Privacy Policy

Last updated: 22.10.2026

Last updated: this appears automatically from the database.

1. Personal data controller

The controller of personal data collected through this website (creativeapp.ro) is the company operating the site, whose identification details are listed below in Terms of Service. For any GDPR request, contact us at [email protected].

2. Categories of data collected

We process the following categories of personal data, only when you voluntarily provide them:

• Identification data: first name, last name, company name
• Contact data: email address, phone number (optional)
• Interest data: product of interest, message content
• Technical usage data: browser type, device, pages visited, source and duration of the visit, approximate location — through Google Analytics; with cookies only if you accepted them, otherwise only signals without cookies or identifiers (see the Cookie policy)
• IP address: stored briefly in server logs for security

3. Purposes and legal basis

Purpose	Legal basis
Replying to your contact request	Consent (Art. 6(1)(a) GDPR)
Commercial follow-up / proposals	Legitimate interest (Art. 6(1)(f) GDPR)
Site analytics	Consent (Art. 6(1)(a) GDPR and Art. 4(5) of Romanian Law 506/2004) for cookies; legitimate interest (Art. 6(1)(f) GDPR) for cookieless signals
Security, fraud prevention, logs	Legitimate interest (Art. 6(1)(f) GDPR)
Legal obligations (tax, accounting)	Legal obligation (Art. 6(1)(c) GDPR)

4. Data retention

• Contact form submissions: 24 months from receipt, then automatic deletion
• Active customer data: for the duration of the contractual relationship + 5 years (tax obligation)
• Analytics data (Google Analytics): 14 months; _ga cookies expire within 2 years at most
• Server logs with IP: 30 days

5. Data recipients

Your data may be accessed by:

• The CreativeApp team (administrators, support, developers)
• Contracted processors for essential services: hosting (EU servers), transactional email (SMTP), analytics (Google Analytics 4, through Google Tag Manager — Google Ireland Limited; with cookies only if you accepted them)
• Public authorities, only based on a legal request

We do NOT sell or transfer your data to third parties for marketing.

6. International transfers

Data is stored on servers in the European Union. Google may transfer data to the US under the EU–US Data Privacy Framework and the Standard Contractual Clauses approved by the European Commission.

7. Your rights (GDPR Art. 15-22)

You have the following rights:

• Right of access — find out what data we have about you
• Right to rectification — correct inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability — receive your data in a structured format
• Right to object to processing based on legitimate interest
• Right to withdraw consent at any time
• Right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP)

To exercise your rights, contact us at [email protected]. We respond within 30 days.

8. Security

We apply reasonable technical and organizational measures to protect data: TLS encryption in transit, restricted access on a need-to-know basis, multi-factor authentication on admin systems, encrypted backups, access monitoring.

9. Cookies

Cookie usage is detailed separately in our Cookie Policy.

10. Changes

We reserve the right to modify this policy. Changes take effect on the date of publication on this page. We encourage you to periodically review this section.

11. Contact

For any question related to personal data processing:

• Email: [email protected]
• Supervisory authority: www.dataprotection.ro