Who we are

This website, red-bear.studio, is operated by SC Red Bear Studio SRL, with its registered office at Aleea Hortensiei nr. 20, Constanța, România, registered with the Romanian Trade Registry under no. J2023001766135 (EUID: ROONRC.J2023001766135), fiscal code (CUI) 48212024 ("Red Bear Studio", "we"). Within the meaning of Regulation (EU) 2016/679 (the "GDPR"), Red Bear Studio is the controller of the personal data collected through this website.

You can write to us about your data at any time at [email protected].

What data we collect

The only personal data we collect through this website is what you voluntarily send us through the contact form:

  • your name
  • your email address
  • the subject
  • your message

When the form is submitted, your IP address is used transiently, in server memory only, to limit the number of submissions (anti-spam protection). The IP address is not saved to the database and is not associated with your message.

To understand how the website is used, we use Rybbit (rybbit.io), a privacy-focused traffic-analytics platform: it uses no cookies or local storage, it does not store IP addresses (the IP is used only transiently, to determine an approximate location) and it gives us exclusively anonymous, aggregated statistics - visit counts, pages viewed, country, device type and interactions with the main buttons. These statistics cannot identify you.

Why and on what legal basis we use the data

We use the contact-form data exclusively to:

  • reply to your inquiry and discuss a potential project - legal basis: steps taken at your request prior to entering into a contract (art. 6(1)(b) GDPR);
  • if you become a client, issue invoices and keep accounting records - in which case we will ask you for additional billing details (company name, registration number, address) - legal basis: legal obligation (art. 6(1)(c) GDPR);
  • understand, in anonymous and aggregated form, how the website is used, so we can improve it - legal basis: our legitimate interest (art. 6(1)(f) GDPR).

We do not use your data for marketing, we do not send newsletters and we do not make automated decisions with legal effects on you.

Where and for how long we keep the data

Contact-form messages are stored in our own database (PostgreSQL), hosted on servers located in the European Union (Hetzner, Germany). We do not transfer your data outside the European Economic Area.

We keep contact messages for at most 2 years after our last communication with you, then delete them. Billing data, where it exists, is kept for the period required by Romanian fiscal and accounting legislation.

Who we share the data with

We do not sell or rent your data to anyone. It is accessible only to the studio's two founders and to our hosting infrastructure provider (Hetzner Online GmbH, Germany), acting as a processor strictly for storage. Anonymous usage statistics are processed by Rybbit (rybbit.io); they contain no data that could identify you. We do no profiling.

Cookies

The public part of this website sets no cookies. Our analytics tool, Rybbit, works without cookies and without local storage. A single, strictly necessary session cookie is used exclusively for staff sign-in to the admin area; website visitors never receive this cookie. For this reason the site does not need a cookie consent banner.

Your rights under the GDPR

Under the GDPR you have the following rights over your personal data:

  • the right of access - to find out what data we hold about you;
  • the right to rectification - to correct inaccurate data;
  • the right to erasure (the "right to be forgotten");
  • the right to restriction of processing;
  • the right to data portability;
  • the right to object to processing;
  • the right not to be subject to a decision based solely on automated processing.

To exercise any of these rights, write to us at [email protected]. We reply within 30 days at the latest.

If you believe your rights have been infringed, you can lodge a complaint with the Romanian supervisory authority, ANSPDCP - www.dataprotection.ro.

Changes to this policy

We may update this policy when the way we process data changes. The current version, together with its last-updated date, is permanently published on this page.