Data controller
Optical Design S.R.L., an independent graphic design studio based in Bucharest, Romania, is the controller of your personal data.
- Email (including for data requests): alex.serban@opticaldesign.ro
- VAT: RO00000000 · Reg.: J40/0000/2014
We are not legally required to appoint a Data Protection Officer (DPO) at the scale of a small studio (Art. 37 GDPR); we use the address above as the contact point for any data request.
What data we collect
- Contact form / quote request: name, email, phone (optional), company (optional), project type, indicative budget, message.
- Client account: name, email, password (encrypted), optionally company details (VAT, address) for invoicing.
- Cookies & local storage: only for the login session, visual preferences (theme) and requests sent via the form. No third-party trackers — no Google Analytics, Facebook Pixel or similar. Details in the Cookie Policy.
Purposes and legal basis (Art. 6 GDPR)
| Purpose | Legal basis |
|---|---|
| Responding to enquiries and delivering ordered services | Performance of a contract — Art. 6(1)(b) |
| Issuing invoices and keeping records | Legal obligation — Art. 6(1)(c) |
| Site security and abuse prevention | Legitimate interest — Art. 6(1)(f) |
| Non-essential cookies / any marketing communications | Consent — Art. 6(1)(a) |
We do not send newsletters without your consent, we do not sell data, and we do not carry out automated profiling.
How long we keep it
Quote requests/messages: up to 12 months if they don't turn into a project. Client accounts and invoices: 10 years (statutory tax obligation). You can ask to have your data deleted at any time (except where the law requires us to keep it).
Who we disclose data to
Data stays with us. We may disclose it only to strictly necessary providers (e.g. accounting, hosting) as processors, or to authorities where the law requires. We do not transfer data outside the EU without adequate safeguards.
Your rights
- Right of access to your data
- Right to rectification
- Right to erasure ("right to be forgotten", except for tax obligations)
- Right to restriction of processing
- Right to portability (we send it to you in a reusable format)
- Right to object to processing
- Right to withdraw consent at any time (where processing is based on it)
Send your request to alex.serban@opticaldesign.ro and we respond within 30 days at most.
Complaint to the authority
If you are dissatisfied with how we process your data, you may contact the Romanian Data Protection Authority (ANSPDCP):
- Web: dataprotection.ro
- Email: anspdcp@dataprotection.ro
Changes
If we change anything important, we'll let you know by email or via a banner on the site. Current version: June 2026.
Informative, template document. We recommend validation by a specialist before use. English translation for convenience; Romanian version prevails.