Privacy Policy

We’ve written this policy in plain English, because that’s how we work. The short version: we collect almost nothing, we use no tracking cookies, and we never sell or share your data. The details follow.

Last updated: June 26, 2026

1. Who we are

Gavenea Studio is a web design studio operated by:

Sonyc Photo Events SRL
Registered in Romania
Company registration no. (CUI): RO52873733
Registered address: Jud. Brașov, Sat. Cristian, Com. Cristian, Str. Lungă, Nr. 107, birou 61
Email: hello@gaveneastudio.com

For the purposes of the EU General Data Protection Regulation (GDPR), Sonyc Photo Events SRL is the data controller for any personal data collected through this website.

2. What we collect – and what we don’t

We do NOT use:

  • Tracking or advertising cookies
  • Google Analytics or any cookie-based analytics
  • Advertising pixels (Facebook, LinkedIn, Google Ads or similar)
  • Session recording or heat-mapping tools

This is why you don’t see a cookie banner on this site. There is nothing to consent to.

We DO collect:

a) Information you send us voluntarily.
When you submit our contact form or request a free audit, we collect the information you choose to provide: typically your name, email address, company name, website URL, and your message. We use it for one purpose only: to reply to you and carry out the work you’ve asked about.

b) Privacy-friendly, cookieless analytics.
We use Cloudflare Web Analytics to understand aggregate traffic on this site (page views, referrers, countries, device types). This tool does not use cookies, does not fingerprint devices, and does not track you across websites. The data is anonymous and cannot be linked to you as an individual.

c) Basic technical logs.
Our hosting provider keeps standard server logs (IP address, browser type, pages requested, timestamps) for security and reliability purposes. These are retained for a limited period and are not used to identify visitors.

3. Legal basis for processing

Under the GDPR, we process your data on the following bases:

  • Replying to your enquiry and performing work you request – contract, or steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
  • Security logs and anonymous analytics – our legitimate interest in keeping the site secure and understanding how it is used (Art. 6(1)(f) GDPR).

We do not process special categories of personal data, and we do not use automated decision-making or profiling.

4. Where your data lives

  • Contact form submissions are stored on our website server, hosted by Kinsta Inc. within Ashburn/United States.
  • Email correspondence is stored with our email provider: cPanel email.
  • Anonymous analytics are processed by Cloudflare, Inc.

Some of these providers are based in, or process data in, the United States. Where data is transferred outside the European Economic Area, it is protected by appropriate safeguards such as the EU-US Data Privacy Framework or Standard Contractual Clauses.

5. How long we keep your data

  • Enquiries that don’t become projects: up to 24 months, so we can pick up the conversation if you come back – then deleted.
  • Client correspondence and project records: for the duration of our work together, plus the period required by Romanian accounting and tax law.
  • Anonymous analytics: retained in aggregate form; contains no personal data.

6. Who we share data with

We never sell, rent, or trade your personal data. We share it only with the service providers listed in section 4, who process it on our behalf, and only where strictly necessary. If the law requires it, we may disclose data to public authorities.

7. Your rights

Under the GDPR you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Delete your data (“right to be forgotten”)
  • Restrict or object to our processing
  • Receive your data in a portable format
  • Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, email us at hello@gaveneastudio.com. We reply to every request – in writing, as always – within 30 days at the latest.

You also have the right to lodge a complaint with a supervisory authority. In Romania, this is the National Supervisory Authority for Personal Data Processing (ANSPDCP, dataprotection.ro). If you are in another EU country, you may contact your local authority instead.

8. Children

This website is a business-to-business service and is not directed at children under 16. We do not knowingly collect data from children.

9. Changes to this policy

If we change how we handle data – for example, if we ever add a tool that requires consent – we will update this page and revise the “Last updated” date. Material changes will be flagged clearly. We won’t quietly move the goalposts.

10. Questions

Anything unclear?
Email hello@gaveneastudio.com and a human – the same one who built this site – will reply.