not rely on consent).

To exercise your rights, write to [email protected]. We may ask for information to verify your identity, and we reply within one month, which may be extended by two further months for complex or numerous requests (Article 12(3) GDPR).

You also have the right to lodge a complaint with a supervisory authority — in Romania, the National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral Gheorghe Magheru nr. 28-30, Sector 1, 010336 Bucharest, Romania, [email protected], www.dataprotection.ro — or with the supervisory authority of the EU member state where you live or work.

If you live in a U.S. state with a consumer privacy law: we do not sell your personal information or share it for cross-context behavioural advertising. You may ask to know, correct or delete the personal information we hold about you, and we will not discriminate against you for doing so.

10. Our apps

Each app we publish has its own privacy policy and terms of use, published on its website. They describe exactly what that app processes and prevail for that app. For some apps we also publish a short summary on this Site; if a summary differs from the app's own policy, the app's policy prevails.

11. Children

The Site is intended for a general audience and is not directed to children under 13. Children under 16 should contact us only with the permission of a parent or guardian. We do not knowingly collect personal data from children; if we learn that a child has sent us personal data without the required consent, we will delete it.

12. Cookies

This Site does not use cookies or similar technologies (such as local storage, tracking pixels or fingerprinting) and does not load analytics, advertising or social-media scripts. That is why it does not show a cookie banner.

Only where needed to protect the Site against attacks or automated abuse, Cloudflare may set a strictly necessary security cookie (for example when it shows a security check). Such cookies do not require consent under Romanian Law no. 506/2004. If we ever add non-essential cookies or analytics, we will update this policy and, where the law requires it, ask for your consent first.

13. Changes to this policy

We may update this policy if the way we process data changes. The current version is always published on this page with its “Last updated” date. We will announce material changes on the Site.

14. Contact

For any question about this policy or your data, write to [email protected].

BALS DIGITAL SRL · Oradea, Bihor County, Romania · Trade Register no. J5/16/2024 · Fiscal code (CUI) 49356591