PRIVACY POLICY

Controller:

MONTEGRIM VENTURE MEDIA S.R.L.

• Company ID (CUI): 55360120
• Trade Register no.: J2026048012009
• Registered office: Str. C.C. Arion nr. 11, Ground floor, Ap. 1, Sector 1, Bucharest, Romania
• NACE 7311 – Advertising agency activities
• Website: draft360.ro

Email: contact@draft360.ro

Through the contact form we may collect:

• name;
• company;
• email address;
• phone number;
• the service of interest;
• the content of the message sent;
• any other information the person voluntarily chooses to provide.

The website may also generate technical information necessary for its operation and security, such as IP address, browser type, device and technical logs.

We do not request special categories of personal data through the form.

The data is used to:

• respond to the requests we receive;
• assess a possible project or collaboration;
• prepare a commercial proposal, at the person's request;
• handle pre-contractual communication;
• administer and secure the website;
• prevent abuse, fraud or technical incidents.

Data submitted through the form will not be used for newsletters or recurring commercial communication without a separate legal basis or, where required, separate consent.

Processing may be based on:

• Art. 6(1)(b) GDPR — steps taken at the request of the person prior to entering into a contract;
• Art. 6(1)(f) GDPR — legitimate interests relating to the requested commercial communication and to the administration and security of the website;
• consent, where the law requires it for a specific processing activity.

Requests that do not lead to a contractual relationship are generally kept for a maximum of 12 months from the last interaction, unless there is a legitimate reason for a different period.

If the request leads to a contractual relationship, the relevant data may be kept for the periods necessary to perform the contract and to comply with legal, accounting or tax obligations.

Technical logs are kept only for as long as necessary for the security and operation of the website.

Where necessary, the data may be accessed by technical providers that contribute to operating the website, such as services for:

• hosting and infrastructure;
• DNS and security;
• email;
• technical maintenance.

These providers only receive the data necessary to deliver those services.

The website currently uses technical infrastructure provided, among others, by Lovable and Cloudflare.

We do not sell personal data.

Certain technical providers may use infrastructure located outside the European Economic Area.

Where such a transfer involves personal data, it must be carried out in accordance with GDPR requirements and the applicable legal mechanisms, such as adequacy decisions or standard contractual clauses, as the case may be.

Under the GDPR, individuals may have the right:

• of access to their data;
• to rectification;
• to erasure;
• to restriction of processing;
• to data portability;
• to object;
• to withdraw consent, where processing is based on consent;
• to lodge a complaint with the competent data protection authority.

Requests can be sent to: contact@draft360.ro

We apply reasonable technical and organisational measures to protect the data against unauthorised access, loss, alteration or unlawful disclosure.

This policy may be updated when the website, the services used or the legal requirements change.