Privacy policy

1. Who the controller is

The controller of your data is ARTVINCI S.R.L., registered office at Aleea Lungulețu nr. 6, bl. D14, sc. E, et. 2, ap. 185, București, Sector 2, Romania, entered in the Trade Register under no. J2024039822006, tax ID 50857650.

You can write to us at office@artvinci.ro, call 0721-097-323, or find us at the workshop, Șoseaua Iancului 48, București, Sector 2.

2. What we collect, why, and on what legal basis

We collect only what the things below actually need. We do not build behavioural profiles and we do not make automated decisions about you.

• Contact form and quote requests — name, email, phone, your message and the details of the job. Basis: our legitimate interest in answering the request you sent us, and where it leads to an order, performance of the contract.
• Customer account — email, password (stored only in hashed form, never in clear text) and whatever you fill in yourself. Basis: performance of the contract between us.
• Orders and payments — delivery or billing address and what the paperwork requires. Basis: performance of the contract and our tax obligations. Card details never reach us — the payment provider handles them directly.
• The Meșterul assistant — the messages you type into the chat window. Basis: our legitimate interest in answering you. See section 5: these messages are sent to a provider outside the EU, so please don't type sensitive data there.
• Technical logs — IP address and the usual data of a web request, kept by our hosting provider. Basis: our legitimate interest in keeping the site running and protected from abuse.

We send offers or news only if you explicitly asked for them. The basis there is your consent, and you can withdraw it at any time without losing anything else.

3. Cookies and browser storage

We use no analytics, advertising or tracking cookies, and we load no third-party scripts that track you. That is why you will not see a cookie consent banner on this site: there is nothing for us to ask you about.

We use only cookies that are strictly necessary for signing in to your account, plus one temporary value in tab memory for interface state. The full list, with what each one does, is on the Cookies page.

4. Who we share data with

We do not sell or rent your data. We share it only with the providers the service needs, each for their own part:

• Cloudflare — hosting for the site and the API, image storage, and protection against abuse.
• Stripe — online payment processing.
• Resend — transactional email (confirmations, password resets, notifications).
• Google — the model behind the Meșterul assistant processes the messages typed into the chat window.
• Couriers, to deliver orders, and authorities, where the law requires it.

5. Transfers outside the European Union

Some of the providers above process data outside the European Economic Area, in particular in the United States. Those transfers rely on the mechanisms GDPR provides — standard contractual clauses, or the adequacy framework applicable to that provider.

Concretely: messages typed into the Meșterul assistant reach Google. Don't type anything there you wouldn't want sent outside the EU; for any conversation involving personal data, use the contact form, email or phone.

6. How long we keep data

• Contact messages and quote requests — for the duration of the conversation and, if they don't lead to an order, at most three years, the general limitation period.
• Customer account — for as long as you keep it open. You can delete it at any time, and we delete the data the law doesn't require us to keep.
• Order and accounting documents — for the periods Romanian tax law imposes, which we cannot shorten.
• Technical logs — short periods, days or weeks, under the hosting provider's policy.

7. How we protect your data

Traffic is encrypted end to end, passwords are stored only in hashed form, and access to data in the system is limited to the people who need it. Card details never pass through our systems.

8. Your rights

In relation to your personal data you have the right:

• of access — to find out what data we hold about you and receive a copy;
• to rectification of inaccurate or incomplete data;
• to erasure (the "right to be forgotten"), within the limits of the legal obligations that require us to keep certain documents;
• to restriction of processing while you contest it;
• to portability — to receive your data in a machine-readable format, or to have it sent to another controller;
• to object to processing based on legitimate interest, including marketing;
• to withdraw your consent at any time, where processing relies on it. Withdrawal does not affect the lawfulness of processing before it.

For any of these, write to office@artvinci.ro. We reply within one month at the latest.

If you are not satisfied with our answer, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Bucharest, Sector 1, dataprotection.ro.

9. Changes to this policy

We may update this policy. When a change is significant, we announce it on the site. Last updated: 17 August 2026.