Privacy notice
Last updated: 29 September 2026
About this translation
Who is responsible for your data
The controller of the personal data processed on cerere.lumosstudio.ro is Lumos Studio, individual (not yet registered as a business), at Roman, Neamț County, Romania. Email: hello@lumosstudio.ro.
You can write to the address above at any time with any question about your data.
What we process, why, and for how long
We only process the data we need. The table below lists all of it.
| Activity | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Hosting and security | IP address, browser type, requested page, date and time | delivering the site, security and preventing abuse | legitimate interest (Art. 6(1)(f) GDPR) | a short period set by the hosting provider |
| Emails you send us | your name, email address and the message | replying to your message | legitimate interest (Art. 6(1)(f)) or steps before a contract (Art. 6(1)(b)) | for the conversation and up to 24 months after the last message |
| Quote request from a product page | your name, email, phone (optional), message, the chosen product and any files you attach | to answer you with a quote; the request reaches our content server (studio.lumosstudio.ro) and we also get an internal notification | steps at your request before a contract (Art. 6(1)(b) GDPR) | for as long as the quote discussion lasts; then deleted on request |
We do not sell your data and do not use it for advertising or profiling.
We count visits without cookies and without tracking you: on every page you open, our content server (studio.lumosstudio.ro) adds up only the page address, the day and the kind of source (search engine, social network, direct or another site). We do not store your IP address, we set no cookies and we cannot tell who you are. If your browser sends “Do Not Track” or “Global Privacy Control”, nothing is counted. For a gallery video, the preview image comes from YouTube (i.ytimg.com, Google), and the player loads only when you press it, from youtube-nocookie.com; YouTube’s (Google’s) rules apply to both
Who receives your data
We use providers that process data on our behalf under data processing agreements. We do not pass your data to anyone else unless the law requires it.
| Provider | What it does | Where | Their policy |
|---|---|---|---|
| Vercel Inc. | website hosting and delivery | USA (with EU data centres where available) | https://vercel.com/legal/privacy-policy |
| Supabase Inc. | database, sign-in and file storage | data is stored in an EU region | https://supabase.com/privacy |
Transfers outside the European Economic Area
Some providers are outside the EEA. Transfers rely on the EU–US Data Privacy Framework (for certified providers) and/or the standard contractual clauses approved by the European Commission. You can ask us for a copy of the safeguards.
Cookies and browser storage
The details are on the cookies and storage page.
Your rights
You have the right to:
- find out what data we hold about you and get a copy (access);
- have incorrect data corrected;
- have your data erased (the “right to be forgotten”);
- restrict how we use your data;
- receive your data in a common format and pass it to someone else (portability), where we process it under a contract or consent;
- object to processing based on legitimate interest;
- withdraw consent at any time, without affecting what happened before.
Write to hello@lumosstudio.ro. We reply within one month at most. We may ask for proof of identity so we do not hand your data to an impostor.
If you are not satisfied
You have the right to lodge a complaint with the supervisory authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, cod poștal 010336, București, https://www.dataprotection.ro, anspdcp@dataprotection.ro. We would appreciate the chance to fix the problem first.
Security
We use encrypted connections (HTTPS), limit access to data and choose providers with recognised security measures. No method is 100% safe; if an incident affects you, we will tell you and the authority where the law requires it.
Changes
When we change how we process data, we update this page and the date above.