Privacy policy

Written so you can read it, not to tick a box. If anything stays unclear, write to [email protected] and a person will answer.

Who we are

Your data reaches FUNKTASTIC SRL (VAT RO36582805, trade register J40/12851/2016), Strada Lipscani 104, Bucharest, Romania, the company behind Atelier Elevarts. We are the data controller under the GDPR: we decide what gets collected and why, and we answer for it if something goes wrong.

What we take, and why

When you send us an inquiry through the contact form: your name and email, and whatever else you choose to add: a phone number, the product you ask about, your brief, a link, photos or files you attach (up to 5 files, 10 MB each). We need them to answer you and to understand what you need. Only attach images you have the right to share with us. Your name and email are needed so we can answer you; everything else is optional.

When you write or call us by email, WhatsApp or phone: we receive your address or number and whatever you tell us, and we use it to answer you. Messages sent on WhatsApp also pass through WhatsApp (Meta).

When you visit the site: our hosting provider, Cloudflare, sees your IP address and basic technical data from your browser, as any web server does, to deliver the site and keep it safe.

If you press “Accept all” in the cookie banner, Microsoft Clarity is switched on: it receives data about your visit (pages viewed, device type, length of the visit and, for Clarity, clicks and scrolling on the page). Without “Accept all” this service is not loaded at all. We also use aggregate statistics that store no cookies and do not identify you: Cloudflare Web Analytics, Umami and Plausible.

What we don't do: we don't ask for data we don't use, we don't build profiles, we don't make automated decisions about you, and we never sell or rent data to anyone.

Legal basis

• Inquiries and correspondence: taking steps at your request before a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering the messages people send us (Art. 6(1)(f)).
• Running and protecting the site (hosting, security): our legitimate interest in keeping the site working and safe (Art. 6(1)(f)). No consent is needed for strictly necessary storage.
• Statistics and visit recordings (Microsoft Clarity): basis: your consent, given through “Accept all” (Art. 6(1)(a) GDPR); you can withdraw it at any time from the Cookie policy.
• Aggregate statistics without cookies: our legitimate interest in understanding how the site is used (Art. 6(1)(f)); they contain no data that identifies you.
• Accounting records, if we end up working together: a legal obligation (Art. 6(1)(c)).

Where it goes

An inquiry passes through a function of the site into our own automation, on our own server. From there it is sent to our Atelier mailbox, answered with an automatic confirmation to you, announced to the team through our internal messaging (Telegram, with the details of the inquiry) and turned into a task for the person who handles it. If our server cannot be reached at that moment, the inquiry waits in Cloudflare storage until we pick it up, so it is not lost.

The providers who touch the data, each with their role:

• Cloudflare: hosts the site, carries the traffic, and briefly holds an inquiry if our server is unreachable
• Telegram: internal notification to our team, with the details of the inquiry and, if our server cannot be reached, the attached files
• Our email provider: the Atelier mailbox and the replies we send you
• Microsoft Corporation (Clarity): on-page behaviour analysis, only if you press “Accept all”
• WhatsApp (Meta): only if you choose to write to us there
• Public authorities: only when the law requires it

Some of these providers are based outside the European Economic Area, mostly in the United States. Where that is the case, the transfer relies on the safeguards the provider offers: the EU–US Data Privacy Framework or standard contractual clauses. Telegram is not covered by these safeguards: we use it only for internal notifications, and if you don't want your details to pass through it, write to us by email instead of using the form.

How long we keep it

• Inquiries and correspondence: if we work together, for as long as the relationship lasts, plus the statutory archiving periods for accounting documents (10 years for anything tied to invoices and contracts, as Romanian law requires); if we don't, only as long as we might need to come back to the inquiry.
• Traffic statistics: according to the providers' retention (Microsoft: between 30 days and 13 months); aggregate statistics without cookies contain no data that identifies you.

We delete an inquiry whenever you ask.

What you can ask for

You have the right to know what data we hold about you, to correct it, to have it deleted, to ask us to stop using it, to receive it in a file you can take elsewhere, and to object to processing. You can withdraw a consent at any time, without affecting what happened before.

Write to [email protected]. We answer within a month at the latest, usually much sooner, and it is free.

If we answer badly or not at all, you can complain to the Romanian data protection authority, ANSPDCP, Bd. G-ral. Gheorghe Magheru 28-30, Bucharest, dataprotection.ro. We would rather sort it out with you directly, but the right is yours.

Children

This site is for people who commission or organise performances, so for adults. We don't knowingly collect children's data. If you believe we hold any, tell us and we will delete it.

When this page changes

The date at the top is the last change. If we change something that matters (what we collect, why, or who receives it), we won't count on you coming back to check: we will announce it on the site.

See also the cookie policy and the terms of use.