Privacy policy
What we collect when you hold a piece, send a brief or sign up for news, why, for how long, and your rights.
Who is responsible
[COMPANY NAME], [REGISTERED ADDRESS], trade register no. [TRADE REGISTER NO.], tax ID [TAX ID] (“we”). Write to us about anything on this page at [email protected].
The short version
We only collect what you type into one of our three forms. We use it to answer you and to sell you a piece, never for advertising, and we don’t sell or share it with anyone except the services that run this site. The public site sets no cookies and has no tracking or analytics.
What we collect, and why
| When you… | We keep | Why (legal basis) |
|---|---|---|
| hold a piece (“Hold it for 7 days”) | your email, the piece, your language, the time | to keep the piece for you and contact you about buying it: steps before a contract, at your request (GDPR Art. 6(1)(b)) |
| send a commission brief | your name, email, phone (optional), and what you tell us about the room, the part, budget and timing, plus any photos or sketches | to reply with ideas and a quote: steps before a contract (Art. 6(1)(b)) |
| sign up for “Tell me first” | your email and language | to tell you when a new piece is finished: your consent (Art. 6(1)(a)), which you can withdraw at any time |
| buy a piece | what is needed for the sale, invoice and delivery | to fulfil the contract (Art. 6(1)(b)) and to keep the records accounting and tax law requires (Art. 6(1)(c)) |
When you visit, our hosting provider handles technical data such as your IP address to deliver the pages and keep the site secure (our legitimate interest, Art. 6(1)(f)). We don’t use it to identify you.
How long we keep it
- Holds: 12 months after the hold ends, unless it turns into a sale.
- Briefs and their photos: 24 months after our last contact. If a brief turns into a commission, we keep what the sale needs, as for sales below.
- Newsletter: until you unsubscribe.
- Sales: as long as Romanian accounting and tax law requires us to keep the records.
Who else handles it
Only the services that run the site, under contracts that oblige them to protect it:
- Supabase (database, file storage, admin sign-in). Data is stored in the EU (Frankfurt, Germany).
- [HOSTING PROVIDER] (serves the site).
Where one of them is based outside the EU, transfers are covered by the EU Commission’s standard contractual clauses or the EU–US Data Privacy Framework.
Cookies
The public site sets no cookies and stores nothing in your browser. The admin area, used only by our staff, uses one strictly necessary cookie to keep them signed in.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to its use, or to receive it in a portable format; and you can withdraw your consent to the newsletter at any time. Write to [email protected]. We reply within one month.
If you think we got something wrong, you can also complain to the Romanian data protection authority, ANSPDCP (dataprotection.ro), or to the authority in the EU country where you live.
Changes
If this page changes, the date at the top changes with it.