Privacy Policy

1. Who is responsible for your data

The data controller for the personal data described in this policy is Airwalk (Alexandru Șora). Airwalk is a creative studio based in Romania.

For any question about this policy or your personal data, you can contact us at office@airwalk.ro or by phone at +40 771 727 595.

2. What data we collect

We collect only the data we need. Depending on how you interact with us, this may include:

• Contact form data: your name, email address, message and, if you choose to provide it, your phone number.
• Email and phone communications: your name, email address or phone number, and the content of our conversations.
• Call booking data: your name, contact details and the date and time you choose for a call.
• Project and billing data: if you become a client, the details needed to deliver the project, issue invoices and keep accounting records.
• Technical data: basic information that your browser sends automatically when you visit the website, such as your IP address, browser type, device type and the pages requested. This is processed by our hosting provider to deliver and secure the website.

Please do not send us sensitive personal data, such as health information, through the contact form or by email.

3. How we use your data and our legal bases

We use your personal data for the following purposes, each based on a legal basis under the GDPR:

• To reply to your enquiries and messages, based on your consent and on our legitimate interest in responding to people who contact us (Article 6(1)(a) and (f)).
• To prepare quotes and proposals at your request, as steps taken before entering into a contract (Article 6(1)(b)).
• To deliver projects and manage our working relationship, based on the performance of a contract (Article 6(1)(b)).
• To issue invoices and keep accounting and tax records, based on our legal obligations (Article 6(1)(c)).
• To operate, maintain and secure the website, based on our legitimate interest in providing a functional and safe website (Article 6(1)(f)).
• To establish, exercise or defend legal claims, based on our legitimate interest (Article 6(1)(f)).

Where we rely on consent, you can withdraw it at any time. This does not affect processing carried out before you withdrew it.

We do not sell your personal data, and we do not use it for automated decision-making or profiling.

4. Cookies and browser storage

The website uses only essential, technical cookies and browser storage that are necessary for the site to work properly. These do not require consent under applicable law.

We do not use advertising cookies, and we do not use analytics or marketing cookies.

If we decide to add analytics or marketing cookies in the future, we will update this policy and ask for your consent before any such cookies are placed on your device.

5. Who we share your data with

We share personal data only with trusted service providers who help us run the website and our studio, and only to the extent necessary:

• Webflow, Inc. (USA): website building, hosting and content delivery (CDN), including processing of contact form submissions.
• ROMARG (Romania): email hosting for the airwalk.ro domain.

These providers act on our behalf and are bound by contractual obligations to protect your data.

We may also disclose personal data to accountants, legal advisers or public authorities where this is required by law or needed to protect our rights.

When you follow links to Instagram or LinkedIn, those platforms process your data under their own privacy policies. We are not responsible for their practices.

6. International data transfers

Webflow is based in the United States, so some personal data may be transferred outside the European Economic Area.

Such transfers are protected by appropriate safeguards, namely the EU-US Data Privacy Framework, where the provider is certified under it, and/or the standard contractual clauses approved by the European Commission. You can contact us to find out more about these safeguards.

7. How long we keep your data

• Contact enquiries: up to 2 years after our last contact with you, unless a project starts.
• Project and billing records: as long as required by law, including Romanian accounting and tax rules.
• Technical data: for the limited period set by our hosting provider for security and operational purposes.

When data is no longer needed, we delete it or anonymise it securely.

8. Your rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: to obtain confirmation of whether we process your data and a copy of it.
• Right to rectification: to have inaccurate or incomplete data corrected.
• Right to erasure: to have your data deleted in certain circumstances.
• Right to restriction: to ask us to limit how we use your data in certain circumstances.
• Right to data portability: to receive data you gave us in a structured, commonly used format and have it sent to another controller.
• Right to object: to object to processing based on our legitimate interests.
• Right to withdraw consent: at any time, where processing is based on consent.

To exercise any of these rights, email us at office@airwalk.ro. We will reply within one month, which may be extended in specific cases as allowed by the GDPR. We may ask you to confirm your identity before acting on your request.

You also have the right to lodge a complaint with the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), at www.dataprotection.ro, or with the supervisory authority in your EU country of residence.

9. How we protect your data

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration. These include encrypted HTTPS connections, reputable hosting and email providers, and restricted access to personal data.

No method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security. If a data breach affects your rights, we will act as required by law.

10. Children

The website and our services are not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has sent us personal data, please contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time, for example if we change the tools we use or if the law changes. The updated version will be posted on this page with a new "last updated" date. Where changes are significant, we will make reasonable efforts to let you know.

12. Contact

If you have any questions about this policy or how we handle your personal data, please contact Airwalk (Alexandru Șora):

• Email: office@airwalk.ro
• Phone: +40 771 727 595