Privacy notice
Updated 29 October 2026
For project enquiries, email office@brothersconceptcorporation.com. Online form submission is currently unavailable; entered information is not sent to the Company.
1. General provisions
1.1 Protecting personal data is a priority for BROTHERS CONCEPT CORPORATION S.R.L. (the “Company”). We aim to protect the confidentiality and integrity of personal data and provide transparent information about its use.
1.2 Our business involves processing personal data in connection with our professional activities. This policy explains what information we collect, why we collect it and how we use it.
1.3 Our data protection practices concern the lawful processing, sharing and storage of personal information and the protection of its confidentiality, integrity and availability.
1.4 Access to the Company's website is free of charge. Visiting the website does not constitute consent to processing that requires separate consent. This policy refers to Regulation (EU) 2016/679 (the “GDPR”).
2. Company details
2.1 BROTHERS CONCEPT CORPORATION S.R.L. is a company incorporated under Romanian law, with its registered office at București, sectorul 3, strada Victor Brauner nr. 40N, camera 1, bl. 8, etaj 11, ap. 143, Romania, registered with the Trade Register under number J2024001346039, tax identification number 50265055 and VAT identification number RO50265055.
2.2 The Company acts as controller for the processing described in this policy concerning brothersconceptcorporation.com (the “Website”) and enquiries submitted through the channels identified on it.
2.3 For questions about this policy or to exercise your rights, contact office@brothersconceptcorporation.com or write to the registered office above.
3. Personal data, purposes, retention and legal grounds
| Processing activity | Personal data | Purpose | Retention | Legal ground | Where processed | Transfers outside the EEA |
|---|---|---|---|---|---|---|
| 3.1 Visiting the Website | IP address, date/time, requested page and technical browser information | Delivering pages and protecting the service | As necessary for service delivery and security, according to the provider’s retention cycle; incident-related records may be retained as necessary for investigation and legal claims | Article 6(1)(f): legitimate interests in Website operation, availability, security and preventing misuse | The Website hosting and security infrastructure provider | Choosing an EU server does not exclude all international processing; see section 9 |
| 3.1.2 Accessibility preferences | Display and read-aloud settings | Applying your preferences | The browser session, which may be restored by your browser | Article 6(1)(f): legitimate interest in providing accessibility settings requested by the visitor; see the Cookie Policy for local storage | Browser sessionStorage; the application does not send these preferences to the Company | The application does not transmit preferences; some voices may use online browser/device services |
| 3.2 Email contact | Email address, professional information and project details included in your message | Responding to enquiries, assessing cooperation and recording correspondence | For as long as necessary to assess and respond to the enquiry and manage ongoing discussions, considering their status and last relevant communication; longer retention requires an applicable legal obligation or a justified legal claim | Article 6(1)(b) for precontractual steps requested by an individual who would become a party to the contract; Article 6(1)(f) for the legitimate interest in responding to company representatives and managing B2B professional relationships | Google Workspace and the Company's office mailbox | The service may involve processing outside the EEA; see section 9 |
| 3.3 Telephone contact | The Website does not provide a telephone contact channel | Not applicable through the Website | Not applicable | Not applicable | Not applicable | Not applicable |
| 3.4 Newsletter / automated invitations | The Website does not offer newsletter subscriptions | We do not conduct this activity through the Website | Not applicable | Not applicable | Not applicable | Not applicable |
| 3.5 Website recruitment | The Website has no recruitment form or CV upload facility | We do not conduct this activity through the Website; applications received separately require appropriate information | This policy does not establish a recruitment retention period | Not applicable to this Website function | Not applicable | Not applicable |
| 3.6 Project enquiry form | Name, email and project information entered by the visitor | Preparing an enquiry on your device | Values remain in the open page; autofill and restoration depend on your browser settings | No transmission to the Company through this form | Your browser; “Save a copy” downloads locally without sending | No transfer by the disabled form |
Contact office@brothersconceptcorporation.com. If a contract is concluded, relevant documents and correspondence are retained according to contractual and legal obligations, project requirements and the need to protect legal rights. Contractual and accounting records are subject to their applicable retention requirements.
