Privacy policy

1. Data controller

• Name: STUDIO TEI 29
• Registered address: Bulevardul Lacul Tei 29, 020372, Bucharest
• Email: office@studiotei29.ro

2. What data we collect and from where

2.1. The contact form

When you fill in the contact form on the website, we collect the following data that you provide voluntarily:

• first and last name;
• email address;
• phone number (optional);
• the content of your message.

2.2. Automatically collected data

When you visit the website, certain technical data is collected automatically through cookies and similar technologies:

• IP address (anonymised where possible);
• browser type and device used;
• pages visited and duration of the visit;
• source of the visit (direct, social media, organic search etc.).

2.3. Data collected through third-party services

• Google Analytics, anonymised data about visitor behaviour on the site, used for traffic analysis;
• Meta Pixel (Facebook/Instagram), visitor data used to measure the effectiveness of advertising campaigns and for remarketing;
• Google Maps, when the embedded map loads on the website, Google may collect visitor data according to its own privacy policy.

3. Purposes of processing and legal basis

We process your personal data for the following purposes, each with its own GDPR legal basis:

• responding to requests sent through the contact form, basis: legitimate interest (art. 6(1)(f) GDPR) or pre-contractual steps taken at your request (art. 6(1)(b) GDPR);
• traffic analysis through Google Analytics, basis: consent (art. 6(1)(a) GDPR);
• advertising and remarketing through Meta Pixel, basis: consent (art. 6(1)(a) GDPR);
• displaying the map through Google Maps, basis: consent (art. 6(1)(a) GDPR).

Consent for cookies is collected through the cookie banner shown on your first visit to the website. You can withdraw it at any time through the cookie settings available on the site.

4. Data retention

• contact form messages: a maximum of 12 months from the last interaction, after which they are deleted;
• Google Analytics data: according to the settings configured in the account (14 months by default);
• Meta Pixel data: according to the Meta Platforms Ireland policy (generally 180 days);
• technical browsing data: according to the lifetime of each cookie, detailed in the “Cookies” section below.

5. Recipients of the data

Your data may be accessed by the following categories of recipients:

• Hostinger International Ltd., the website’s hosting provider, with servers inside and outside the EU;
• Google LLC, for Google Analytics and Google Maps;
• Meta Platforms Ireland Ltd., for Meta Pixel;
• Gym Management App, if you access the booking link, your data is processed according to that platform’s own policy.

We do not sell, rent or share your personal data with third parties for their own commercial purposes.

6. Data transfers outside the EU

Google LLC and Meta Platforms are companies headquartered in the United States of America. Data transfers to them are carried out under the EU US Data Privacy Framework, adopted by the European Commission in July 2023, which provides adequate safeguards for transatlantic data transfers.

Hostinger International Ltd. processes data in compliance with the GDPR and also operates servers within the European Economic Area.

7. Cookies

Our website uses the following categories of cookies:

• strictly necessary cookies, required for the basic operation of the website; no consent needed;
• analytics cookies (Google Analytics), help us understand how the website is used; require consent;
• marketing cookies (Meta Pixel), used for personalised advertising and remarketing; require consent;
• functional cookies (Google Maps), required for displaying the embedded map; require consent.

You can manage your cookie preferences through the banner shown on your first visit or through your browser settings. Please note that disabling certain cookies may affect the functionality of the website.

8. Your rights

As a data subject, you have the following rights guaranteed by the GDPR:

• the right of access, you may request a copy of the personal data we hold about you;
• the right to rectification, you may request the correction of inaccurate or incomplete data;
• the right to erasure, you may request the deletion of your data (the “right to be forgotten”), under the conditions set out by the GDPR;
• the right to restriction of processing, you may request that we limit how we process your data;
• the right to data portability, you may receive your data in a structured, commonly used, machine-readable format;
• the right to object, you may object to the processing of your data for marketing purposes or based on our legitimate interest;
• the right to withdraw consent, at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, you can contact us at office@studiotei29.ro. We will respond to your request within a maximum of 30 days.

If you believe that the processing of your data violates the GDPR, you also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP).

9. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or disclosure. The website uses a secure HTTPS connection. Access to personal data is strictly limited to the people who need it to carry out their duties.

10. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy to reflect legislative, technological or operational changes. The updated version will be published on this page, indicating the date of the last change. We recommend checking this page periodically.

11. Contact

For any questions or requests regarding this Privacy Policy or the processing of your personal data, you can contact us at office@studiotei29.ro or through the contact form available on the website.