Privacy Policy
How we process the personal data we receive through the vibez-agency.ro website.
1. Controller and contact
The data controller is GRANDMEDIAPROF S.R.L., trading as VIBEZ, VAT ID 51394040. The full identification details are in the Terms and Conditions. For any data protection request, write to contact@vibez-agency.ro. We have not appointed a Data Protection Officer; requests are handled directly by the company's management.
This notice covers processing related to this website. It does not cover processing we carry out as a processor inside client projects, where the rules are set by contract.
2. What data we process
- From the audit and review forms: name, email, phone, company (optional), industry, current quoting method, team size and the details in the free-text field.
- From correspondence (email, phone, WhatsApp) and messages sent to the on-site assistant: the content of the communication.
- Technically, when you access the site: IP address, browser and device type, requested page and time of the request — needed to serve the page and protect against bots.
- Usage statistics, only after you accept the corresponding cookie category.
The fields marked as required (name, email, phone and the options about your business) are the minimum needed to prepare a useful answer; without them the form is not submitted. The marketing tick-box is optional and does not affect your ability to submit the enquiry.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Responding to enquiries received through the forms, email or phone | Legitimate interest in answering a request you initiated (Art. 6(1)(f)) |
| Pre-contractual discussions and performance of the contract (quoting, delivery) | Steps prior to a contract and performance of the contract (Art. 6(1)(b)) |
| Accounting, tax and archiving obligations | Legal obligation (Art. 6(1)(c)) |
| Website security and prevention of abuse or automated submissions | Legitimate interest in protecting our infrastructure (Art. 6(1)(f)) |
| Usage statistics (non-essential cookies) | Consent, revocable at any time (Art. 6(1)(a)) |
| Optional marketing communications | Separate consent, ticked voluntarily in the form (Art. 6(1)(a)) |
| Establishing, exercising or defending a legal claim | Legitimate interest (Art. 6(1)(f)) |
4. Automatic classification of enquiries
After you submit the form, your enquiry automatically receives a priority score, calculated solely from the information in the form. The score helps us prioritise and route the enquiry to the right person. It does not produce an automated decision with legal or similarly significant effects: it does not reject, approve or set prices, and the answer is prepared by a person on the team. You can request human review, an explanation, or object, by writing to contact@vibez-agency.ro.
5. Recipients and transfers
We do not sell personal data. We disclose it only to the infrastructure providers we use for hosting, storing enquiries and running server functions, each under a data-processing agreement, and to authorities where the law requires it.
The site loads no Google Analytics, Google Ads, Meta Pixel or LinkedIn tools. Enquiries submitted through the forms are stored in the European Union; some infrastructure providers may also process data outside the EEA, in which case the transfer relies on the Standard Contractual Clauses approved by the European Commission or another mechanism under Chapter V GDPR. We send a description of the safeguards on request.
6. Retention
- Accounting records (invoices) — 10 years, the period required by Romanian accounting legislation.
- Cookie consent records — Your preference is stored in your browser for 6 months, after which you are asked again.
For other categories we communicate the applicable period or criterion on request. When a period expires, the data is deleted or anonymised.
7. Cookies
The full list of cookies and storage mechanisms is in the Cookie Policy. You can change your choice at any time:
8. Your rights
You have the right of access, rectification, erasure, restriction, portability, objection to processing based on legitimate interest and withdrawal of consent at any time, without affecting earlier processing. You exercise them by emailing contact@vibez-agency.ro. We reply within the period set by GDPR, normally one month. You can also lodge a complaint with the Romanian supervisory authority ANSPDCP (www.dataprotection.ro) or with the authority in your country of residence.
9. Security, children, changes
We use encrypted connections (HTTPS), authenticated and role-restricted access to form data, server-side validation and protection against automated submissions. No technical measure can guarantee absolute security; we keep measures appropriate to the risk and handle any incident promptly.
Our services are addressed exclusively to companies and people acting professionally; we do not target children and do not knowingly collect their data. We update this notice when our processing changes, and if the change concerns cookies we ask for your choice again.