What we don't do
The absences come first, because they are why the rest of this notice is so short. You can verify every line by opening your browser's developer tools.
- We use no cookies. This site neither writes to nor reads from your device — which is why you will never see a consent banner here.
- We use no analytics. Not Google Analytics, not a “privacy-friendly” alternative. We do not count visitors.
- We load nothing from third parties. Fonts are served from our own server, not from Google. There are no tracking pixels, social widgets or ad networks.
- We build no profiles and make no automated decisions about you.
- We sell and share data with no one.
Who the controller is
PENTAGON BUSINESS COM SRL6A-75 Antiaeriana Street, Sector 5, Bucharest, RomaniaTrade Register J1996007479400 · VAT RO8763857 We have not appointed a data protection officer: we are not a public authority, we do not monitor individuals systematically on a large scale, and we do not process special categories of data at scale — the art. 37 GDPR conditions are not met. For anything concerning your data, write to the address below.
What is processed, concretely
Web server logs
- What
- IP address, date and time of the request, the page requested, the response code, the response size, the referring page and your browser identifier (user agent).
- Why
- Operating and securing the server — diagnosing errors, detecting abuse and attack attempts.
- Legal basis
- Our legitimate interest in keeping the service running and secure (art. 6(1)(f) GDPR).
- How long
- 14 days, after which the files are deleted automatically by log rotation.
Messages you send us
- What
- Your e-mail address and whatever you chose to put in the message — name, company, phone, project details.
- Why
- To reply to you and, if the conversation goes further, to prepare an offer.
- Legal basis
- Steps taken at your request prior to entering a contract (art. 6(1)(b) GDPR) or, for plain correspondence, our legitimate interest in answering people who write to us (art. 6(1)(f)).
- How long
- 3 years from the last exchange — the general limitation period. After that, the correspondence is deleted.
Where the data goes
The site runs on Pentagon Business COM's own infrastructure, in Romania. We use no analytics, marketing or hosting providers outside the company, so there are no transfers of data outside the European Economic Area. Data may be disclosed to a public authority only where the law requires it.
Your rights
In relation to your data you have the rights set out in the GDPR:
- access — to learn what data we hold about you;
- rectification — to have inaccurate data corrected;
- erasure — to have data deleted, where we have no legal reason to keep it;
- restriction — to have processing paused while a dispute is resolved;
- objection — to object to processing based on legitimate interest;
- portability — to receive your data in a machine-readable format.
You exercise any of them by writing to office [at] pentagon.ro . We answer within one month at the latest. We will not ask for identity documents unless we cannot otherwise establish that the request is yours.
If our answer does not satisfy you, you may lodge a complaint with the Romanian supervisory authority, ANSPDCP (dataprotection.ro), or go to court.
Changes
If we change how the site works — adding a contact form, for instance — we update this page at the same time, not afterwards. The date below is the last substantive review.
Last updated 24 July 2026
Contact →