Privacy notice
Who is responsible
This website is run by NeedAI Studio, Romania, which decides how the information sent through it is used (the controller under the GDPR). For any privacy question, write to us through the contact form or at needaistudio@gmail.com. We have not appointed a data protection officer, as none is required; your message reaches the person who handles your data.
The short version
This website sets no cookies, stores nothing in your browser, uses no analytics or advertising tools and loads nothing from third parties: fonts, images and videos are served from our own server. The only personal data we receive is what you choose to send in the contact form. This notice applies the GDPR (Regulation (EU) 2016/679), Law 190/2018 and Law 506/2004.
The contact form
When you send an inquiry we receive your email address, your message and anything else you add (name, company, budget, preferred language, the service you selected, how you found us). Only the email address and the description are required: without them we cannot reply. We use the inquiry only to reply to you and, if you wish, to prepare an offer; if you tell us how you found us, we also count that answer to learn which channels bring inquiries. Legal basis: steps taken at your request before a possible contract, and our legitimate interest in answering business inquiries (GDPR art. 6(1)(b) and (f)).
When we reply
We answer from our mailbox. If we work together, the correspondence, the proposal, the contract and the invoices are kept as business records. Legal basis: the contract or the steps before it (art. 6(1)(b)) and, for invoices and accounting records, our legal obligations (art. 6(1)(c)). We do not add you to any mailing list.
Who processes it for us
Your inquiry is stored on our server and emailed to our mailbox. Our hosting provider and our email provider process it only on our behalf, under a data processing agreement (GDPR art. 28); write to us if you want to know who they are. Where a provider may access data from outside the European Economic Area, the transfer relies on an adequacy decision, such as the EU-US Data Privacy Framework, or on the European Commission’s standard contractual clauses. We do not sell or share your data with anyone else.
How long
The copy stored with the website is deleted automatically 30 days after it has been emailed to us. In our mailbox, inquiries that did not lead to a project are deleted at the latest 24 months after our last exchange. If we work together, project correspondence is kept for the project and the 3 years after it (the general limitation period), and invoices and accounting documents for the periods set by the accounting law (Law 82/1991). Backups of the server are overwritten within 30 days.
Technical data
To deliver pages and protect the form against abuse, our server processes your IP address while it answers. We keep no access logs of visitors. For the form’s limits it holds, in memory only, a keyed fingerprint of your address that cannot be turned back into it; the key and all counts are replaced every midnight (UTC), and none of this is linked to your inquiry. Legal basis: our legitimate interest in keeping the website secure (art. 6(1)(f) and recital 49).
No automated decisions
We take no decisions about you by automated means. If many messages are sent in a short time, the form asks you to wait a few minutes; nothing else follows from it.
External links
Links to our projects, social networks or other websites open those sites, which have their own privacy policies. Nothing from them is loaded until you click.
Your rights
You may ask for access to your data, a copy in a portable format, its correction or deletion, or the restriction of its use, and you may object to processing based on our legitimate interest. Write to us and we will answer within one month; in complex cases we may extend this by two months and will tell you why. You may also complain to the Romanian data protection authority, ANSPDCP (B-dul G-ral. Gheorghe Magheru 28-30, sector 1, București, dataprotection.ro), or to the authority in the country where you live or work.
Changes
We update this notice when the website or our providers change. The version that applies is the one published here, with its date at the top.