At Studio 618 & Co., we take the privacy of our website visitors, potential clients, and clients seriously.
1. Who we are
This website is operated by:
618 & CO SRL
Registered office: Str. Martir Dumitru Juganaru 22, Et. 4, Ap. 17, 300776
CUI: 52184615
Trade Registry number: J2025053591006
Email: betty.halasz@studio618co.com618 & CO SRL acts as the data controller for the personal data described in this Privacy Policy.
2. What personal data we collect
The personal data we collect depends on how you interact with our website.
Information you provide directly
When you contact us, submit a project enquiry, or book a consultation, we may collect information such as:
- your name;
- email address;
- telephone number, if provided;
- company or organisation name;
- job title, if provided;
- information about your business;
- information about your project or marketing needs;
- budget information, if requested;
- preferred timeline;
- consultation or meeting preferences;
- any other information you choose to provide in a form or message.
Please avoid submitting sensitive personal information that is not necessary for us to respond to your enquiry.
Information collected automatically
When you visit our website, certain technical information may be processed automatically by our website infrastructure and, where you have provided the required consent, by Google Analytics 4.
This may include information about:
- your device and browser;
- operating system;
- pages visited;
- time and date of visits;
- interactions with website content;
- referring website or traffic source;
- approximate geographic information;
- technical identifiers and cookie information.
3. Why we process your personal data
We may use personal data for the following purposes:
- to respond to enquiries;
- to understand your business or project requirements;
- to assess whether Studio 618 & Co. is the right fit for a potential collaboration;
- to arrange and manage consultations or meetings;
- to prepare proposals and take steps before entering into a contract;
- to provide services to our clients;
- to maintain communication with clients and potential clients;
- to operate and secure our website;
- to understand how visitors use our website;
- to improve the website and user experience;
- to measure the effectiveness of our website and marketing activities;
- to comply with accounting, tax, legal, and regulatory requirements;
- to establish, exercise, or defend legal claims where necessary.
We do not sell personal data.
4. Legal bases for processing
Depending on the circumstances, we rely on one or more of the following legal bases under Article 6 of the GDPR:
Taking steps before entering into a contract or performing a contract
Where you contact us about a project, request information about our services, book a consultation, request a proposal, or become a client, we may process information where necessary to take steps at your request before entering into a contract or to perform an existing contract.
Legitimate interests
We may process certain information where this is necessary for our legitimate business interests, for example:
- responding to business enquiries;
- managing professional relationships;
- protecting our website and business;
- improving our services;
- maintaining appropriate business records.
We only rely on legitimate interests where those interests are not overridden by your rights and freedoms.
Consent
We rely on your consent where required, particularly for non-essential analytics cookies and technologies such as Google Analytics 4.
You can withdraw your consent at any time through the cookie settings available on our website.
Legal obligations
We may process or retain information where required to comply with obligations imposed by Romanian or EU law, including accounting and taxation requirements.
5. Contact and project enquiry forms
When you contact us through a form on our website, we use the information you provide to review your enquiry and respond to you. Form submissions are delivered to our inbox by Web3Forms, a form delivery service.
Submitting an enquiry does not create an obligation for either you or Studio 618 & Co. to enter into a commercial relationship.
We may retain enquiry correspondence for a reasonable period so that we can follow up on the conversation, maintain appropriate business records, and understand previous discussions should you contact us again.
As a general rule, enquiries that do not lead to a collaboration may be retained for up to 12 months after our last substantive communication, unless there is a legitimate reason or legal requirement to retain them for longer.
If the enquiry becomes a client relationship, relevant information may be retained as part of our contractual and business records.
6. Google Analytics 4
We use Google Analytics 4 (GA4) to understand how visitors use our website and to measure the performance of the site.
Google Analytics is activated only after you provide consent for analytics cookies through the cookie banner on our website. If you decline, Google Analytics does not load.
Google Analytics may collect information about:
- pages viewed;
- interactions with website content, such as sending the contact form or clicking a booking button;
- traffic and referral sources;
- device and browser information;
- approximate geographic information;
- session activity;
- technical identifiers associated with the website visit.
We use this information in aggregated form to understand how people find and use our website, identify areas that could be improved, and evaluate our marketing activities.
Google states that in GA4, IP addresses are used during data collection for purposes such as deriving geographic information, but are not logged or stored by Google Analytics.
Google Analytics also allows website operators to configure how long certain user-level and event-level data is retained. The available standard GA4 retention settings include 2 months and 14 months.
Information processed through Google Analytics is also subject to Google’s applicable privacy and data processing terms.
7. Cookies
Our website uses cookies and similar technologies, such as your browser’s local storage.
Essential technologies
Some are necessary for the website to operate correctly. These may support functions such as:
- website security;
- network management;
- page functionality;
- remembering your cookie preference;
- booking or form functionality.
Essential technologies may be used without consent where permitted by law because the website cannot function properly without them. We remember your cookie choice in your browser’s local storage, so we do not have to ask you again on every visit.
