Legal

Privacy policy

Last updated: September 2026

Your privacy matters to us. This policy explains what personal data we collect through the website blrstudio.ro (including /en), for what purpose, on what legal basis and what your rights are under Regulation (EU) 2016/679 (GDPR).

1. Data controller

Brasovean Online SRL (BLR Studio), Arad, Romania. CUI: RO47141162. Contact: office@blrstudio.ro, +40 753 598 455.

2. What data we collect

When you fill in the contact form, we collect the data you provide: last name, first name, email address, phone number (optional), company name, city, services of interest, estimated budget and message. We may also automatically collect limited technical data (e.g. IP address, browser type) via cookies or server logs.

3. Purpose and legal basis

To respond to your request and send a proposal – basis: steps prior to entering a contract at your request (Art. 6(1)(b) GDPR) and your consent (Art. 6(1)(a)).
For communication related to the collaboration – basis: our legitimate interest in managing the client relationship (Art. 6(1)(f)).
For Google Analytics – basis: our legitimate interest in understanding how the site is used (Art. 6(1)(f)). We use the identifier G-WVT4SLPQQC.
To measure ChatGPT Ads campaigns – basis: our legitimate interest in attributing visits and leads to ads (Art. 6(1)(f)). The OpenAI pixel may set the first-party cookie __oppref. Matching data (e.g. email) is sent hashed (SHA-256), not in plain text.
For legal obligations (e.g. tax/accounting, if you become a client) – basis: legal obligation (Art. 6(1)(c)).

4. How long we keep the data

We keep form data only as long as needed for the purpose it was collected (usually for the duration of the correspondence and, if you become a client, for the duration of the collaboration plus applicable legal periods). Afterwards, data is deleted or anonymized.

5. Who we disclose data to

We do not sell your data. We may disclose it only to providers who help us operate (e.g. hosting/email, Google Analytics, OpenAI for ChatGPT Ads measurement), who process it on our behalf and under a confidentiality obligation, or to authorities when the law requires it.

6. International transfers

If we use services of providers outside the European Economic Area, we ensure adequate safeguards under the GDPR (e.g. standard contractual clauses).

7. Your rights

Under the GDPR, you have the right to: access, rectification, erasure (“right to be forgotten”), restriction of processing, data portability, objection, and the right to withdraw consent at any time. You can exercise them by writing to office@blrstudio.ro.

You also have the right to lodge a complaint with the Romanian supervisory authority ANSPDCP – dataprotection.ro — or with the data protection authority in your EU member state.

8. Data security

We apply reasonable technical and organizational measures to protect data against unauthorized access, loss or disclosure.

9. Changes

We may update this policy. The current version is the one published on this page, with the date of the last update.

← Back to the homepage