Privacy policy

This policy explains what personal data MAVA Studio collects through mavastudio.ro, why we collect it and what rights you have under Regulation (EU) 2016/679 (GDPR).

What data we collect

Through the contact and "Start a project" forms we collect: name, company, email, phone, the services you're interested in, your estimated budget and timeline, the project description and, optionally, attached files. We also record your IP address, the page you submitted the form from and campaign parameters (UTM), as proof of consent and to understand where enquiries come from.

Why we use it

• to reply to your enquiry and send you a proposal (legal basis: pre-contractual steps, Art. 6(1)(b) GDPR);
• to manage the contractual relationship if you become a client (Art. 6(1)(b) and (c));
• for website security and abuse prevention (legitimate interest, Art. 6(1)(f)).

We do not sell or rent your data. We do not send you newsletters without your separate consent.

How long we keep it

Data from an enquiry that does not lead to a collaboration is kept for a maximum of 24 months. Client data is kept for the duration of the contract and afterwards for the period required by accounting and tax law.

Who we share it with

We use providers that help us run our services (hosting, database, email, invoicing), with whom we have data processing agreements. Some services may store data outside the European Economic Area, with the safeguards provided by the GDPR (standard contractual clauses).

Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, as well as the right to withdraw your consent at any time. For any request, write to us at contact@mavastudio.ro. You also have the right to lodge a complaint with the Romanian data protection authority (www.dataprotection.ro) or with the supervisory authority in your country.

Data controller

The controller's identification details can be requested at any time at contact@mavastudio.ro.