Analytics cookies
With your consent, we use analytics cookies associated with Google Analytics 4. These cookies help us understand how visitors interact with the website.
Analytics cookies are not necessary for the basic operation of the website and are not activated before you give consent. Our cookie banner keeps Google Analytics switched off until you click “Accept”.
You can change or withdraw your cookie preferences at any time through the “Cookie settings” link at the bottom of every page.
8. Website hosting and service providers
Our website is hosted on Cloudflare, which provides the technical infrastructure we use to run the website, including hosting, domain name services, network delivery and security. As part of providing these services, Cloudflare processes technical data such as IP addresses and request information on our behalf.
The website also loads fonts from Google Fonts. When a page loads, your browser connects to Google’s servers to fetch the fonts, which means Google receives your IP address.
Where a service provider processes personal data on our instructions, it acts as a data processor or subprocessor, depending on the relevant service.
9. Who we may share personal data with
We may share personal data with service providers where reasonably necessary to operate our website or business. These may include:
- Cloudflare, for website hosting, domain name services and security;
- Web3Forms, for delivering contact form messages to our inbox;
- Google, in connection with Google Analytics 4, Google Fonts and Google Workspace email;
- scheduling or meeting platforms where relevant;
- cloud storage and productivity providers;
- accountants, lawyers, or other professional advisers;
- IT and security providers;
- public authorities where disclosure is required by law.
We do not provide personal data to third parties so they can independently sell or market their products to you.
Where third parties process personal data on our behalf, we seek to use providers that offer appropriate contractual and technical safeguards.
10. International data transfers
Some of the technology providers we use operate internationally and may process personal data outside Romania or the European Economic Area.
Where personal data is transferred outside the EEA and the receiving country does not benefit from an applicable European Commission adequacy decision, the relevant provider may rely on other safeguards permitted under applicable data protection law, such as Standard Contractual Clauses.
11. How long we keep personal data
We keep personal data only for as long as necessary for the purposes for which it was collected and to satisfy applicable legal, contractual, accounting, or regulatory requirements. Our general approach is:
- website enquiries: normally up to 12 months after the last substantive communication where no collaboration begins;
- consultation enquiries: normally up to 12 months unless they develop into a client relationship;
- client and contractual information: for the duration of the client relationship and afterwards for as long as required for legitimate business, accounting, taxation, contractual, or legal purposes;
- analytics information: according to the retention settings configured in Google Analytics and applicable Google policies;
- cookie consent information: for the period necessary to record and manage your consent preferences.
Certain information may need to be retained for longer where required by law or where reasonably necessary in connection with a dispute or legal claim.
12. Your rights
Under the GDPR, you may have the right to:
- request access to the personal data we hold about you;
- request correction of inaccurate or incomplete personal data;
- request deletion of your personal data in certain circumstances;
- request restriction of processing;
- object to processing based on legitimate interests;
- object at any time to direct marketing;
- receive certain personal data in a portable format;
- withdraw consent at any time where processing is based on consent;
- lodge a complaint with a supervisory authority.
You also have protections in relation to certain decisions based solely on automated processing that produce legal or similarly significant effects.
We may need to verify your identity before fulfilling certain requests. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
13. Automated decision-making
Studio 618 & Co. does not use the information collected through this website to make decisions about individuals based solely on automated processing that produce legal or similarly significant effects.
14. Security
We take reasonable technical and organisational measures to protect personal data against:
- unauthorised access;
- accidental loss;
- misuse;
- alteration;
- disclosure;
- destruction.
However, no website, internet transmission, or electronic storage system can be guaranteed to be completely secure.
15. Third-party links
Our website may contain links to websites, platforms, social networks, or services operated by third parties.
Once you leave our website, the collection and use of your information is governed by the privacy practices of that third party. Studio 618 & Co. is not responsible for the privacy practices, security, or content of external websites.
16. Children
Our website and services are intended primarily for businesses and professionals. We do not knowingly collect personal data from children through the website.
If you believe a child has provided personal information to us unnecessarily, please contact us so that we can review and, where appropriate, delete it.
17. Complaints
If you have a concern about how Studio 618 & Co. processes your personal data, you can contact us at betty.halasz@studio618co.com.
You also have the right to lodge a complaint with the Romanian data protection supervisory authority:
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
B-dul G-ral Gheorghe Magheru 28-30
Sector 1, 010336
Bucharest, Romania
Email: anspdcp@dataprotection.roThe authority also provides a formal GDPR complaint procedure.
18. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to:
- our website;
- the services we provide;
- the tools and technology we use;
- our data processing practices;
- applicable legal requirements.
The latest version will be available on this page and will show the date on which it was most recently updated.
19. Contact us
If you have questions about this Privacy Policy or about how we process your personal data, please contact:
618 & CO SRL
Email: betty.halasz@studio618co.com
Registered office: Str. Martir Dumitru Juganaru 22, Et. 4, Ap. 17, 300776
Trade Registry number: J2025053591006
CUI: 52184615