Legal information
Privacy Policy
Last updated: 27 September 2026
This is a translation of the Romanian original. In case of any discrepancy, the Romanian version prevails.
In short: we only use your data to reply to you and to work together. We don't sell it or use it for advertising, and traffic statistics only start if you accept.
1. Who we are
The controller of your personal data is INNOVATIVE DIGITAL HUB S.R.L., which operates the website www.pixelcod.ro and provides the services presented under the name Pixel & Cod (“we”).
- Company name: INNOVATIVE DIGITAL HUB S.R.L.
- Registered office: Calea Ferentari nr. 72, bl. 5A, sc. D, et. 3, ap. 31, Sector 5, București, 051864, România
- CUI: 54772239 (VAT registered)
- Trade Register No.: J2026034599004 · EUID: ROONRC.J2026034599004
- E-mail: contact@pixelcod.ro · Phone: +40 752 179 848
We are not legally required to appoint a data protection officer (DPO). For any question about your data, write to us at contact@pixelcod.ro.
2. What data we collect
- Contact form data: name, email address, phone (optional), the chosen package and your message.
- Correspondence data: whatever you send us by email, phone or WhatsApp.
- Contract and billing data, if you become a client: name or company name, tax ID, address, contact person, contract and invoice details, payments.
- Technical data: on each visit, the hosting provider's server automatically logs the IP address, browser type, page accessed and time, for operation and security.
- Usage statistics (Google Analytics), only if you have given your consent in the cookie banner. Details in the Cookie Policy.
We do not collect special categories of data (for example health data) and ask you not to send them to us.
3. Why we use it and on what legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Replying to your request and sending you a quote | form, correspondence | Art. 6(1)(b) – steps taken at your request before entering into a contract |
| Concluding and performing the contract (building the website, communication during the project) | contract, correspondence | Art. 6(1)(b) – performance of a contract |
| Invoicing, accounting, archiving | billing | Art. 6(1)(c) – legal obligation (Romanian Accounting Law no. 82/1991, Romanian Fiscal Code – Law no. 227/2015) |
| Website security, preventing abuse and spam | technical | Art. 6(1)(f) – our legitimate interest in a secure website |
| Statistics on how the website is used | statistics | Art. 6(1)(a) – your consent, also under Art. 4(5) of Romanian Law no. 506/2004 |
| Establishing, exercising or defending legal claims | any of the above, as needed | Art. 6(1)(f) – legitimate interest |
We don't use your data for advertising, we don't send newsletters without your separate consent, and we don't make automated decisions or create profiles that produce legal effects concerning you (Art. 22 GDPR).
Providing the form data is necessary for us to reply; if you don't provide it, we can't contact you. For clients, billing data is required by law.
4. How long we keep it
- Quote requests that don't become a contract: no more than 12 months after the last contact.
- Contract data and project correspondence: for the duration of the contract and 3 years after it ends, the general limitation period (Art. 2517 Romanian Civil Code).
- Financial and accounting documents: for the period required by Accounting Law no. 82/1991 and tax legislation.
- Server technical logs: for short periods set by the hosting provider, for security.
- Statistics (Google Analytics): a maximum of 14 months; analytics cookies expire after no more than 13 months.
After these periods, the data is deleted or anonymised.
5. Who we share it with
We don't sell or rent your data. We only share it with providers who help us operate and who process it on our behalf under a contract (Art. 28 GDPR):
- Vercel Inc. (USA) – website hosting and processing of the contact form.
- Sendinblue SAS / Brevo (France, EU) – delivering the form message to our mailbox.
- Google Ireland Ltd. / Google LLC – Google Analytics, only if you have given your consent.
- Our email and domain provider (ROMARG SRL, Romania).
- Our accountant and, if needed, our lawyer, bound by confidentiality.
- Public authorities (for example the Romanian tax authority, courts), only when the law requires it.
6. Transfers outside the European Union
Vercel and Google may process data in the United States. These transfers rely on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework (decision of 10 July 2023), under which the providers are certified, and/or on the standard contractual clauses approved by the European Commission (Art. 45–46 GDPR). You can ask us for a copy of the safeguards.
7. Your rights
Under Art. 15–22 GDPR, you have the right:
- of access – to find out what data we hold about you and receive a copy;
- to rectification – to have incorrect or incomplete data corrected;
- to erasure (“right to be forgotten”), when the data is no longer needed or the processing is unlawful;
- to restriction of processing;
- to data portability – to receive your data in a structured, commonly used format;
- to object to processing based on legitimate interest;
- to withdraw your consent at any time, without affecting the lawfulness of prior processing. For cookies, use the button.
Write to us at contact@pixelcod.ro. We reply within one month, which may be extended by two further months for complex requests (Art. 12 GDPR). Exercising your rights is free of charge.
You also have the right to lodge a complaint with the Romanian data protection authority, ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal), B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, Bucharest, www.dataprotection.ro, with the supervisory authority in your own EU country, or to go to court.
8. How we protect data
The website uses an encrypted connection (HTTPS). It has no public database and no exposed admin panel. Only the people who need your data to reply to you or perform the contract have access to it.
9. Minors
Our services are intended for companies and people over 18. We do not knowingly collect data about minors.
10. Applicable legislation
- Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (GDPR);
- Romanian Law no. 190/2018 implementing the GDPR;
- Romanian Law no. 506/2004 on the processing of personal data and the protection of privacy in electronic communications (cookies);
- Romanian Law no. 365/2002 on electronic commerce.
11. Changes
We may update this policy when the law or the way we work changes. The date of the last update appears at the top of the page. If the changes are significant, we will inform you on the website.