How we handle your details
Last updated: September 2026
We wrote this page for two groups of people. The first is professionals at transfer-pricing firms whom we contact by email about TP Scout. The second is anyone who visits tpscout.eu. If we emailed you, that email linked to this page, and this page tells you what we hold and how to make us stop.
1. Who is responsible
TP Scout is a product of Bytes Bender SRL, a company registered in Romania. Bytes Bender SRL decides how your details are used, so under the GDPR it is the controller.
- Company
- Bytes Bender SRL
- EUID
- ROONRC.J2026038284009
- Tax ID (CUI)
- 54886357
- Registered office
- Gura Șuții, Dâmbovița, Romania
- Privacy questions
- octavian.d@tpscout.eu
We have not appointed a Data Protection Officer. Write to the address above and a person from our team will answer.
2. What we hold about you
- Your first and last name, job title and firm.
- Your work email address and the country you work in.
- The public page or post where we found you.
- When we wrote to you, whether you replied, and whether you asked us to stop.
We do not collect private email addresses, phone numbers or any sensitive data. We do not build a profile of you, and no decision about you is made by a machine.
3. Where we found it
Most often we find people ourselves, on two kinds of public source: the website of the firm you work for, and your public professional activity on LinkedIn. Sometimes a business contact gives us your details. We use them only after we confirm where they came from. We never buy contact lists. Our first email to you names the exact place we found your address.
If we note your details but then decide not to write to you, we delete them within one month.
4. Why we use it, and on what legal basis
We use your details to write to you about TP Scout, a tool built for the comparables work your firm does, and to answer you if you reply.
Our legal basis is legitimate interest, under Article 6(1)(f) of the GDPR. Our interest is to tell the few firms that do this work about a product made for them. Before we started, we weighed that interest against your rights in a written assessment. It limits us to one email written by hand, one follow-up at most, no tracking pixels, and a plain way to say no. We only write to people in countries where the law lets us do this without asking first.
5. Who else sees it
A few service providers handle your details for us, only on our instructions:
- our email provider, which carries and stores our messages;
- our website host, which delivers this site and counts its visits.
We do not sell your details, and we do not give them to anyone for their own marketing. We would share them with an authority only if the law required it.
6. Data outside the EEA
Some of these providers may handle data outside the European Economic Area. When they do, we rely on a safeguard the GDPR recognises: an EU adequacy decision, such as the EU-U.S. Data Privacy Framework, or the EU Standard Contractual Clauses. Ask us at the address above and we will tell you which safeguard applies and how to get a copy.
7. How long we keep it
- You do not reply: we delete your details 12 months after our last email.
- You reply: we keep the conversation while we are in touch, and delete it 12 months after our last exchange.
- You ask us to stop: we delete everything except your email address and the date you asked. We keep those two on a do-not-contact list, with no end date, so that we never write to you again.
8. Your rights
You can ask us, at any time and free of charge, to:
- show you what we hold about you;
- correct anything that is wrong;
- delete your details;
- stop using your details while we look into a concern you raise.
You can also object to our emails at any time, with no reason needed. Reply "no" to any of our messages, or write to octavian.d@tpscout.eu. We stop the same day. This is your right under Article 21 of the GDPR.
We answer every other request within one month.
9. Complaints
Please tell us first, and we will try to put it right. You also have the right to complain to a data protection authority:
- in Romania, where we are based: ANSPDCP;
- in the United Kingdom: the Information Commissioner's Office (ICO);
- in Switzerland: the Federal Data Protection and Information Commissioner (FDPIC);
- anywhere else: the authority in the country where you live or work.
10. Visiting tpscout.eu
This site sets no cookies, runs no forms and asks you for nothing. Our website host counts visits without cookies. It records which page was opened, the referring site, your country and your browser type, and it shows us only totals. To deliver the page and work out the country, the host handles your IP address briefly, and we never see it. Our legal basis is legitimate interest in keeping the site working and knowing that people can reach it.
The "Book a demo" buttons on our home page lead to another website, which has its own privacy notice.
11. Changes to this page
If we change how we handle your details, we update this page and the date at the top.