GDPR

Privacy Policy

Last updated: July 12, 2026

1. Data controller

The data controller for the Căutăm Livratori website is BSC Group FZE, Business Centre, Sharjah Publishing City Free Zone, Sharjah, U.A.E, TRN 105017437200003.

2. What your GDPR agreement means

By ticking the consent checkbox in the form and pressing the submit button, you give active, freely given, specific, informed and unambiguous consent for the processing of the data entered in the form. The checkbox is not pre-ticked, and the form cannot be submitted without your consent.

Your consent covers contacting you, reviewing your request, administering pre-contractual steps and, where needed, sharing data with partners necessary for your request. We do not use this consent for unsolicited marketing and we do not sell your data.

3. What data we collect

For SRL/PFA subcontractors we collect: company name, tax ID, administrator name, email, phone, city, message, consent status, submission date, IP address and user agent for security and abuse prevention.

For couriers we collect: full name, phone, email if provided, city, over-18 confirmation, vehicle information, preferred platforms, availability, experience, message, consent status, submission date, IP address and user agent for security and abuse prevention.

4. Why we process data

• To respond to your form request.
• To contact you by phone or email about your request.
• To evaluate a possible collaboration as a subcontractor or courier.
• To provide information about commissions, vehicles, platforms and collaboration steps.
• To administer internal records of received requests.
• For website security, CSRF protection, spam prevention and abuse investigation.

5. Legal basis

Processing is based, as applicable, on your explicit consent, pre-contractual steps requested by you, our legitimate interest in protecting the website and legal obligations where retention is required by law.

6. Who may receive the data

Data may be accessed by the controller, hosting provider, email/SMTP provider, authorized team members and, where needed for your request, partners involved in recruitment, collaboration, delivery platforms or vehicle rental. We share only the data necessary for the purpose of your request.

7. International transfers

The controller is BSC Group FZE, based in the U.A.E. By submitting the form, you understand that data may be accessed and administered by the controller from the U.A.E. If we use providers or partners outside the European Economic Area, we seek appropriate safeguards and limit transfer to necessary data.

8. Retention

We keep requests for up to 24 months from submission, unless the law requires a longer period, a later contractual relationship exists or data is needed to defend a legal claim. If you withdraw consent or request erasure, we will review the request and erase data where no other legal basis for retention applies.

9. Withdrawal of consent

You may withdraw consent for the future. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. After withdrawal, we may no longer be able to continue the discussion or collaboration process started through the form.

10. Your GDPR rights

You have the right of access, rectification, erasure, restriction, objection, portability, withdrawal of consent and the right to lodge a complaint with the competent data protection authority.

11. How to exercise your rights

You may send a request to the data controller using the company details listed above. We may request additional information to verify your identity before responding, to avoid disclosing data to unauthorized persons.

12. Security

We use reasonable measures to protect data: restricted admin access, hashed admin password, login attempt throttling, PDO database access, prepared statements, CSRF protection, validation, anti-spam honeypot, protection for sensitive files and the recommendation to use the website only over HTTPS.

13. Cookies and sessions

Cookie details are available in the Cookie Policy.

14. Complaints

You may contact the competent data protection authority if you believe your rights have been violated. For data subjects in Romania, you may contact ANSPDCP at www.dataprotection.ro.