Privacy Statement
Effective Date: July 08, 2026
Table of Contents
- 1. Introduction
- 2. Associated Data Controllers
- 3. Categories of Personal Data Processed
- 4. Purposes and Legal Grounds for Processing
- 5. Recipients of Personal Data
- 6. Data Storage Period
- 7. Your Rights
- 8. Security of Personal Data
- 9. Cookies Policy
- 10. Changes to the Privacy Policy
- 11. Contact
- 12. References
1. Introduction
The confidentiality of your personal data represents a fundamental priority for BridgeWay Log (SC. AITECH NETWORK SRL). This policy describes how we collect, use, transfer, and protect your personal data when you interact with us in connection with our products and services, including through our website.
This policy is drafted in accordance with Regulation (EU) 2016/679 of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data ("GDPR"), as well as applicable national legislation.
2. Associated Data Controllers
| Legal Entity | Registered Office | Registration Number | Contact |
|---|---|---|---|
| AITECH NETWORK S.R.L. — BridgeWay Log | Str Garii 73, Vidra, Ilfov, Romania | J2026002874005, CUI RO53296170 | Phone: +40 775 301 481 E-mail: projects@bridgewaylog.com |
3. Categories of Personal Data Processed
Depending on the nature of your interaction with BridgeWay Log, we collect different categories of personal data:
a) Clients and Business Partners:
- Identification data: name, surname, position.
- Contact data: e-mail, phone number, correspondence/delivery address.
- Transaction data: services, order history, billing data (excluding card details), customs information.
- Data collected via the website: IP address, browser type, pages visited (see Cookies Policy).
b) Data Subjects in the Context of Shipments (shippers, consignees):
- Identification and contact data: name, surname, full address, phone, e-mail.
- Shipment details: package contents, tracking information, data required for customs formalities (including CNP and ID card series and number where legally required).
c) Employees and Candidates:
- Identification data: name, surname, CNP, ID card series and number.
- Contact data: address, phone, e-mail.
- Professional and training data: CV, employment history, diplomas, certifications.
- Financial data: bank account, salary information.
- Medical data: only in the context of occupational health obligations.
d) Suppliers and Collaborators (natural persons):
- Identification and contact data: name, surname, address, phone, e-mail.
- Financial data: bank account, billing data.
4. Purposes and Legal Grounds for Processing
| Purpose of Processing | Legal Ground (Art. 6 GDPR) | Examples of Processing Activities |
|---|---|---|
| Provision of logistics and transport services | Performance of a contract (Art. 6(1)(b)) | Processing transport orders, tracking shipments, warehousing, communication with clients. |
| Fulfillment of legal obligations | Legal obligation (Art. 6(1)(c)) | Customs documents (where CNP may be processed), invoicing, reporting to authorities. |
| Pre-contractual steps and conclusion of contracts | Performance of a contract (Art. 6(1)(b)) | Preparation of personalized offers, negotiation and signing of contracts. |
| Management of client and partner relations | Legitimate interest (Art. 6(1)(f)) | Administrative communications, complaint handling, satisfaction evaluation. |
| Commercial communications and marketing | Legitimate interest / Consent (Art. 6(1)(a)) | Sending offers, newsletters and information about our services. |
| Recruitment and human resources management | Contract / Legal obligation | Processing applications, interviews, employment contracts, salary payments. |
| Physical and IT system security | Legitimate interest | Access monitoring, network and IT security. |
| Service improvement and data analysis | Legitimate interest | Website traffic analysis, internal reporting. |
5. Recipients of Personal Data
To fulfill our contractual and legal obligations, we may disclose your data to partners, subcontractors, authorities, service providers, and insurers, under confidentiality and data protection agreements. Transfers are carried out securely, based on an adequacy decision of the European Commission or Standard Contractual Clauses (SCCs).
6. Data Storage Period
Data is kept only for the period necessary for the collection purposes:
- For the duration of the contract execution;
- 10 years for financial-accounting documents;
- Until consent is withdrawn (for marketing);
- For the duration of the statutory limitation period to defend our legitimate interests.
7. Your Rights
According to GDPR, you benefit from the following rights:
- Right to information and access;
- Right to rectification;
- Right to erasure ("right to be forgotten");
- Right to restriction of processing;
- Right to data portability;
- Right to object;
- Right not to be subject to an automated decision;
- Right to withdraw consent;
- Right to file a complaint with the ANSPDCP (www.dataprotection.ro).
8. Security of Personal Data
BridgeWay Log implements technical and organizational measures to protect your data: encryption, access control, staff training, security audits, and incident management.
9. Cookies Policy
Our website uses cookie files to improve the browsing experience, analyze traffic, and for personalized functionalities. Consult the Cookies Policy for details.
10. Changes to the Privacy Policy
We reserve the right to periodically update this policy. Any change will be published on the website and, if necessary, notified via the cookie banner.
11. Contact
- E-mail: projects@bridgewaylog.com
- Phone: +40 775 301 481
- Address: Str Garii 73, Vidra, Ilfov, Romania
12. References
- Regulation (EU) 2016/679 (GDPR) — The official text of the regulation;
- National Supervisory Authority for Personal Data Processing (ANSPDCP) — www.dataprotection.ro;
- Guidelines and recommendations of the European Data Protection Board (EDPB);
- Law no. 190/2018 regarding the implementation of GDPR;
- Commission Decision (EU) 2021/914 on standard contractual clauses;
- Commission Decision of July 26, 2000 on the adequacy of data protection in Switzerland.