Who we are

This website, red-bear.studio, is operated by SC Red Bear Studio SRL, with its registered office at Aleea Hortensiei nr. 20, Constanța, România, registered with the Romanian Trade Registry under no. J2023001766135 (EUID: ROONRC.J2023001766135), fiscal code (CUI) 48212024 ("Red Bear Studio", "we"). Within the meaning of Regulation (EU) 2016/679 (the "GDPR"), Red Bear Studio is the controller of the personal data collected through this website.

You can write to us about your data at any time at [email protected].

What data we collect

The only personal data we collect through this website is what you voluntarily send us through the contact form:

  • your name
  • your email address
  • the subject
  • your message

When the form is submitted, your IP address is used transiently, in server memory only, to limit the number of submissions (anti-spam protection). The IP address is not saved to the database and is not associated with your message.

To understand how the website is used, we use Rybbit (rybbit.io), a privacy-focused traffic-analytics platform: it uses no cookies or local storage, it does not store IP addresses (the IP is used only transiently, to determine an approximate location) and it gives us exclusively anonymous, aggregated statistics - visit counts, pages viewed, country, device type and interactions with the main buttons. These statistics cannot identify you.

If you contact us or become a client, we may reply by email. When we send you an email, we use open tracking - a standard feature of our email provider - to see whether it was delivered and whether it was opened, so we know our messages are reaching you. We do not use this to build a profile of you.

Why and on what legal basis we use the data

We use the contact-form data exclusively to:

  • reply to your inquiry and discuss a potential project - legal basis: steps taken at your request prior to entering into a contract (art. 6(1)(b) GDPR);
  • if you become a client, issue invoices and keep accounting records - in which case we will ask you for additional billing details (company name, registration number, address) - legal basis: legal obligation (art. 6(1)(c) GDPR);
  • send you emails - our reply and, if you are a client, messages about your project - and see whether they were delivered and opened - legal basis: steps taken prior to or performance of a contract (art. 6(1)(b) GDPR) and our legitimate interest in knowing our messages arrive (art. 6(1)(f) GDPR);
  • understand, in anonymous and aggregated form, how the website is used, so we can improve it - legal basis: our legitimate interest (art. 6(1)(f) GDPR).

We do not use your data for marketing, we do not send newsletters and we do not make automated decisions with legal effects on you.

Where and for how long we keep the data

Contact-form messages are stored in our own database (PostgreSQL), hosted on servers located in the European Union (Hetzner, Germany). The single exception to EU-only handling is email delivery: when we send you an email, it is delivered through Postmark, a service operated from the United States (see "Who we share the data with"). That is a transfer outside the European Economic Area, made under an appropriate safeguard - the provider's standard contractual clauses. Apart from this, we do not transfer your data outside the European Economic Area.

We keep contact messages for at most 2 years after our last communication with you, then delete them. Billing data, where it exists, is kept for the period required by Romanian fiscal and accounting legislation.

Who we share the data with

We do not sell or rent your data to anyone. It is accessible only to the studio's two founders and to our hosting infrastructure provider (Hetzner Online GmbH, Germany), acting as a processor strictly for storage. When we send you an email, your name and address, the subject and the message are processed on our behalf by Postmark (a product of ActiveCampaign, LLC, United States - postmarkapp.com), acting as a processor solely to deliver that email and to report back whether it was delivered, bounced or opened; this transfer to the United States is covered by that provider's standard contractual clauses. Anonymous usage statistics are processed by Rybbit (rybbit.io); they contain no data that could identify you. We do no profiling.

Cookies

The public part of this website sets no cookies. Our analytics tool, Rybbit, works without cookies and without local storage. A single, strictly necessary session cookie is used exclusively for staff sign-in to the admin area; website visitors never receive this cookie. For this reason the site does not need a cookie consent banner.

Your rights under the GDPR

Under the GDPR you have the following rights over your personal data:

  • the right of access - to find out what data we hold about you;
  • the right to rectification - to correct inaccurate data;
  • the right to erasure (the "right to be forgotten");
  • the right to restriction of processing;
  • the right to data portability;
  • the right to object to processing;
  • the right not to be subject to a decision based solely on automated processing.

To exercise any of these rights, write to us at [email protected]. We reply within 30 days at the latest.

If you believe your rights have been infringed, you can lodge a complaint with the Romanian supervisory authority, ANSPDCP - www.dataprotection.ro.

Changes to this policy

We may update this policy when the way we process data changes. The current version, together with its last-updated date, is permanently published on this page.