a

Latest Posts:

Sorry, no posts matched your criteria.

Follow Us:

Back To Top

Processing of personal data

Last updated: 26.10.2026

We consider the protection of personal data a fundamental commitment and we process your data in full compliance with Regulation (EU) 2016/679 (the “General Data Protection Regulation” or “GDPR”), Romanian Law no. 190/2018 and any other applicable legislation in Romania. This Privacy Policy explains how we collect, use, transfer and protect your personal data when you visit www.visualedge.ro, contact us or work with us.

We may update this Privacy Policy to reflect changes in the way we process personal data or changes in the law. The version in force is always the one published on this page, with the date shown above.

1. Who we are and how you can contact us

The controller of your personal data is:

VISUAL EDGE S.R.L.
Registered office: Str. Emil Monția nr. 23, Arad, Arad County, Romania
Tax ID (CUI): 32238400 · VAT: RO32238400
Trade Register no.: J2013001002025

You can contact us at:

Address: Str. Avrig nr. 43, Arad, Arad County, Romania
Phone: +40 740 950 169
E-mail: [email protected] 

2. What personal data we process

  • When you contact us through the website form, by e-mail or by phone: your name, e-mail address, phone number and the content of your message.
  • When you become our client or the contact person of a client: your name, job title, e-mail address, phone number, company details, our correspondence and the information needed to deliver the project, issue invoices and manage the contract.
  • When you visit the website: your IP address, browser and device type and the pages you visit. Data used for statistics and advertising (Google Analytics, Meta Pixel) is collected only with your consent, through the cookie banner. Details are in our Cookie Policy.

3. Why we process your data and on what legal basis

  • Answering your enquiries and preparing offers. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) or our legitimate interest in replying to messages we receive (Art. 6(1)(f) GDPR).
  • Delivering our services (branding, design, web development, marketing, print) and managing the contract. Legal basis: performance of the contract (Art. 6(1)(b) GDPR). When our client is a company, we process the data of its contact persons based on our legitimate interest in performing the contract with that company (Art. 6(1)(f) GDPR).
  • Invoicing, accounting and tax obligations. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
  • Website statistics (Google Analytics) and measuring and showing our ads (Meta Pixel). Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 4(5) of Romanian Law no. 506/2004), which you can withdraw at any time from the cookie settings.
  • Website security, fraud prevention and defending our rights in case of disputes. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).

Withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal.

4. Data we process on behalf of our clients

When we build or manage websites, online stores, forms, social media accounts or advertising campaigns for our clients, we may have access to personal data belonging to our clients’ customers or users. In these cases, our client is the controller and Visual Edge acts as a processor under Art. 28 GDPR: we process that data only on our client’s documented instructions, keep it confidential and do not use it for our own purposes.

5. Meta Pixel and joint controllership

If you consent to marketing cookies, Meta Pixel collects and sends data about your visit to Meta Platforms Ireland Limited. For this collection and transmission, Visual Edge and Meta are joint controllers. The essence of the arrangement is available at https://www.facebook.com/legal/controller_addendum. How Meta further processes the data is explained in Meta’s Privacy Policy: https://www.facebook.com/privacy/policy.

 

6. Who we share your data with

We do not sell your personal data. We share it only when necessary, with:

  • IT, hosting and e-mail service providers, acting as processors;
  • Google Ireland Limited (Google Analytics) and Meta Platforms Ireland Limited (Meta Pixel), only if you have given your consent;
  • our accountants and legal advisors;
  • subcontractors and partners involved in delivering a project (for example print partners), only to the extent necessary;
  • public authorities, when we are legally required to do so.

We ensure that third parties access your data in accordance with data protection law, based on contracts concluded with them.

7. Transfers outside the European Economic Area

Google and Meta may transfer data to the United States. These transfers are based on the European Commission’s adequacy decision on the EU-U.S. Data Privacy Framework, for certified providers, and, where applicable, on the Standard Contractual Clauses adopted by the European Commission.

8. How long we keep your data

  • Enquiries that do not result in a contract: up to 1 year from our last communication.
  • Client and contract data: for the duration of the contract and 3 years after it ends (the general limitation period), for handling any claims.
  • Invoices and accounting documents: 5 years from the end of the financial year in which they were issued, according to Romanian Accounting Law no. 82/1991.
  • Data collected through cookies: for the periods indicated in our Cookie Policy.

