Last updated: 11 October 2026
1. Who we are
This website, bwc-mergers.com, is operated by B.W.C. BUSINESS WORLD CONTRACTORS SRL, trading through the BWC M&A Advisory brand.
Romanian tax identification number (CUI): 32398819
Trade Registry number: J2024000143145
Registered office: Bd. General Grigore Bălan nr. 8, bl. 27, sc. B, ap. 4, 520013 Sfântu Gheorghe, Covasna, Romania
B.W.C. BUSINESS WORLD CONTRACTORS SRL is the data controller for the personal data described in this policy. For privacy questions or to exercise your rights, email [email protected]. For general enquiries, email [email protected].
2. Scope of this policy
This policy explains how we collect and process personal data when you visit this website, contact us, request information about our services, discuss a potential mandate or transaction, communicate with us professionally, or interact with our cookie and analytics controls. A specific engagement may be subject to additional contractual confidentiality and data-protection terms.
3. Personal data we collect
Information you provide. When you use our contact form or contact us by email, you may provide your name, email address, company or organisation, subject, services of interest, message content, documents or correspondence, and your privacy acknowledgement or consent choices.
Please avoid sending sensitive personal data or confidential transaction information through the general contact form unless it is necessary and appropriate.
Information collected automatically. Our systems and service providers may process your IP address, browser and device information, visit date and time, pages viewed, referring pages, cookie and consent preferences, diagnostic and security information, and—with your consent—aggregated website-usage information.
4. Why we use personal data and our legal bases
Enquiries and potential engagements. We use contact and message information to respond to requests, evaluate potential assignments and communicate about our services. The legal bases are taking steps at your request before entering into a contract, performing a contract where applicable, and our legitimate interest in managing professional enquiries and developing our business.
Advisory services. If a professional relationship is established, we process information necessary to deliver our services, administer the engagement, communicate with relevant parties and meet contractual responsibilities. The legal bases are performance of a contract, pre-contractual steps, compliance with legal obligations and, where applicable, our legitimate interests.
Website security and fraud prevention. We process technical and security information to protect the website, identify malicious activity, prevent spam, maintain availability and investigate incidents. The legal bases are our legitimate interest in maintaining a secure and reliable website and, where applicable, compliance with legal obligations.
Analytics. With your consent, we use analytics to understand website use and improve its content and performance. You can refuse or withdraw analytics consent at any time through the website’s cookie settings. Withdrawal does not affect processing that occurred before withdrawal.
Legal requirements. We may process or retain information to comply with applicable laws, respond to lawful requests, establish or defend legal claims and meet accounting or regulatory obligations.
5. Contact forms
Our contact form is provided using Fluent Forms within WordPress. Submissions may include your name, email address, company, selected service, subject and message. The information is emailed to BWC and may also be stored securely in the WordPress administration system and associated email systems.
The form uses Cloudflare Turnstile to distinguish legitimate submissions from automated spam or abuse. Turnstile may process limited technical information required for that security check. Submitting a form does not automatically subscribe you to marketing communications.
6. Cookies and consent management
The website uses cookies and similar technologies for essential functions, security, preferences and, where you consent, analytics. Complianz presents cookie choices and records consent preferences. Essential cookies may operate without consent where necessary to provide or secure the website. Non-essential analytics technologies operate according to your consent choice.
You can change or withdraw your choice through the cookie settings available on the website. Details of individual cookies, purposes and durations are provided in our Cookie Policy.
7. Google Analytics
Subject to your analytics consent, the website uses Google Analytics 4 to measure website usage and performance. Google Analytics may process pages viewed, approximate location, device and browser characteristics, referral source and website interactions. We use this information in aggregated reports to improve our content and services.
The GA4 measurement identifier is G-9LXW0G58H0. The property currently retains event-level data associated with cookies and identifiers for 2 months and user data for 14 months; the user-data period resets upon new activity. These controls do not necessarily affect aggregated standard reports.
Analytics data may be processed by Google outside the European Economic Area, subject where applicable to recognised transfer mechanisms and appropriate safeguards. You can prevent non-essential analytics through the website’s consent controls.
8. Service providers and recipients
Where necessary, we may share personal data with providers supporting the website and our business, including hosting and infrastructure providers; email and communications providers; WordPress and website-technology providers; Fluent Forms; Complianz; Google for consent-dependent analytics; Cloudflare for Turnstile; Wordfence and hosting-security providers; backup, maintenance and technical-support providers; professional advisers; and public authorities or courts where legally required.
Recipients may act as processors on our instructions or as independent controllers for their own legally defined purposes. We do not sell personal data.
9. International transfers
Some technology providers may process information outside Romania or the European Economic Area. Where information is transferred to a country not recognised as providing adequate protection, we use an appropriate transfer mechanism where required, such as European Commission standard contractual clauses, together with necessary supplementary safeguards. You may contact us for further information about safeguards relevant to your data.
10. How long we retain information
We retain personal data only for as long as necessary for the relevant purpose, taking account of legal, contractual, security and operational requirements.
- General enquiries that do not result in an engagement are normally retained for up to 24 months after the last meaningful contact.
- Information connected with an engagement may be retained for the engagement and afterward for periods required by applicable legal, accounting, tax, contractual or professional obligations.
- Cookie-consent records are retained for the period reasonably necessary to demonstrate and administer your preferences.
- GA4 event data is currently retained for 2 months and user data for 14 months, as described above.
- Security and technical logs are retained only for the period needed to detect, investigate and prevent security incidents.
- Information relevant to a dispute or legal claim may be retained until the matter and applicable limitation periods have ended.
We may delete or anonymise information earlier when it is no longer needed.
11. Security
We use appropriate technical and organisational measures intended to protect personal data against unauthorised access, loss, alteration, disclosure or destruction. These measures include access controls, security monitoring, encrypted communications where supported, software maintenance and backups. No internet transmission or storage system can be guaranteed to be completely secure.
12. Your rights
Subject to applicable conditions and exceptions, you may have the right to be informed; access your data; correct inaccurate or incomplete data; request deletion; restrict processing; object to processing based on legitimate interests; receive certain information in a portable format; withdraw consent at any time where consent is the legal basis; and lodge a complaint with a data-protection authority.
To exercise your rights, email [email protected]. We may request information necessary to verify your identity and will respond within the period required by law.
13. Complaints
We encourage you to contact us first so that we can address your concern. You may also complain to the Romanian supervisory authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), Bd. General Gheorghe Magheru 28–30, Sector 1, Bucharest, Romania; www.dataprotection.ro.
You may also contact the supervisory authority in the EU or EEA country where you live or work or where you believe an infringement occurred.
14. Automated decision-making
We do not use information collected through this website to make decisions based solely on automated processing that produce legal or similarly significant effects.
15. External websites
Our website may link to third-party websites. Those websites operate under their own privacy policies, and we are not responsible for their privacy practices.
16. Changes to this policy
We may update this policy when our services, website technologies or legal obligations change. The latest version will be published here with a revised “Last updated” date.