Privacy Policy.

1. Who we are

The data controller is Digital Image Agency, headquartered at 52 Timișoara Blvd., Bucharest, Romania. For any questions about your data, contact us at office@digitalimage.agency.

2. What data we collect

• Data you send us directly: name, email, phone number, message content — when you contact us via the form on this site, email, WhatsApp, or phone.
• Technical access data: IP address, browser type, timestamp — automatically collected by our hosting provider (Vercel Inc.) for security, debugging, and abuse prevention.

We do not collect sensitive data (health, religion, political views, etc.). We do not use tracking or advertising cookies — see our Cookie Policy.

3. Why we use it

• To answer your questions and deliver contracted services.
• To operate and secure the site.
• To comply with legal obligations (tax, accounting, reporting).

4. Legal basis

• Performance of a contract — when we have a commercial relationship with you.
• Legitimate interest — to answer inquiries, operate the site, and protect it.
• Your consent — when you voluntarily send us briefs or other materials.
• Legal obligation — for accounting and tax records.

5. Who we share data with

We rely on third-party providers to operate the site and our services:

• Vercel Inc. (USA) — site hosting, under Standard Contractual Clauses for international data transfers.
• Sanity Inc. (USA) — our content management system (does NOT store personal data about site visitors).
• Our email provider (Google Workspace / Microsoft 365) — for correspondence.

We do not sell or share your data with third parties for marketing purposes.

6. How long we keep data

• Correspondence (email, forms): up to 3 years after last contact.
• Contract and invoice data: 10 years (Romanian tax requirement).
• Server access logs: ~30 days.

7. Your rights

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access your data.
• Rectify inaccurate data.
• Erase data ("right to be forgotten").
• Restrict processing.
• Data portability.
• Object to processing.

To exercise these rights, write to office@digitalimage.agency. We respond within 30 days at the latest.

If you're not satisfied with how we handle your request, you may file a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) — www.dataprotection.ro.

8. Changes

We update this policy occasionally. The current version is the one dated at the top. Important changes will be announced here and, when relevant, by email.