Privacy Policy
Last updated: 4 November 2026
In short: we only collect the data you send us in a quote request, we use it to reply and to organise your transport, and we never sell it. Google Analytics runs only if you consent, and we use no advertising cookies at all.
1. Who the controller is
B&B FLEET SRL, VAT RO43342376, Trade Register J10/328/2021, registered office at Bdul. 1 Decembrie 1918 nr. 5I, Buzău, Romania. Email: info@bnbfleet.eu.
For any question about your data, write to info@bnbfleet.eu. We are not required to appoint a Data Protection Officer; requests are handled directly by the company's management.
2. What data we process and why
| Situation | Data | Purpose | Legal basis (GDPR) | Retention |
|---|---|---|---|---|
| Quote request form | company name, email, phone (optional), route, date, type of goods and trailer, weight, pallets, your message | to send you a quote and discuss the transport | Art. 6(1)(b) — steps taken at your request before entering into a contract | for the duration of the discussion and up to 3 years after the last contact if no contract follows |
| Server backup copy of the request | the same data | so a request is not lost if the email fails | Art. 6(1)(f) — legitimate interest | 30 days, then deleted automatically |
| Emails you send us | email address, name, message content | to reply to you | Art. 6(1)(b) or (f) | up to 3 years after the last contact |
| If you become a client | order, contract, CMR and invoice data | performing the transport, invoicing, legal obligations | Art. 6(1)(b) and (c) | accounting records: the periods set by Romanian Accounting Law 82/1991 (usually 5–10 years) |
| Spam protection of the form | IP address and technical browser data, processed by Cloudflare Turnstile; we only keep a hash of the IP | to block bots and abuse | Art. 6(1)(f) — legitimate interest (security) | IP hash: one hour at most |
| Visit statistics | aggregated data, without cookies and without identifying visitors (Cloudflare Web Analytics and anonymous click counters) | to see which pages and buttons are used | Art. 6(1)(f) — legitimate interest | anonymous counters: 24 months at most |
| Google Analytics, only if you click “Accept” | random identifier in cookies, pages visited, actions on the site, device and browser type, approximate location (the IP address is truncated by Google) | statistics on how the website is used | Art. 6(1)(a) — consent, under Art. 5(3) of the ePrivacy Directive and Art. 4(5) of Romanian Law 506/2004 | 14 months in Google Analytics; cookies expire after 2 years or when you withdraw consent |
| Server logs | IP address, date and time, requested page, browser | operation and security of the website | Art. 6(1)(f) — legitimate interest | according to the hosting provider's settings, usually days or weeks |
We make no automated decisions with legal effect and do no profiling. We do not process special categories of data. The form is not intended for persons under 16.
3. Who receives the data
- Our website and email hosting provider, which stores the data on our behalf under contract.
- Cloudflare, Inc. — spam protection for the form (Turnstile) and cookie-free visit statistics (Web Analytics). Cloudflare is certified under the EU-U.S. Data Privacy Framework; transfers rely on the European Commission's adequacy decision and standard contractual clauses.
- Google Ireland Limited / Google LLC — only if you accept statistics cookies (Google Analytics). Google signals for advertising and personalisation are switched off. Google LLC is certified under the EU-U.S. Data Privacy Framework.
- Partner carriers, only if you choose to work with us and the trip runs through our forwarding desk: we share only what the trip requires (loading and unloading places and times, contact persons for the goods).
- Authorities, only where the law requires it.
We never sell or rent data to anyone and we do not use it for advertising.
4. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Articles 15–21 GDPR). Write to info@bnbfleet.eu and we will reply within one month. Where processing is based on consent, you may withdraw it at any time.
You may lodge a complaint with the Romanian supervisory authority, ANSPDCP, B-dul G-ral. Gheorghe Magheru 28–30, Sector 1, Bucharest, www.dataprotection.ro, or with the supervisory authority of the EU country where you live or work. Please write to us first: it is usually faster.
5. Security
The website works only over HTTPS, form requests are checked against bots, and configuration data and backups sit in a part of the server that cannot be reached from the internet. Only the staff who prepare quotes can see the requests.
6. Cookies
Statistics cookies (Google Analytics) are set only with your consent, which you can withdraw at any time in Cookie settings. We use no advertising cookies. See the Cookie Policy.
7. Changes
If we change this policy, we publish the new version here and update the date above.