Privacy policy

Last updated: 28 august 2026.

Who processes the data

The auditgalis.ro website is operated by GRAȚIE BUSINESS SOLUTIONS S.R.L., with its registered office at Str. Ialomiței nr. 1, bl. AN4, et. V, ap. 20, 410510 Oradea, registered with Oficiul Registrului Comerțului de pe lângă Tribunalul Bihor under number J2009001003054, tax identification number 25841858.

On audit engagements we work together with PHILL & PARTNERS AUDIT COMPANY S.R.L., tax identification number 31873358, an affiliated company sharing the same registered office. Where an engagement is carried out jointly, each company processes client data as a controller, for the purpose of meeting its own professional obligations.

For any question about your data, write to [email protected] or call 0745 595 460.

What we collect on this website

The quote request form: your name, the company name, an email address or phone number and, if you choose to write them, details about your company. Apart from the contact details, no field is mandatory.

Server logs: IP address, time of the request, the page requested and the browser type. These are produced automatically by the web server and serve to run and protect the site.

We do not collect data through advertising trackers, we do not sell data and we do not pass it to advertising networks.

Why we process it and on what basis

To answer your request and, where applicable, to prepare a contract. The basis is pre-contractual steps, Article 6(1)(b) of Regulation (EU) 2016/679.

To keep the website running and protect it from abuse. The basis is our legitimate interest, Article 6(1)(f).

To meet the legal obligations that apply to us as an audit firm, including retention of engagement documentation. The basis is legal obligation, Article 6(1)(c), chiefly Romanian Law 162/2017 and the rules of the Chamber of Financial Auditors of Romania.

How long we keep it

Quote requests that do not lead to a contract: 12 months from the last correspondence, then deleted.

Audit engagement documentation: the periods set by law and professional rules, generally 10 years from the date of the report.

Server logs: at most 30 days.

Who else has access

The hosting provider, which operates the server the site runs on, as a processor.

The email provider through which your message reaches us.

Authorities, where the law requires us to disclose information.

Data is not transferred outside the European Economic Area. Auditors are bound by the professional secrecy laid down in Law 162/2017, which covers everything we learn about your company.

Your rights

You have the right of access to your data, the right to rectification, erasure, restriction of processing, data portability, and the right to object to processing based on legitimate interest.

Send your request to [email protected]; you will receive an answer within 30 days at the latest.

If the answer does not satisfy you, you may contact the Romanian National Supervisory Authority for Personal Data Processing, B-dul G-ral. Gheorghe Magheru 28-30, sector 1, Bucharest, or at dataprotection.ro.

Cookies

The site uses a small number of cookies, all strictly necessary for it to work: one remembers the language you chose, so navigation does not move you back at every page, and the other is set by the component that serves the Romanian and English versions.

We use no advertising cookies and we do not track visitors across sites. For strictly necessary cookies the law does not require prior consent, which is why no acceptance banner greets you.

Video testimonials load from YouTube only after you press play, through the cookie-free domain. Until then, YouTube receives nothing about you.

Changes

This policy may be updated when the way the site works changes, or when legal obligations change. The version in force is the one published here, and the date of the last update appears at the top of the page.