Privacy policy

5.1 Controller

Bunny Honey Club S.R.L. (Trassa), Strada Petricani 4, Demisol Boxa Nr. 10, 023842 București, Romania. J2024009993406 · RO50157240 · represented by Arthur Hof. For anything concerning data, and for objections: privacy@trassainfra.com, phone +49 163 7830812. A data protection officer is not required by law here (art. 37 GDPR); the address above is responsible.

5.2 We process the data of two groups of people

This policy covers (a) suppliers and their staff whom we approach or who receive the report, and (b) people who appear in the award data we publish. The second group is rarely considered — here it is explicit: §5.5.

5.3 (a) Suppliers we approach

Categories: company name, legal form, address, switchboard number, general company e-mail address, website, product classes, delivery regions; the name, role and business contact details of the person we speak to; call notes, consents, objections. Source: public registers — RO: ANAF, Registrul contribuabililor · DE: Handelsregister / Unternehmensregister · AT: Firmenbuch · MD: ASP, Registrul de stat · UA: ЄДР — plus your own company website and public exhibitor directories. Purposes and legal bases:

• approaching you and sending the personalised sample, to show you published contract awards in your

product class — legitimate interest (art. 6(1)(f)): our interest in B2B direct approach and your interest in relevant business opportunities; balanced by using company contact data only, by every approach having a concrete occasion, and by an objection that works in one click;

• sending the weekly report — consent (art. 6(1)(a)), withdrawable at any time;
• entering into and performing a subscription — art. 6(1)(b);
• evidencing consents and objections, and statutory record-keeping — art. 6(1)(c) and (f).

Calls are not recorded. We note the date, time, the person, the outcome and the exact wording of any consent given.

5.4 Retention

• Prospect data: until you object, at most 24 months after the last contact.
• Consent and objection evidence: 5 years (the duty to demonstrate consent, art. 7(1) GDPR).
• Suppression list (objections): indefinitely — it is the only way to not approach you again

(art. 21(3) GDPR).

• Page views: IP address truncated to /24 immediately, user agent 30 days.
• Contract and accounting records: as Romanian commercial and tax law requires.

5.5 (b) People who appear in the award data we publish

We process Romania's official award notices (SICAP / e-licitatie.ro, families CAN and SCNA). Besides company data, those notices sometimes contain contact details relating to a natural person. Source: the public notices named above. Purpose: informing suppliers who has been awarded a public contract and what work it covers. Legal basis: legitimate interest (art. 6(1)(f)) in analysing already published award information. What we deliberately do not do: we publish company-level contact data only — the switchboard number, the general address. The mobile number of a named individual is never published and never sent; our processing filters it out. Your rights apply unchanged: access, rectification, erasure and objection at privacy@trassainfra.com. On objection we remove you from all future analyses and pages.

5.6 Recipients and processors

We pass data only to service providers working for us. A processor agreement under art. 28 GDPR exists with each of them:

• Vercel — serving the website and the sample pages.
• Supabase — storing page events, consents and objections.
• Resend — sending consented e-mail.

Where a transfer to a third country occurs, it takes place on the basis of the EU standard contractual clauses. We do not pass data to third parties for their own marketing, and we do not sell address lists.

5.7 Cookies and audience measurement

This site sets no advertising or analytics cookies and embeds no ad networks. To know whether a sample page was opened, we store the time, the page token, an IP address truncated to /24 and the user agent. No individual can be identified from that.

5.8 Your rights

Access (art. 15), rectification (16), erasure (17), restriction (18), portability (20), objection to direct marketing (21) — at any time, without giving reasons, with immediate effect, and withdrawal of consent (art. 7(3)). We carry out no automated decision-making or profiling within the meaning of art. 22. The fastest route: object in one click or privacy@trassainfra.com. Right to complain: ANSPDCP, B-dul G-ral. Gheorghe Magheru 28-30, 010336 Bucharest, Romania (anspdcp.ro). You may also contact the supervisory authority where you live or work.

5.9 Version

This policy applies from 08.09.2026. Earlier versions on request.