Last updated: 12 October 2026
This page explains what personal data we collect through www.winaccount.ro, why we use it, how long we keep it and what rights you have. We process data in line with Regulation (EU) 2016/679 (GDPR) and applicable Romanian law.
1. Who we are
The data controller is WIN ACCOUNT S.R.L., Tax ID (CUI) 51188333, Trade Register No. J2025005434009, based in Valea Lupului, Iași, Romania.
For any question about your data, contact us at office@winaccount.ro or by phone at 0752 432 140.
2. What data we collect
- Through the contact form: your name, company (optional), email address, phone number (optional), subject and message. Together with your message we also keep proof of your consent (the date, time and IP address from which you ticked the consent boxes in the form).
- When you contact us directly by email, phone or WhatsApp: the data you choose to send us.
- Visit data: for each page you visit, the website records your IP address, the approximate country and internet provider derived from it (on our own server, without third-party services), date and time, the page, your browser, operating system, device type, browser language and the website you came from. We use this for visitor statistics and security. We do not use cookies for this and we do not share it with other companies.
- Security data: when an IP address attempts suspicious actions (for example searching for vulnerable files or submitting the form automatically), we record the address, the time and the type of action, and the address may be temporarily blocked.
We do not collect sensitive data, and we ask you not to send such information through the form.
3. Why we use the data and on what legal basis
- To reply to you and send you an offer: based on your consent (Art. 6(1)(a) GDPR) and on steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
- To protect the website against attacks, automated messages and abuse, and to understand how the website is used (visitor statistics): based on our legitimate interest (Art. 6(1)(f) GDPR).
We do not use your data for marketing without separate consent, we do not sell it and we do not make automated decisions based on it.
4. How long we keep the data
- Messages received through the form or directly: at most 12 months from our last communication, if you do not become a client.
- If you become a client, data is kept for the duration of our work together and afterwards for as long as the law requires, including rules on archiving accounting documents.
- The website’s visit log and security log: 30 days, after which they are deleted automatically. A blocked IP address stays blocked at most for the period shown on the block page.
- Technical server logs: for the period set by the hosting provider, usually a few weeks.
5. Who we share the data with
- Hosting and email providers, who process the data only on our behalf and under our instructions.
- WhatsApp (Meta), only if you choose to message us on WhatsApp. In that case the WhatsApp privacy policy also applies.
- Public authorities, only when the law requires it.
6. Transfers outside the European Economic Area
Normally your data stays in the European Union. If you use WhatsApp, Meta may transfer data outside the EEA with the safeguards provided by the GDPR, such as the standard contractual clauses approved by the European Commission.
7. Your rights
You have the right to access your data, to have it corrected or erased, to restrict processing, to data portability and to object to processing. You can withdraw your consent at any time, without affecting the processing carried out before.
To exercise any of these rights, email us at office@winaccount.ro. We reply within one month at the latest.
If you are not satisfied, you can lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro.
8. Cookies and local storage
The website uses only what is strictly necessary for it to work:
- One technical session cookie (PHPSESSID), which protects the contact form against forged submissions. It is deleted automatically when you close your browser.
- Your preferences for theme (light, dark, auto) and accessibility, saved in your browser’s local storage only if you choose them. They stay on your device and are not sent to us.
Visitor statistics are produced on our server, without cookies and without third-party services (we do not use Google Analytics or similar tools). We do not use analytics, advertising or tracking cookies, and the website fonts are hosted on our own server. That is why the website does not show a cookie consent banner. You can delete cookies and locally stored data at any time from your browser settings.
9. Data security
We use an encrypted connection (HTTPS), restricted access to data and protection against automated messages. However, no transmission over the internet is completely secure, so please do not send confidential documents or information through the form.
10. Changes
We may update this policy when the law or the way we work changes. The current version is always the one published on this page, with the last updated date shown above.