Privacy Policy

1. Data controller

The data controller is IGNA Studio; full identification details are listed in the Terms & Conditions, section “Who we are”. Email: patrisiacira@gmail.com. We process personal data in accordance with Regulation (EU) 2016/679 (GDPR), Law no. 190/2018 and other applicable Romanian/EU rules.

2. What data we process

Depending on how you interact with us, we may process: (a) identification and contact data you send voluntarily (name, email, phone, message content) when you contact us via email, WhatsApp or other channels; (b) technical data from your device (IP address, browser type, device/OS, approximate location derived from IP, pages viewed, referrer) when you use the site and, if you consent, via Google Analytics; (c) cookie and similar technology data as described in the Cookie Policy.

3. Purposes and legal bases

We process data to: respond to enquiries and prepare collaborations (Art. 6(1)(b) GDPR — steps prior to a contract, and/or Art. 6(1)(f) legitimate interest in professional communication); run and secure the website (Art. 6(1)(f)); remember language preference and essential settings (Art. 6(1)(f) / necessity); measure site usage with Google Analytics only with your consent (Art. 6(1)(a)); comply with legal obligations (Art. 6(1)(c)), including accounting and tax retention where applicable.

4. Google Analytics

If you accept analytics cookies, we use Google Analytics (Google Ireland Limited / Google LLC) to understand traffic and improve the site. Analytics may process online identifiers, device/browser data and usage events. Google may process data outside the EEA under appropriate safeguards (e.g. Standard Contractual Clauses). Analytics cookies are not set until you consent. You can withdraw consent anytime via the cookie banner preferences or browser settings.

5. Recipients

Data may be accessed by us and, where needed, by processors who help operate the site (hosting/CDN such as Vercel, email infrastructure, and Google for Analytics if consented). We do not sell personal data.

6. Retention

Contact correspondence is kept as long as needed to handle your request and for a reasonable follow-up period, then deleted or archived as required by law. Analytics data is retained according to our Analytics configuration and Google’s settings (typically aggregated/pseudonymized retention windows). Essential cookies last as set in the Cookie Policy (e.g. language preference up to 12 months).

7. Your rights

Under GDPR you may request access, rectification, erasure, restriction, portability, and objection to processing based on legitimate interest, and you may withdraw consent at any time without affecting prior lawful processing. You may lodge a complaint with the Romanian DPA (ANSPDCP): https://www.dataprotection.ro. To exercise rights, email patrisiacira@gmail.com.

8. Security

We apply appropriate technical and organisational measures (HTTPS, access controls, least-privilege practices). No online transmission is perfectly secure; please contact us if you suspect an issue.

9. Children

The site is aimed at professionals and businesses. We do not knowingly collect data from children under 16. If you believe we have, contact us to delete it.

10. Updates

We may update this Policy to reflect legal or operational changes. The “Last updated” date shows the current version.