GDPR
Privacy and personal data
Last updated: October 2026.
Data controller
DIANYS HOLDING SRL, tax ID 37172757, trade register J22/514/2017, registered office 5 Dumitru D. Pătrășcanu St., Bl. 34, Sc. B, 1st floor, Apt. 6, Tomești, Iași County, 707515, Romania. Data protection contact: contact@dianysassets.ro.
Data we process
The data entered in the request form: name, position, company, country, email, phone, profile, indicative budget, message and assets of interest. For security we also record the IP address and the time of submission.
Purpose and legal basis
Replying to your request, sending the confidentiality agreement and documents, arranging site visits and keeping a record of discussions about the assets. The legal basis is your request and steps prior to a contract (Art. 6(1)(b) GDPR), and the legitimate interest in protecting the confidentiality of the transaction (Art. 6(1)(f)).
Who receives the data
The owners of the assets and their legal or tax advisers, only as needed for the transaction, and our web hosting provider in Romania. We do not sell or rent data.
Retention
For the duration of the sale process and at most 24 months after the last contact, after which it is deleted, except for documents we are legally required to keep.
Your rights
Access, rectification, erasure, restriction, portability and objection, by email to the address above. You may lodge a complaint with the Romanian data protection authority, ANSPDCP (www.dataprotection.ro).
Direct messages to companies
We may contact companies and individuals whose activity is relevant to the assets presented, individually, based on data they have officially published (company website, press releases, public professional profile). The legal basis is legitimate interest (Art. 6(1)(f) GDPR). Every message identifies the controller in full and carries an unsubscribe link; addresses that ask us to stop go on an exclusion list. The link to the asset page in the message carries a unique code through which we record that it was opened (no cookies; the IP address is kept only as a cryptographic hash), to adjust our follow-up.
Cookies and analytics
The public website uses no marketing or analytics cookies and loads no third-party tracking scripts. Fonts and all resources are served from our own server. The data room uses a single session cookie, strictly necessary for sign-in and deleted when the browser closes. In the data room we log access (who, which document, when) to protect the documents.