Privacy Policy
Last updated: 2026-05-22
This Privacy Policy explains how PIELEANU GEORGE PERSOANĂ FIZICĂ AUTORIZATĂ ("brain4tech", "we", "us" or "our") collects, uses, shares and protects personal data when you visit our website at https://brain4tech.ro, use our vending management platform at https://saas.brain4tech.ro (the "Platform"), or otherwise interact with us. We process personal data in accordance with Regulation (EU) 2016/679 (the "GDPR") and applicable Romanian data protection legislation.
1. Who we are (Data Controller)
The controller responsible for the personal data described in this policy is:
PIELEANU GEORGE PERSOANĂ FIZICĂ AUTORIZATĂ (Persoană Fizică Autorizată (PFA))
Bragadiru, jud. Ilfov, Romania
Trade Register No.: F23/405/2022 · Tax ID (CUI): 27469883
Email: office@brain4tech.ro
We have not appointed a Data Protection Officer, as we are not required to under Article 37 GDPR. You may direct any data protection question to the contact above.
2. The personal data we collect
Depending on how you use our services, we may process:
- Account data — name, email address, telephone number, job role, username, hashed password and multi-factor authentication settings of users created on the Platform.
- Business contact data — contact details of clients, suppliers and locations that our operator customers record in the Platform.
- Operational data — records relating to vending machines, routes, stock, sales and service activity, which may occasionally include identifiers of staff who performed an action.
- Communications — information you provide via our contact form (name, email, subject, message) or when you contact us by email.
- Technical data — IP address, browser type, device information, log data and timestamps generated when you use the website or Platform.
- Cookies — see our Cookie Policy.
3. How and why we use your data, and our legal bases
We process personal data for the following purposes and on the following legal bases under Article 6 GDPR:
| Purpose | Legal basis |
|---|---|
| Providing, operating and securing the Platform and user accounts | Performance of a contract (Art. 6(1)(b)) |
| Authenticating users and preventing unauthorised access | Legitimate interests in securing our service (Art. 6(1)(f)) |
| Responding to your enquiries and providing support | Legitimate interests / pre-contractual steps (Art. 6(1)(f)/(b)) |
| Complying with legal, accounting and tax obligations | Legal obligation (Art. 6(1)(c)) |
| Maintaining and improving our services | Legitimate interests (Art. 6(1)(f)) |
4. Our role: controller and processor
brain4tech is a multi-tenant business platform. For data about our own account holders, website visitors and people who contact us, we act as the data controller. For personal data that our operator customers ("tenants") upload or manage within their own workspace, we act as a data processor on their behalf, and the tenant is the controller. In that role we process such data only on documented instructions from the tenant and as described in our agreement with them.
5. Cookies and similar technologies
We use strictly necessary cookies to keep you signed in, to secure forms and to remember your language preference. We do not use advertising or third-party tracking cookies. For details, see our Cookie Policy.
6. How we share your data
We do not sell your personal data. We may share it with:
- Service providers that process data on our behalf (e.g. hosting and infrastructure, email delivery), bound by data processing agreements;
- Tenants, where you are a user within their workspace;
- Authorities, where required by law or to establish, exercise or defend legal claims.
7. Where your data is processed
Your personal data is hosted and processed within the European Union (Romania). Where any transfer outside the European Economic Area becomes necessary, we will ensure an adequate level of protection through appropriate safeguards, such as the European Commission's Standard Contractual Clauses.
8. How long we keep your data
We retain personal data only for as long as necessary for the purposes set out above: for the duration of the relevant account or business relationship, and thereafter only as required to comply with legal obligations (for example, accounting records are kept for the periods required by Romanian law), to resolve disputes and to enforce our agreements. When data is no longer needed, it is deleted or anonymised.
9. How we protect your data
We apply appropriate technical and organisational measures to protect personal data, including encryption of sensitive credentials, hashed passwords, optional multi-factor authentication, role-based access control, strict tenant isolation and access logging.
10. Your rights under the GDPR
Subject to the conditions in the GDPR, you have the right to:
- access the personal data we hold about you;
- request rectification of inaccurate or incomplete data;
- request erasure of your data (the "right to be forgotten");
- request restriction of processing;
- object to processing based on our legitimate interests;
- data portability;
- withdraw consent at any time, where processing is based on consent.
To exercise these rights, contact us at office@brain4tech.ro. If you are a user within a tenant's workspace, please address your request to that tenant; we will assist them as their processor. You also have the right to lodge a complaint with the supervisory authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), https://www.dataprotection.ro.
11. Children
Our services are intended for businesses and are not directed at children. We do not knowingly collect personal data from children under 16.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The current version is indicated by the "Last updated" date at the top of this page. Material changes will be communicated through the Platform or by email where appropriate.
13. Contact us
For any question about this Privacy Policy or your personal data, contact PIELEANU GEORGE PERSOANĂ FIZICĂ AUTORIZATĂ at office@brain4tech.ro or by post at Bragadiru, jud. Ilfov, Romania.