For cookies and similar technologies, see the Cookie Policy.
3.7 Required information and consequences of not providing it
Contacting the Company is voluntary. Your name, email address, project type, service of interest and message are required to submit the form. Without these details we cannot receive and handle the enquiry through the form. Other fields are optional; please provide only relevant information. The acknowledgement checkbox confirms that you have read the notice; it is not consent to marketing or unrelated processing.
3.8 Preferences, read aloud and saving a copy
Display preferences are stored in the browser session. Read aloud uses the browser or device's speech synthesis function in the selected Website language. Depending on the chosen voice, the browser or operating system provider may process the text online. The Company does not receive recordings of your voice, and this function does not require microphone access. “Save a copy” downloads your enquiry to your device without sending it to the Company.
3.9 Retention criteria
Information is retained for the minimum period necessary for its purpose, taking account of its current and justified future use, contractual obligations, statutory record-keeping requirements, any other valid basis for continuing processing and the necessity and proportionality of retention in relation to your rights. Any longer retention must have a specific justification.
3.10 Information received in error
If we receive personal information in error from a third party and/or have no lawful basis for processing it, we will delete it.
4. Special categories of personal data
The Website does not request special categories of personal data or intentionally collect them. Please do not include health information, religious or political beliefs or other sensitive information in ordinary enquiries. If such information is received unsolicited, we assess necessity, legal grounds and appropriate measures, including deletion.
5. Automated decisions and profiling
5.1 We do not use advertising profiling or make solely automated decisions producing legal or similarly significant effects on individuals.
5.2 The form does not currently send enquiries or load an external anti-spam service. Please contact us by email.
5.3 Our Cookie Policy explains cookies and similar technologies, their legal grounds and available controls.
6. Disclosure and further use of information
6.1 Service providers and professional advisers
Internal access to enquiries is limited to authorised persons who need the information to handle them. We use:
- Hosting: infrastructure providers delivering and protecting the Website.
- Email: Google Workspace — the service used for the Company’s correspondence.
- Form services: no external sending or anti-spam service is currently activated.
Where necessary and justified, information may be disclosed to legal or other professional advisers to handle an enquiry or protect legal rights, and to competent authorities as described below. Disclosures are limited to information necessary for the purpose. We do not sell personal data.
6.2 Fraud prevention and reporting to competent authorities
Where there are indications of a possible offence, we may need to contact competent authorities, for example in connection with suspected fraud, cybercrime, threats or malicious communications affecting us or others. Where applicable, the legal ground is Article 6(1)(f), the legitimate interest in preventing or addressing suspected criminal activity.
6.3 Establishing, exercising or defending legal claims
Information may be used where necessary for a dispute involving you or a third party, including settlement, mediation, arbitration or court proceedings. Where applicable, the legal ground is Article 6(1)(f), the legitimate interest in resolving disputes and protecting legal rights.
6.4 Compliance with legal obligations
We may process or disclose information to comply with applicable legal obligations, including legally binding court orders. The legal ground is Article 6(1)(c), where a specific applicable obligation requires the processing. We do not automatically rely on legitimate interests to comply with any request from outside the EU. Such requests require assessment under applicable law and, where relevant, GDPR international transfer rules.
7. How we collect information
7.1 We collect information directly when you email us, or continue professional communications with us. The Website offers no newsletter subscription or recruitment form.
7.2 Accessing pages involves automatic processing of technical information by the infrastructure delivering the service. We do not use traffic analytics tools or advertising pixels. See the Cookie Policy for accessibility preference storage.
8. Information security
8.1 Data protection involves technical and organisational measures appropriate to risk, including limiting access to authorised persons. Do not send passwords, identity-document copies or confidential documents unnecessary for the enquiry. No technical measure can eliminate all risks; this does not limit our legal obligations.
