Privacy policy.

Venix Digital is run by Buda Gabriel and Grejuc Andrei, who act as joint controllers of the data described on this page. Venix Digital is not a registered company, so there is no registration number to quote here; the people responsible are named above and are reachable directly.

For anything to do with your data, write to contact@venixdigital.com or call (+40) 767 081 867.

Two things, and one of them is entirely under your control.

• What you send through the contact form: your name, your email address, a company name if you give one, the budget range you select, your message, and which language the site was in when you sent it.
• What your browser sends to any site it visits: your IP address, browser and device type, and the pages requested. These sit in the standard server logs kept by our hosting provider.

The GDPR requires a lawful basis for every use of your data. Ours are these:

• To reply to your enquiry and discuss a possible project. Basis: steps taken at your request before entering a contract.
• To deliver and invoice a project you have engaged us for. Basis: performance of a contract.
• To keep the site running and diagnose faults. Basis: our legitimate interest in a working, secure website.
• To keep records the law requires us to keep, such as accounting records for paid work. Basis: legal obligation.

This section matters more than most of the others, so it stands on its own.

• We do not sell, rent or trade your information. Not to anyone, at any price.
• We run no analytics on this site. No Google Analytics, no advertising pixel, no heatmap, no session recording.
• We send no marketing email. Contact us and you get a reply about your enquiry, nothing more.
• We build no profiles and make no automated decisions about you.

This site sets no cookies at all, which is why nothing ever asked you to accept any.

It stores nothing on your device either. No local storage, no session storage. Your language is part of the web address, so /ro serves Romanian and /en serves English, and nothing needs to be remembered between visits.

A short list of services keeps the site running and gets your message to us. Each acts on our instructions and may only use your data to provide that service. Beyond these, your data goes nowhere.

• Formspree, which receives the contact form submission and forwards it to our inbox. Everything you type into the form passes through them.
• Google Fonts, which serves the two typefaces used here. Loading a font this way means your IP address reaches a Google server, as it does on any site that loads fonts from Google.
• Our hosting provider, which serves the site and keeps the server logs described above.
• Our email provider, which stores your message once it has arrived in our inbox.

Some of those services are based outside the European Economic Area, mainly in the United States. Where data leaves the EEA, the transfer relies on the safeguards those providers have in place, such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

If you would rather not use the form at all, email or phone us directly. The details are at the bottom of this page.

An enquiry that does not become a project is kept while the conversation is live and for a reasonable period after it, in case you come back to it, then deleted. An enquiry that does become a project is kept for as long as we work together, and afterwards for as long as the law requires us to keep records of that work.

Server logs last only as long as our hosting provider retains them, and are used solely to investigate faults and abuse.

Ask us to delete your data and we delete it, apart from anything we are legally obliged to keep.

The GDPR gives you rights over your data, and you can exercise any of them by writing to us. There is no charge and no form to fill in.

• Access: ask for a copy of what we hold about you.
• Rectification: ask us to correct anything that is wrong.
• Erasure: ask us to delete it.
• Restriction: ask us to stop using it while something is being resolved.
• Portability: ask for it in a machine-readable format.
• Objection: object to us relying on legitimate interest.

Tell us first and we will try to put it right. If that does not resolve it, you have the right to complain to a data protection authority. In Romania that is the National Supervisory Authority for Personal Data Processing (ANSPDCP, dataprotection.ro). If you live elsewhere in the EEA, you can complain to the authority in your own country instead.

The site is served over HTTPS, so what you type into the form is encrypted in transit. Access to the inbox where enquiries land is limited to Buda Gabriel and Grejuc Andrei.

No system is perfectly secure and we will not pretend otherwise. If something went wrong in a way that put your data at risk, we would tell you and the supervisory authority, as the law requires.

This site is aimed at businesses and is not directed at children. We do not knowingly collect data from anyone under sixteen. If you believe a child has sent us their details, write to us and we will delete them.

If what we do with data changes, this page changes with it and the date at the top is updated. If a change is significant and we hold your details from an ongoing project, we will tell you directly rather than expecting you to notice.

For anything on this page, including a request to see or delete your data, write to contact@venixdigital.com or call (+40) 767 081 867. We reply to enquiries within 24 hours, and to formal data requests within the one month the GDPR allows.