Introduction
CRISS-DESIGN (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website criss-design.eu and use our services.
Please read this Privacy Policy carefully. By using our website and services, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
1.1 Personal Information
We may collect personal information that you voluntarily provide to us when you:
- Request a quote or contact us through our contact form
- Subscribe to our newsletter
- Engage our design services
- Communicate with us via email or phone
This information may include:
- Full name
- Email address
- Phone number
- Company name
- Project details and requirements
- Billing and payment information
1.2 Automatically Collected Information
When you visit our website, we automatically collect certain information about your device, including:
- IP address
- Browser type and version
- Time zone setting
- Browser plug-in types and versions
- Operating system and platform
- Pages you view and links you click
- Date and time of your visit
- Referring website addresses
1.3 Cookies and Tracking Technologies
We use cookies and similar tracking technologies to track activity on our website and store certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our website.
2. How We Use Your Information
We use the collected information for various purposes:
- To provide and maintain our design services
- To process your service requests and quotes
- To communicate with you about projects, updates, and service-related information
- To send you marketing communications (only with your consent)
- To improve our website and services
- To detect, prevent, and address technical issues
- To comply with legal obligations
- To protect against fraudulent or illegal activity
3. Legal Basis for Processing (GDPR)
Under the General Data Protection Regulation (GDPR), we process your personal data based on:
- Consent: When you give us permission to use your data for specific purposes
- Contract: When processing is necessary to fulfill our service agreement with you
- Legitimate Interests: When we have a legitimate business reason to process your data
- Legal Obligation: When we must process your data to comply with the law
4. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information with:
4.1 Service Providers
We may share your information with third-party service providers who perform services on our behalf, such as:
- Payment processors
- Email service providers
- Web hosting providers
- Analytics providers
These third parties are contractually obligated to protect your information and use it only for the purposes we specify.
4.2 Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).
4.3 Business Transfers
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
5. Data Security
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
6. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Typically:
- Client project data: Duration of project + 7 years (for accounting and legal purposes)
- Marketing communications data: Until you unsubscribe or withdraw consent
- Website analytics data: 26 months
7. Your Rights Under GDPR
If you are a resident of the European Economic Area (EEA), you have the following data protection rights:
- Right to Access: Request copies of your personal data
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data
- Right to Restrict Processing: Request limitation of how we use your data
- Right to Data Portability: Request transfer of your data to another service
- Right to Object: Object to our processing of your personal data
- Right to Withdraw Consent: Withdraw consent at any time where we rely on consent
To exercise any of these rights, please contact us using the information provided below.
8. International Data Transfers
Your information may be transferred to and maintained on computers located outside of your country or jurisdiction where data protection laws may differ. If you are located outside Romania and choose to provide information to us, we transfer your data to Romania and process it there.
9. Children’s Privacy
Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal data, please contact us, and we will take steps to delete such information.
10. Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to read the privacy policies of any third-party sites you visit.
11. Marketing Communications
With your consent, we may send you marketing emails about our services, special offers, and industry news. You can opt out of receiving marketing communications at any time by:
- Clicking the “unsubscribe” link in any marketing email
- Contacting us directly at the email address below
- Updating your preferences in your account settings (if applicable)
12. Cookie Policy
We use the following types of cookies:
- Essential Cookies: Required for the website to function properly
- Analytics Cookies: Help us understand how visitors use our website
- Functional Cookies: Remember your preferences and settings
- Marketing Cookies: Track your browsing activity to deliver relevant advertisements
You can manage your cookie preferences through your browser settings.
13. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last Updated” date. You are advised to review this Privacy Policy periodically for any changes.
14. Contact Us
If you have any questions about this Privacy Policy, your data rights, or our privacy practices, please contact us:
CRISS-DESIGN
Email: contact@criss-design.eu
Address: Bucharest, Romania
Website: criss-design.eu
For GDPR-related inquiries or to exercise your data rights, please use the contact information above and clearly state your request.
15. Supervisory Authority
If you are an EEA resident and believe we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection supervisory authority.