8.2 Email communications
Internet transmission is not entirely risk-free. Before sending confidential documentation or information requiring additional protection, contact us to agree on an appropriate channel. This notice does not limit the Company's data protection obligations or your rights.
9. Transfers outside the European Economic Area (EEA)
9.1 Google Workspace
Using Google Workspace for correspondence may involve storage, access or other processing outside the EEA. We do not state that all data is processed exclusively in the European Union.
9.2 Hosting and form services
Hosting infrastructure may involve services or access from other countries. This may also concern technical services needed to check and send enquiries. An EU server location does not, by itself, guarantee that all processing and access take place in the EEA.
9.3 Applicable transfer safeguards
Google’s published contractual documentation for Workspace provides for transfer protection mechanisms, including adequacy decisions or Standard Contractual Clauses depending on the transfer conditions. The relevant mechanism depends on the recipient, service and applicable contractual terms. Contact us under section 9.4 for information about safeguards affecting your data.
9.4 Information and copies of safeguards
For information about transfers affecting your personal data or to request a copy of applicable safeguards, contact office@brothersconceptcorporation.com. Information is provided subject to other persons' rights and applicable legal restrictions.
10. Your personal data rights
10.1 Data protection contact
For questions and requests to exercise your rights, contact office@brothersconceptcorporation.com, the Company's data protection contact point.
10.2 Rights
Subject to the applicable legal conditions and restrictions, you may request:
- access to your personal data and information about its use;
- rectification or erasure;
- restriction of processing;
- receipt of data you provided in a structured, commonly used, machine-readable format and transmission to another controller, where processing is automated and based on consent or contract, under the GDPR;
- objection to processing for particular purposes, as explained at 10.6;
- withdrawal of consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.
10.3 Complaints
You may lodge a complaint with Romania's National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28–30, Sector 1, postal code 010336, Bucharest, Romania, www.dataprotection.ro, anspdcp@dataprotection.ro.
10.4 Identity verification
If we have reasonable doubts about the identity of a requester, we may request additional information necessary to confirm identity. Verification is proportionate and aims to prevent unauthorised access.
10.5 Handling requests
We prioritise information already available and do not automatically require an identity-document copy. We respond without undue delay and within one month of receipt. Where GDPR conditions are met, this may be extended by two additional months, with reasons and notification within the first month. Requests are generally free of charge, subject to statutory exceptions.
10.6 Right to object
You may object to processing based on legitimate interests on grounds relating to your particular situation by contacting office@brothersconceptcorporation.com. We do not conduct direct marketing or advertising profiling through the Website; there is no need to unsubscribe from services we do not offer.
10.7 Cookies
See the Cookie Policy for information about controls relating to cookies and similar technologies.
11. Children's privacy
11.1 The Website presents services for professional users. We do not intentionally request children's personal data or offer services intended for children through the Website.
11.2 If you believe we have received a child's personal data, contact office@brothersconceptcorporation.com so we can assess and address the situation under applicable law.
12. Data protection principles
Personal data is processed lawfully, fairly and transparently; collected for specified, explicit and legitimate purposes; limited to what is necessary; and kept accurate and up to date where required. Inaccurate data is corrected or deleted without delay where necessary. Identifiable information is retained no longer than needed for its processing purposes. Confidentiality and appropriate security are maintained. Information is disclosed only where necessary and justified, including the circumstances described at section 6. Individuals may exercise the rights described at section 10 under the applicable legal conditions.
13. Changes to this policy
13.1 We review and update this policy as necessary.
13.2 Minor changes. We update the effective date when the policy changes. Updating this notice does not itself create a new legal ground for processing or remove existing rights.
13.3 Significant changes or new purposes. Before processing information for a new or different purpose, we provide information about that purpose and other relevant details, by email where possible or through a Website notice. Where legally required, we obtain prior consent.