# Privacy Policy

> How Vision Crafters handles personal data submitted through this site. We run no analytics, no advertising and no third-party tracking.

- Entity: VISION CRAFTERS S.R.L.
- Document: privacy
- Language: en
- HTML version: https://www.visioncrafters.ro/legal/privacy
- Authoritative version: https://www.visioncrafters.ro/ro/legal/confidentialitate (Romanian)
- Last updated: 2026-08-12

> This site sets no cookies, runs no analytics, and carries no advertising or third-party tracking. The enquiry form is the only place we collect personal data.

## 1. Who we are

The controller of your personal data is **VISION CRAFTERS S.R.L.**, a Romanian limited liability company.

- **Registered office** — București, Sector 3, 031106, România
- **Fiscal code (CUI)** — 49002063
- **Trade Register** — J40/20098/2023
- **Contact for data protection** — [office@visioncrafters.ro](mailto:office@visioncrafters.ro)

We have not appointed a Data Protection Officer. Article 37 GDPR does not require one here: we are not a public authority, we do not carry out large-scale systematic monitoring, and we do not process special categories of data on a large scale. Data protection questions go to the address above and are handled by the administrator.

## 2. What we collect

Only what you type into the enquiry form. There are six fields, and three of them are optional:

| Field | Required | Why we ask |
| --- | --- | --- |
| Name | Yes | To address you correctly in a reply. |
| Work email | Yes | The only way we can respond to you. |
| Company | No | Context on who we would be working with. |
| What you are launching | No | Context on the work. |
| The obstacle | Yes | The substance of your enquiry. |
| Timing | No | Whether the request is exploratory or immediate. |

We do not collect IP-based profiles, device fingerprints, behavioural data, or location. We do not buy or enrich contact data from third parties.

## 3. Why we may process it, and on what basis

- **Article 6(1)(b) GDPR — steps prior to a contract.** Where your enquiry is a request for a quotation or a proposal, processing it is what you asked us to do.
- **Article 6(1)(f) GDPR — legitimate interests.** Where your enquiry is general, our legitimate interest is in responding to business correspondence addressed to us. That interest is limited, you would reasonably expect a reply, and you can object at any time.

We do not rely on consent for the enquiry form, because we do not use your details for marketing. We will not add you to a mailing list.

## 4. What we do not do

- No automated decision-making and no profiling within the meaning of Article 22 GDPR.
- No advertising, retargeting or conversion pixels.
- No analytics — no Google Analytics, no Plausible, no PostHog, no Meta pixel.
- No sale or sharing of personal data with anyone for their own purposes.

## 5. Who else sees it

Two processors, both acting only on our instructions under Article 28 GDPR:

| Processor | Role | Transfer basis |
| --- | --- | --- |
| Resend | Delivers the enquiry email from the site to our mailbox. | EU Standard Contractual Clauses where processing occurs outside the EEA. |
| Vercel | Hosts the site and runs the form endpoint. | EU Standard Contractual Clauses where processing occurs outside the EEA. |

Enquiries are delivered to a company mailbox and read by the administrator. Beyond that, we disclose personal data only where the law requires it.

> Both processors may process data outside the European Economic Area. Where that happens, transfers rely on the European Commission's Standard Contractual Clauses. You can request details of the safeguards in place by writing to [office@visioncrafters.ro](mailto:office@visioncrafters.ro).

## 6. How long we keep it

**24 months from our last contact with you.** After that the enquiry and its correspondence are deleted.

If your enquiry becomes a project, the contract governs instead, and Romanian accounting and tax law sets its own retention periods for invoices and supporting documents. Those periods are longer and we cannot shorten them.

## 7. Your rights

Under Articles 15 to 22 GDPR you have the right to:

- **Access** — ask what we hold about you and get a copy.
- **Rectification** — have inaccurate details corrected.
- **Erasure** — have your data deleted where the grounds in Article 17 apply.
- **Restriction** — have processing paused while a dispute is resolved.
- **Portability** — receive your data in a structured, machine-readable format.
- **Object** — object at any time to processing based on legitimate interests, under Article 21.

Write to [office@visioncrafters.ro](mailto:office@visioncrafters.ro). We respond within one month, as Article 12(3) requires. There is no charge. We may ask you to confirm your identity where we cannot otherwise be sure the request is yours.

## 8. Complaints

If you believe we have handled your data unlawfully, please tell us first — it is usually the fastest fix. You also have the right to complain directly to the Romanian supervisory authority:

- **ANSPDCP** — Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal
- **Address** — B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 Bucharest, Romania
- **Website** — [dataprotection.ro](https://www.dataprotection.ro)

## 9. Security

The site is served over HTTPS. Enquiries are transmitted to our mailbox and are not stored in a database on this site. Access to the mailbox is restricted to the administrator.

## 10. Changes

If this policy changes materially — a new processor, a new purpose, a different retention period — we update the date at the top of this page. Should we ever introduce analytics, this page and the [Cookie Policy](/legal/cookies) will say so before it happens, and consent will be requested first.

---

This is a machine-readable mirror of a published legal page. The HTML version
linked above is canonical for presentation; the Romanian version is the legally
authoritative text. Generated from the same source, so the two cannot diverge.

Agent entry point: https://www.visioncrafters.ro/llms.txt