When these periods expire, the data is securely deleted or anonymised.

9. What happens if you do not provide your data

The data marked as required in our forms, and the data needed to conclude and perform a contract and to issue invoices, is necessary. Without it we cannot reply to your request or provide our services. Giving your consent for statistics and marketing cookies is optional, and refusing has no consequences on your use of the website.

10. Automated decision-making

We do not take decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.

11. Your rights

Under the GDPR, you have the right to access your data, to have inaccurate data corrected, to object to the processing of your data, to request the erasure of your data, to restrict the processing and to data portability, as well as the right to withdraw your consent at any time. You also have the right to lodge a complaint with the supervisory authority and to go to court.

To exercise your rights, contact us using the details in section 1. We reply free of charge, without undue delay and within one month at the latest. For complex or numerous requests, this period may be extended by two further months, and we will inform you of the extension within the first month.

Please note the following if you wish to exercise these rights:

Identity. We take the confidentiality of all records containing personal data seriously. For this reason, we may ask you for additional information to confirm your identity before we act on your request.

Rights of third parties. We do not have to comply with a request if this would adversely affect the rights and freedoms of other people.

Access. You can ask us:

  • to confirm whether we process your personal data;
  • to provide you with a copy of that data;
  • to provide other information about your personal data, such as what data we hold, what we use it for, who we disclose it to, whether we transfer it abroad and how we protect it, how long we keep it, what rights you have, how you can make a complaint and where we obtained your data, to the extent this information has not already been provided in this Privacy Policy.

Rectification. You may ask us to correct or complete inaccurate or incomplete personal data. We may verify the accuracy of the data before correcting it.

Erasure. You may ask us to erase your personal data, but only if:

  • it is no longer necessary for the purposes for which it was collected; or
  • you have withdrawn your consent (if the processing is based on consent); or
  • you have successfully exercised your right to object; or
  • it has been processed unlawfully; or
  • we have a legal obligation to erase it.

We are not obliged to erase your personal data if the processing is necessary:

  • to comply with a legal obligation; or
  • for the establishment, exercise or defence of legal claims.

Restriction of processing. You may ask us to restrict the processing of your personal data, but only if:

  • you contest its accuracy, for the period needed to verify it; or
  • the processing is unlawful, but you do not want the data to be erased; or
  • we no longer need the data, but you need it for the establishment, exercise or defence of legal claims; or
  • you have objected to the processing, while we verify whether our legitimate grounds override yours.

We may continue to use your personal data after a restriction request if:

  • we have your consent; or
  • it is needed for the establishment, exercise or defence of legal claims; or
  • it is needed to protect the rights of another natural or legal person.

Data portability. You may ask us to provide your personal data in a structured, commonly used and machine-readable format, or to transmit it directly to another controller, but only if:

  • the processing is based on your consent or on a contract with you; and
  • the processing is carried out by automated means.

Objection. You may object at any time, on grounds relating to your particular situation, to the processing of your personal data based on our legitimate interest. You may also object at any time, without giving any reason, to the processing of your data for direct marketing purposes, including profiling. In that case, we will stop the processing as soon as possible.

Automated decisions. You have the right not to be subject to a decision based solely on automated processing which produces legal effects concerning you or similarly significantly affects you. As stated in section 10, we do not take such decisions.

Complaints. You have the right to lodge a complaint with the supervisory authority regarding the processing of your personal data. In Romania, the supervisory authority is:

National Supervisory Authority for Personal Data Processing (ANSPDCP)
B-dul G-ral Gheorghe Magheru nr. 28-30, Sector 1, postal code 010336, Bucharest, Romania
Phone: +40 318 059 211 or +40 318 059 212
E-mail: [email protected]
Website: www.dataprotection.ro

Without prejudice to your right to contact the supervisory authority at any time, we encourage you to contact us first. We will make every effort to resolve any concern amicably.

12. Cookies

Information about the cookies used on www.visualedge.ro, and about how you can give or withdraw your consent, is available in our Cookie Policy.