Last updated: 2026-09-07 v2.1
Controller: DigitalShapeLab, Jud. MH, Orș. Strehaia, Str. Eroilor nr. 18B, bl. 18B, sc. 1, et. 1, ap. 8, 225300, RO. contact@digitalshapelab.com, +40735008558.
Data collected: contact form (name, email, company, budget EUR, project details), communications, technical anonymized analytics, billing data for invoicing. No sensitive categories.
Purposes & basis: pre-contractual (6(1)(b)), contract (6(1)(b)), legal accounting (6(1)(c)), legitimate interest security (6(1)(f)), consent for portfolio (6(1)(a)).
Retention: inquiry 24m, contract files 3y, invoices 10y per RO law, cookie localStorage 12m.
Rights: access, rectification, erasure, restriction, objection, portability. Email contact@digitalshapelab.com subject GDPR, 30 days. Complaint ANSPDCP Romania.
Processors: Google Fonts, Google Maps (contact page only), email provider EU, hosting EU. No sale, no transfer outside EEA unless you email from outside. DPAs in place.
Security: HTTPS, 2FA, least privilege, encrypted backups.