PRIVACY POLICY
1. WHO IS RESPONSIBLE FOR YOUR DATA?
David Ungureanu, trading as Relios Design, is the controller responsible for the personal data described in this policy.
Email: reliosdesign@gmail.com
Website: www.reliosdesign.com
If we process personal data solely on a client’s instructions as part of a project, the client may be the controller and their privacy policy will govern that processing.
2. WHAT PERSONAL DATA WE COLLECT
Depending on your interaction with us, we process:
Enquiry information: your name, email address, requested services and any project details or other information you submit through our contact form or by email.
Client information: contact details, company details, billing information, agreements, invoices and project correspondence.
Project materials: information contained in briefs, photographs, testimonials, designs or other materials provided for a project, which may identify you or other people.
Technical information: information needed to deliver and protect the website, such as IP addresses, browser information, device details and request logs.
Website usage information: information generated through the website’s analytics, as explained in Section 4.
We receive information directly from you, automatically through website use, or from clients who provide project materials or business contact details.
Please avoid sending sensitive personal information unless it is necessary for the project and we have agreed how to handle it securely.
3. WHY WE USE YOUR DATA
We use personal data for the following purposes and legal grounds:
Responding to enquiries and preparing proposals. We process your contact details and project requirements to answer questions and discuss potential work. This is necessary to take steps at your request before entering into a contract. For general enquiries or communications with business representatives, we rely on our legitimate interest in managing business communications.
Providing our services. We process information needed to plan, deliver and manage projects. Where you are our contracting client, this is necessary to perform our agreement. When you represent a business client, we rely on our legitimate interest in maintaining that business relationship.
Administration and legal obligations. We process billing and transaction information to issue invoices, maintain records and meet applicable accounting and tax requirements.
Website operation and security. We process necessary technical information in our legitimate interest in providing a reliable website, preventing misuse and protecting our services.
Portfolio and testimonials. We use identifiable testimonials, photographs or project content with consent where required, or on the basis of a legitimate interest where appropriate following consideration of the individuals’ rights and reasonable expectations. Our interest is demonstrating our work and promoting our services. You may contact us to withdraw consent or object to a particular use.
Where processing relies on consent, you may withdraw it at any time. Withdrawal does not affect processing that took place lawfully before withdrawal.
Providing enquiry information is voluntary, but we may be unable to respond or prepare a proposal without sufficient contact and project details. Certain information is necessary to deliver services or meet legal obligations.
4. WEBSITE HOSTING, ANALYTICS AND COOKIES
Our website is built and hosted using Framer. Framer and its infrastructure providers process technical information needed to deliver website content and operate the service.
The website also loads Framer’s analytics service to help us understand website use and improve its content and performance.
[Before publishing, specify the analytics features enabled, the information they process, whether any personal data or device identifiers are involved, the applicable legal basis and retention period. Confirm whether additional analytics, advertising tools, embeds, cookies or local storage are active.]
Where cookies or similar technologies require consent, we will request that consent before activating them and provide a way to withdraw it. Any technologies exempt from consent must still be used in accordance with applicable law.
You can also manage cookies through your browser settings. Blocking certain technologies may affect website functionality.
5. WHO RECEIVES YOUR DATA
We share personal data only where necessary for the purposes described in this policy. Relevant recipients may include:
Framer and its infrastructure providers for website hosting, delivery and form processing.
Our email provider for receiving enquiries and managing correspondence.
Providers used for project delivery, file storage, invoicing or accounting.
Professional advisers or public authorities where required for legal obligations or the establishment, exercise or defence of legal claims.
[Confirm the contact form’s destination and identify the email, storage, project and accounting providers you actually use. Remove any categories that do not apply.]
Where providers process personal data on our behalf, we put appropriate data processing arrangements in place. Providers acting as independent controllers are responsible for their own processing.
6. INTERNATIONAL DATA TRANSFERS
Some service providers may process personal data outside the European Economic Area.
[Confirm which providers and countries are involved and the actual transfer mechanism used, such as an applicable European Commission adequacy decision or Standard Contractual Clauses with any necessary supplementary measures.]
You may contact us for information about applicable transfer safeguards and how to obtain a copy.
7. HOW LONG WE KEEP YOUR DATA
We retain personal data only for as long as needed for the purposes for which it was collected, including applicable legal requirements.
Our retention periods are:
Enquiries that do not become projects: [period] after the last meaningful contact.
Client correspondence and project files: [period] after completion, taking account of support needs and applicable legal claims.
Invoices and accounting records: for the applicable statutory retention period.
Technical logs and analytics: [actual provider/configured periods].
Portfolio content and testimonials: while their publication remains relevant and supported by a valid legal basis, with periodic review.
Records may be retained longer where necessary for a specific legal obligation or dispute. When retention is no longer necessary, personal data will be deleted or anonymised.
8. HOW WE PROTECT YOUR DATA
We use appropriate technical and organisational safeguards to protect personal data against unauthorised access, loss, misuse or disclosure. Access is limited to people and providers who need it for the relevant purpose.
No online service can guarantee absolute security. If you suspect a privacy or security issue involving our services, please contact us at reliosdesign@gmail.com.
9. YOUR RIGHTS
Subject to the conditions and exceptions in applicable data protection law, you may request:
Access to your personal data.
Correction of inaccurate or incomplete information.
Deletion of your personal data.
Restriction of processing.
Transfer of eligible data in a portable format.
An objection to processing based on legitimate interests.
Withdrawal of consent where processing relies on consent.
You have the right to object at any time to processing for direct marketing.
To exercise your rights, email reliosdesign@gmail.com. We may request limited additional information where necessary to verify your identity.
We normally respond within one month. If a request is complex or we receive several requests, the period may be extended by up to two further months. We will explain any extension within the first month.
You may also complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, at www.autoriteitpersoonsgegevens.nl, or to the competent supervisory authority in the country where you live or work.
10. AUTOMATED DECISIONS
[Confirm before publishing: We do not use personal data to make decisions based solely on automated processing that produce legal or similarly significant effects on you.]
11. EXTERNAL WEBSITES
Our website may link to external websites. When you follow those links, the relevant website’s privacy policy applies to its processing of your information.
12. CHANGES TO THIS POLICY
We may update this Privacy Policy to reflect changes to our services, processing activities or legal obligations. The latest version will be published on this page with an updated date. Where required, we will communicate significant changes directly.
For questions about this policy or your personal data, contact reliosdesign@gmail.com.