This page explains what personal data we collect through taxolia.ro, why we collect it, how long we keep it and what you can do about it. It is written to be read, not filed away.
1. Who the controller is
The controller deciding the purposes and means of the processing is Financetop Accounting SRL, a Romanian limited liability company trading as TaxOlia Romania.
- Company name: Financetop Accounting SRL
- Tax identification number (CIF): 41034485
- Trade Register number: J2019005718401
- European Unique Identifier (EUID): ROONRC.J2019005718401
- Address: Bd. Regina Maria nr. 32, Sector 4, București, Romania
- Office: Str. Sergent Apostol Constantin 16B, Sector 6, Bucharest, Romania
You can reach us at office@taxolia.ro or on +40 727 524 502. For anything concerning your personal data, email is the fastest route.
2. What data we collect
We only collect what you send us. The contact and quote form on this site asks for your name, email address, phone number, the country you are writing from, the service you are interested in, your message and your consent confirmation.
The interactive tools on this site (the calculators and the tax deadlines calendar) run entirely in your browser: what you type into them never reaches us. The exception is the Excel download of the calendar, where you give us the company name and an email address so that we can reply; both also appear inside the downloaded file. The second exception is the company check by tax ID: the tax ID you enter (and, optionally, the date) reaches our server, which passes it to the public ANAF and VIES services (and, using the company name returned by ANAF, to the courts’ portal, portal.just.ro, for possible court cases) and keeps the answer for at most 12 hours (court cases, 24 hours); if you request a VIES consultation number, your VAT number is passed only to VIES and is not stored, so that we stay within ANAF’s query limit; the number of checks per hour is limited on the basis of the IP address, stored only as a one-hour hash. We ask for nothing else and do not display the contact details returned by ANAF. The result also shows company data from the Trade Register’s open data set (data.gov.ro, CC-BY 4.0 licence): status, incorporation date and authorised activities. We neither take nor display data about individuals (representatives, shareholders).
The message field is free text. Please do not use it for special categories of data, such as health information, beliefs or trade union membership, and do not paste in documents containing other people’s data. If you need to send us files, we will point you to an appropriate channel after the first exchange.
As with any web server, our hosting infrastructure records IP addresses and the minimal technical data needed to deliver pages and defend against abuse. These logs are not used to profile you.
3. Purposes and legal grounds
We process form data to answer your enquiry, prepare a quote and carry out the correspondence that precedes a possible engagement. The legal ground is your consent, given by ticking the box in the form, under Article 6(1)(a) of Regulation (EU) 2016/679.
If the discussion turns into an engagement, further processing rests on Article 6(1)(b), performance of a contract and pre-contractual steps, and, for accounting and tax records, on Article 6(1)(c), our legal obligations.
Protecting the form against automated submissions relies on our legitimate interest in keeping a usable communication channel, under Article 6(1)(f).
4. How long we keep it
Data submitted through the form is kept for 24 months from the last interaction, or until you withdraw your consent if that happens sooner. After that, the messages are deleted.
For clients, data is kept for the duration of the engagement and afterwards for the statutory archiving periods, in particular ten years for accounting documents under Romanian Accounting Law no. 82/1991, plus the limitation periods set by tax legislation.
5. Who else sees the data
The form is handled by Web3Forms, a specialised provider that takes the form content and delivers it by email to our address. Web3Forms acts as a processor and does not use the data for its own purposes.
To filter automated submissions we use Cloudflare Turnstile, an anti-spam check that confirms a request comes from a person, without tracking you across other websites.
We also rely on providers for website hosting and for our email service. We do not sell, rent or trade personal data for marketing purposes. We disclose data to public authorities only where the law requires it.
If you accept statistics or marketing cookies, browsing data — pages visited, online identifiers stored in cookies, browser and device data — reaches Google Ireland Limited (Google Analytics) and Ahrefs Pte. Ltd. (Ahrefs Web Analytics, cookieless statistics), and Meta Platforms Ireland Limited (Meta Pixel) respectively. For the collection and transmission of data through the Meta Pixel we are joint controllers with Meta; Meta’s further processing is governed by its own privacy policy. The legal ground is your consent under Article 6(1)(a) GDPR, which you can withdraw at any time through the “Cookie settings” link.
The site carries a WhatsApp button, which is a plain link to wa.me. If you use it, the conversation takes place inside WhatsApp and is governed by the privacy policy of that provider.
6. Transfers outside the European Union
Some of our technical providers may process data on infrastructure located outside the European Economic Area. Where that happens, the transfer is covered by the Standard Contractual Clauses adopted by the European Commission or by an adequacy decision, in line with Chapter V of the GDPR. Google and Meta may transfer data to the United States; those transfers rely on the European Commission’s adequacy decision on the EU-U.S. Data Privacy Framework. Ahrefs Pte. Ltd. is based in Singapore; statistics data sent to this provider is covered by the safeguards described above.
7. Cookies
We load no statistics or advertising tool before asking for your agreement. On your first visit we show a banner managed through CookieYes, a consent management platform certified by Google; until you press “Accept”, the signals sent to Google services are set to “denied” (Google Consent Mode), and the only thing left in your browser is the cookie that remembers your choice, alongside the strictly necessary items that keep the pages working.
If you accept, we may use audience statistics and, when we run campaigns, measurement of their results. You can change your mind at any time through the “Cookie settings” link in the footer of every page. The complete, up-to-date list of what actually loads is in our cookie policy.
8. Security
The site is served over HTTPS only. Access to incoming messages is limited to the team members who need it in order to reply, and our email accounts are protected by two-factor authentication. As accounting and tax professionals we are additionally bound by professional secrecy over the information you share with us.
9. Your rights
As a data subject you have the right to access the data we hold about you, to have inaccurate data corrected, to request erasure, to obtain restriction of processing, to receive your data in a portable format and to object to processing. Where processing is based on consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out beforehand.
We do not take automated decisions producing legal effects concerning you, and we do not profile you.
10. How to exercise your rights
Send your request to office@taxolia.ro. We reply within one month of receipt; if the request is complex, we will tell you why we need longer. Handling requests is free of charge, except where a request is manifestly unfounded or excessive.
If our answer does not satisfy you, you may lodge a complaint with the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral Gheorghe Magheru 28-30, Bucharest, dataprotection.ro. You may also bring the matter before the courts.
11. Legal framework and updates
We process personal data in accordance with Regulation (EU) 2016/679, with Romanian Law no. 190/2018 implementing it, and with Law no. 506/2004 on personal data processing in the electronic communications sector.
We update this policy whenever the way we handle data changes. The date of the latest revision appears at the top of the page, and we recommend checking it from time to time.