EN RO Contact Get a free ERP assessment

Privacy Policy

How Vanguard 360 Solutions handles your personal data.

Last updated: 8 October 2026

Who we are

This website is operated by Vanguard 360 Solutions, a Microsoft Dynamics 365 Business Central implementation partner based in Romania. We are the data controller for any personal data collected through this website, through direct communications with us, or through the licence check-in and telemetry of our Business Central apps.

Vanguard 360 Solutions SRL, Str. Theodor Neculuță nr. 18, 550057 Sibiu, Romania.
Trade Register (ONRC): J2023001296324 · Fiscal code (CUI): 48467206
Email: [email protected]

What data we collect and why

This website uses no tracking pixels or advertising tools and sets no cookies. It counts visits with Cloudflare Web Analytics, which works without cookies and does not identify you (see Visit statistics). We collect personal data only when you choose to contact us: through a form on this website, by email, by phone or WhatsApp, or by booking a call. This may include:

  • Name and email address — when you send us an email or book a call via Calendly.
  • Phone number — when you reach out via WhatsApp or provide it during a conversation.
  • Company name and job title — when you share this as part of your enquiry.
  • Message content — the details of your question or project enquiry.

Forms on this website

The website has two kinds of form:

  • The contact form (on the contact and support pages) sends your name, email address and, if you write one, your message.
  • The short email forms (to receive the implementation playbook on service pages and blog posts, or the result of the ERP Readiness Scorecard) send your email address, the page or form it came from and, for the scorecard, your score.

When you send a form, our website's server turns it into an email to us, delivered through Resend, an email delivery service. The email also records which form and which of our two websites it came from, and how you reached the site during that visit: the campaign tags in the link you followed (for example a link in one of our LinkedIn posts), the website you came from and the first page you opened. Your browser keeps this only for the open tab (in session storage, not a cookie) and sends it only if you send a form. To block automated spam, the server keeps a short-lived counter linked to your IP address (deleted automatically within two hours) and checks how long the form took to fill. We use the data only to reply to you, or to send what you asked for.

We use this information solely to respond to your enquiry and, where relevant, to schedule a discovery call. We do not use it for marketing without your explicit consent.

Legal basis

Processing is based on legitimate interest (responding to a business enquiry you initiated) and, where applicable, consent (when you agree to receive follow-up communications).

How long we keep your data

We retain correspondence for as long as is reasonably necessary for business purposes — typically for the duration of a project relationship and a reasonable period afterward for reference. You can request deletion at any time (see below).

Third-party services

When you contact us through the following channels, your data is also subject to their respective privacy policies:

This website is hosted on Cloudflare Pages. Cloudflare may process technical data (IP address, request metadata) as part of delivering the site. See Cloudflare's privacy policy.

Visit statistics

We use Cloudflare Web Analytics to see how many people visit the site, which pages they read and which websites send them. It sets no cookies, does not use local storage and does not build a profile of you across sites. We see only totals, never individual visitors. Legal basis: our legitimate interest in knowing which content is useful. See Cloudflare Web Analytics.

Our Business Central apps

This section covers the apps we publish for Microsoft Dynamics 365 Business Central (E-Invoice, E-Transport, SAF-T, License Manager and RO Foundation). They run inside the customer's Business Central. The customer organisation is our contact for the data below; the apps are licensed under our licence terms.

Licence check-in

Every paid app depends on our free License Manager app. About once a day it contacts our License Service at license-api.365vanguard.com to register the environment and receive a signed licence token. It sends:

  • the Microsoft Entra tenant ID and the environment name and type (production or sandbox);
  • the Business Central version, localisation and country;
  • the 365vanguard apps installed, their names, publisher and versions, and the License Manager version;
  • the names and number of the companies in the environment, and the number of users who signed in during the last 30 days (a count only, no names);
  • an installation ID and secret issued at registration, the ID of the last licence token received, and technical events such as a failed check or an uninstall.

The service also records the IP address a registration came from and the time of each check-in. License Manager does not send business documents, ledger data, or names or contact details of users. Company names can contain a person's name (for example a sole trader); we treat them as personal data where they do.

Purpose: to issue and verify licences and trials, to see which environments use our apps, to detect unlicensed use and misuse, and to support customers. Legal basis: performance of the licence agreement and our legitimate interest in protecting and supporting our software (GDPR art. 6(1)(b) and (f)).

Retention: we keep licence records while the apps are in use and afterwards for as long as we need them for licensing, invoicing and legal claims. Encrypted backups of the licence database are kept for 30 days.

Location: the License Service runs on a server we rent from Hetzner Online GmbH in the European Union. Licence tokens are signed with a key held in Microsoft Azure Key Vault; only a hash of the token is sent there, never your data. Our staff sign in to the licence console with Microsoft Entra ID.

Application Insights telemetry

Our apps are configured to send Business Central's technical telemetry to a Microsoft Azure Application Insights resource we own, in the Poland Central region (European Union). Business Central sends events such as an app being installed, updated or uninstalled, and errors, together with technical identifiers such as the Microsoft Entra tenant ID, the environment name and the app name and version. We use it to find installations that never checked in, and to diagnose errors. Legal basis: our legitimate interest in maintaining and protecting our software. The data is kept for the retention period set on that resource.

Exchanges with ANAF

E-Invoice, E-Transport and the ANAF VAT payer check in RO Foundation connect directly from the customer's Business Central to ANAF's services (for example api.anaf.ro and webservicesp.anaf.ro). Invoices, transport declarations and the fiscal codes checked go from the customer to ANAF. They do not pass through us, and we do not receive them. SAF-T creates its file inside Business Central and sends nothing.

Service providers for the apps

  • Microsoft (Microsoft Azure: Application Insights in Poland Central, Key Vault, and Microsoft Entra ID for staff sign-in). Microsoft Privacy Statement.
  • Hetzner Online GmbH, Germany (the server that runs the License Service, in the European Union). Hetzner privacy policy.

Cookies

This website does not set any cookies. No tracking, analytics, or advertising cookies are used.

Your rights

Under GDPR, you have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate data.
  • Erasure — ask us to delete your data, subject to any legal retention obligations.
  • Portability — receive your data in a structured, machine-readable format.
  • Objection — object to processing based on legitimate interest.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

Complaints

If you believe your data has been handled incorrectly, you have the right to lodge a complaint with the Romanian data protection authority:

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
www.dataprotection.ro

Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. We recommend checking back periodically if you have ongoing concerns about data privacy.