Privacy Policy

Updated: 2026-06-15

The angajeaza-ma.ro website is operated by the company that provides staffing (temporary workforce) services to businesses (hereinafter the "Controller", "we").

Controller identification details:
- Name: BHAZAR S.R.L.
- Unique registration code (CUI): 53489103
- Trade Register no.: J2026005179006
- Registered office: Strada Traian 107, Sector 3, București, Romania
- Contact e-mail: contact@angajeaza-ma.ro
- Data-protection e-mail: gdpr@angajeaza-ma.ro

This policy explains what personal data we process when a company sends us a staffing request through this website, and what rights the data subject has.

Through the staffing request form and the contact channels (phone, WhatsApp, e-mail) we collect the data of the requesting company's representative, namely:
- the contact person's name;
- the company name;
- the phone number;
- the e-mail address;
- the city and county where the work will take place;
- the request details (sector, number of people, start date, other notes).

We also collect minimal technical data as you browse the site (IP address, device and browser type, pages visited) — see the Cookie Policy.

IMPORTANT: this website does NOT collect CVs, identification data or other personal data of workers through the public section. Selection and administration of personnel is handled separately, under a dedicated legal basis and privacy notice.

We process the above data for the following purposes and on the following legal bases, in accordance with Article 6 of Regulation (EU) 2016/679 (GDPR):

• Responding to the staffing request and preparing/negotiating the staffing supply contract — basis: Art. 6(1)(b) (pre-contractual steps at the data subject's request) and (f) (legitimate interest in answering business enquiries).
• Subsequent commercial communication strictly related to the request (quote, clarifications) — basis: Art. 6(1)(f) (legitimate interest).
• Compliance with legal obligations (accounting, tax) once the collaboration materialises — basis: Art. 6(1)(c).
• Non-essential cookies (preferences, analytics, marketing) — basis: Art. 6(1)(a) (consent), given through the cookie banner.

We keep data only for as long as necessary for the purpose it was collected:
- requests that do not turn into a collaboration: max. 24 months from the last contact, then deleted or anonymised;
- requests that become collaborations: for the duration of the contract and thereafter as required by legal archiving terms (typically 5–10 years for financial/accounting records);
- technical data / cookies: for the durations set out in the Cookie Policy.

We do not sell your data. We may disclose it, strictly for the purposes above, to:
- suppliers who support us operationally as processors (web hosting, e-mail, communication and analytics tools), contractually bound to comply with GDPR;
- accounting, legal or audit advisers, under a duty of confidentiality;
- public authorities, only where the law requires us to.

We do not transfer data outside the European Economic Area unless adequate safeguards under GDPR are in place (standard contractual clauses).

As a data subject you have, under GDPR, the right of access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, objection to processing based on legitimate interest, and the right to withdraw consent at any time, without affecting the lawfulness of prior processing.

You can exercise these rights by a request to gdpr@angajeaza-ma.ro (Data Protection Officer: dpo@angajeaza-ma.ro). Full details are in the GDPR Rights section.

If you consider that the processing of your data infringes GDPR, you have the right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP), B-dul G-ral Gheorghe Magheru 28-30, Bucharest, e-mail anspdcp@dataprotection.ro.

For consumer-protection matters you may contact the National Authority for Consumer Protection (ANPC), www.anpc.ro. For online dispute resolution you may use the European Commission's ODR platform: ec.europa.eu/consumers/odr.

We apply reasonable technical and organisational measures to protect data against unauthorised access, loss or disclosure (encrypted HTTPS transfer, need-to-know access, contracts with processors).

We may update this policy from time to time; the version in force is the one published on this page, with the last-updated date shown in the header.