Romanian VAT Validation (ANAF) for Microsoft Dynamics 365 Business Central Last updated: 28.10.2026.
This privacy statement explains which data the app “Romanian VAT Validation (ANAF)” (the “App”) processes, where this data goes and who is responsible for it.
1. Who we are
The App is published by:
SplashDev eU Johann-Straß-Gasse 3, 1040 Vienna, Austria Email: [email protected].
Website: https://splashdev.at
2. What the App does
The App checks Romanian customers and vendors in your Business Central environment against the public VAT web service of the Romanian National Agency for Fiscal Administration (ANAF). It stores the result (for example VAT registration, VAT on cash basis, inactive taxpayer status, split VAT and RO e-Factura registration) on the customer or vendor in your Business Central environment.
3. Which data is sent, and to whom
When a check is performed, the App sends the following data directly from your Business Central environment to the ANAF web service (webservicesp.anaf.ro):
- the Romanian fiscal identification code (CUI/CIF) of the customer or vendor, without the “RO” prefix
- the date for which the status is requested
No other data is sent. In particular, the App does not send names, addresses, amounts, documents or user information to ANAF.
ANAF returns publicly available register data for that fiscal code, such as the registered company name, address, trade register number and VAT status. ANAF is a Romanian public authority and processes requests under its own terms and privacy rules. SplashDev has no influence on how ANAF processes the requests.
Please note that for sole traders and other natural persons with a fiscal code (for example PFA, II), the fiscal code and the returned register data may be personal data. You decide which partners are checked.
4. Where data is stored
All results are stored only in your own Business Central environment:
- status fields on the customer and vendor cards
- the “ANAF Check Entries” log (fiscal code, result, date and time, and the user ID of the person or job that ran the check)
SplashDev does not receive, store or have access to this data. The data is subject to the data handling and retention terms of Microsoft Dynamics 365 Business Central and your own company policies. You can delete log entries at any time.
5. Telemetry
The App uses the telemetry that is built into Microsoft Dynamics 365 Business Central. Business Central sends technical events about the App to a Microsoft Azure Application Insights resource of SplashDev in the region West Europe:
- installation, update and uninstallation of the App
- errors in the App’s code and long-running operations
- calls to the ANAF web service (address, duration and result, not the fiscal code)
The events contain technical identifiers such as the Microsoft Entra tenant ID, the name and type of the Business Central environment, the company name and the versions of the App and of Business Central. Error events can contain the error message shown to the user, which may include a customer or vendor number or name. The App itself does not add fiscal codes, addresses, amounts or document data to the telemetry.
SplashDev uses this telemetry only to detect and fix errors and to understand how the App is used. The telemetry is kept for 90 days and then deleted automatically. The legal basis is our legitimate interest in operating and improving the App (Art. 6(1)(f) GDPR). More information about Business Central telemetry: https://learn.microsoft.com/dynamics365/business-central/dev-itpro/administration/telemetry-overview
6. Roles and legal basis
For the data stored in your Business Central environment, your company is the controller. SplashDev does not process this data on your behalf, because it never reaches SplashDev. For the technical telemetry described in section 5, SplashDev is the controller. The request to ANAF is made by your Business Central environment, based on your use of the App.
7. Your rights and contact
If you have questions about this privacy statement or about data protection in relation to the App, please contact us at [privacy contact email]. Under the GDPR you have the right to lodge a complaint with a supervisory authority. In Austria this is the Datenschutzbehörde (https://www.dsb.gv.at).
8. Changes
We may update this privacy statement when the App changes. The current version is always available at https://splashdev.at/privacy-statement/.