Privacy Policy
1. Data Controller
The data controller for this website is PixelFormLab, registered at 437033, Nr. 178, Stret, Jud. Maramures, Romania. All data processing inquiries should be directed to [email protected].
2. Data We Collect
We collect only the minimum data necessary to fulfill our contractual obligations:
- Contact information (name, email address) submitted via our contact form.
- Communication records related to project inquiries and service delivery.
- Technical data automatically collected: IP address, browser type, operating system, and access timestamps for security purposes.
- Cookie data as described in our Cookie Policy section below.
3. Legal Basis for Processing
We process personal data under the following legal bases as defined by GDPR Article 6:
- Consent: When you submit our contact form, you explicitly consent to data processing for the stated purpose.
- Contractual necessity: Data processing required to fulfill our service agreements and deliver contracted work.
- Legitimate interest: Security monitoring, fraud prevention, and service improvement.
4. Data Retention
Contact form submissions are retained for a maximum of 24 months from the date of submission. Contract-related data is retained for the duration of the active contract plus 6 years, in compliance with Romanian commercial record-keeping obligations. Technical logs are retained for 90 days.
5. Data Sharing
PixelFormLab does not sell, trade, or rent personal data to third parties. Data may be shared only with:
- Service providers essential to our operations (hosting, email delivery) bound by data processing agreements.
- Government authorities when legally required under EU or Romanian law.
6. Your Rights (GDPR)
Under the General Data Protection Regulation (EU) 2016/679, you have the following rights:
- Right of access: Request a copy of all personal data we hold about you.
- Right to rectification: Request correction of inaccurate personal data.
- Right to erasure: Request deletion of your personal data ("right to be forgotten").
- Right to restrict processing: Request limitation of how we process your data.
- Right to data portability: Receive your data in a structured, machine-readable format.
- Right to object: Object to processing based on legitimate interests.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
7. International Data Transfers
PixelFormLab operates within the European Economic Area (EEA). Any data transfers outside the EEA are conducted only under adequate safeguards, including Standard Contractual Clauses approved by the European Commission, in compliance with GDPR Chapter V.
8. Data Security
We implement appropriate technical and organizational measures including encryption in transit (TLS 1.3), access controls, regular security audits, and staff training to protect personal data against unauthorized access, alteration, disclosure, or destruction.
9. Complaints
If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) at https://www.dataprotection.ro.