Not a completed compliance assessment. The operator must fill in the marked fields and have these terms reviewed by a qualified professional against actual business practices before public launch.
Controller and contact
RAIKORA is the trading brand of [REGISTERED PFA BUSINESS NAME]. CUI/CIF: [TO COMPLETE]. Trade register number: [TO COMPLETE]. Registered address: [FULL REGISTERED ADDRESS, ROMANIA]. VAT status: [TO COMPLETE]. Contact: cosmin@raikorastudio.com / +40 742 812 639.
Information we collect
The enquiry form collects your name, email, optional brand, product URL, selected service, message and optional deadline. Hosting and form processing may also handle IP address, browser, request time and spam indicators. Do not submit sensitive personal data. We do not use automated decisions producing legal or similarly significant effects.
Purpose and legal basis
We use enquiry data to respond and take requested steps towards a contract (GDPR Article 6(1)(b), where applicable). Professional contact handling and security may rely on legitimate interests (Article 6(1)(f)). Contract management relies on Article 6(1)(b); mandatory accounting relies on Article 6(1)(c). Any optional analytics requires prior consent (Article 6(1)(a)). No newsletter or marketing enrolment is attached to this form.
Recipients and transfers
On the intended Netlify deployment, Netlify Forms receives submitted enquiries. Authorised studio personnel, the email provider and necessary professional advisers may access relevant data. WhatsApp processes data under its own terms if you choose that channel. Before publication, confirm the hosting, form and email provider contracts, subprocessors, processing locations and safeguards for any transfers outside the EEA, such as applicable adequacy decisions or standard contractual clauses.
Retention — proposed schedule requiring confirmation
Unconverted enquiries: delete within 6 months of the last substantive contact. Project records: retain for the contract and the applicable legal or claims period. Accounting records: retain for the statutory Romanian period applicable to the record. Hosting logs and backups: [CONFIRM PROVIDER RETENTION]. Consent preference: stored in your browser for 6 months, then requested again. The operator must validate and implement this schedule, including provider copies.
Your rights
You may request access, correction, erasure or restriction, and object where the relevant conditions apply. Portability applies in the circumstances set out by the GDPR. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. Send requests to cosmin@raikorastudio.com. We normally respond within one month; any permitted extension and its reasons will be communicated within that period. Identity verification may be necessary. You may complain to ANSPDCP or another competent supervisory authority, and seek a judicial remedy. See the EDPB guide to individual rights.
Required information and security
Name, email and brief are required to handle the form enquiry. Other fields are optional. HTTPS, restricted access and the honeypot support secure operation; the operator must configure account access, retention and provider settings. No security system eliminates all risk.
Updates
Last updated 10 September 2026. Material processing changes require an updated notice and fresh consent where necessary.