Privacy policy

Do not copy or reproduce

Last updated: May 24, 2025

 

1. Introduction

We (“we”, “us”, “our”) respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, submit our contact/collaboration form, or interact with our site, in accordance with the EU General Data Protection Regulation (GDPR).

 

2. Data controller

SC AC GRAPHIC DESIGN SRL | CUI 44415654 | J33/1115/2021

 

3. Personal data we collect

  • Form submissions: first and last name, email address, company name, job position, newsletter-subscription preference.

  • Analytics data (via Vercel Analytics):

    • Page views
    • Referrer URL
    • Browser and device type
    • Anonymized IP (region-level)
    • Timestamp

     

4. Purpose and legal basis for processing

We process your personal data for the following purposes:

  • Responding to inquiries and collaboration requests

    • Data used: form submission data (name, email, company, position, subscription preference)
    • Legal basis: Article 6(1)(b) GDPR (processing necessary for performance of a contract or pre-contractual steps)

  • Newsletter delivery (if you opt in)

    • Data used: email address and newsletter subscription flag
    • Legal basis: Article 6(1)(a) GDPR (consent)

  • Website analytics and improvement

    • Data used: anonymized analytics data collected via Vercel Analytics (page views, referrer URL, browser/device type, anonymized IP, timestamp)
    • Legal basis: Article 6(1)(f) GDPR (our legitimate interest in improving the website and services)

 

5. Vercel Analytics

  • We use Vercel Analytics to monitor and optimize website performance.
  • Vercel processes only anonymized traffic data, without user-level identifiers or cookies.
  • No personal data (e.g., name, email) is sent to Vercel.
  • Analytics logs are retained for 30 days, then purged per Vercel’s GDPR-compliant policy.

 

6. Data storage and retention

  • Form data: stored in our EU-based database. Retained for up to 3 years after last contact unless you request deletion.
  • Analytics data: retained by Vercel for 30 days, then automatically deleted.

 

7. Data subject rights

Under GDPR, you have the right to:

  1. Access your personal data (Art. 15)
  2. Rectify inaccurate data (Art. 16)
  3. Erase (“right to be forgotten”, Art. 17)
  4. Restrict processing (Art. 18)
  5. Data portability (Art. 20)
  6. Object to processing (Art. 21)
  7. Withdraw consent at any time (Art. 7(3))

To exercise any right, contact us at [email protected]. We will respond within one month.

 

8. Data security

We implement appropriate technical and organizational measures (encryption, access controls, audits) to protect your data against unauthorized access, alteration, disclosure, or destruction.

 

9. Third-Party disclosure

We do not sell or rent your personal data. We may share your data with:

  • Vercel (as processor of anonymized analytics)
  • Hosting & email providers under strict data-processing agreements
  • Legal authorities if required by law

 

10. International transfers

All data is stored within the EU. We will not transfer personal data outside the EEA without appropriate safeguards (e.g., Standard Contractual Clauses).

 

11. Cookies and tracking

  • Essential cookies: required for site functionality.
  • Analytics: Vercel Analytics operates without setting cookies or collecting user-identifiable data.
  • No marketing or third-party cookies are used.

 

12. Changes to this policy

We may update this Privacy Policy periodically. The “Last updated” date will reflect any changes. Continued use of the site constitutes acceptance.