Privacy Policy

1. Who we are (data controller)

The controller of your personal data is:

Company name: PE SLEAU S.R.L

Tax ID (CUI): 41846326

Trade Register No.: J35/4097/2019

Contact email: [email protected]

2. What data we collect and why

This website has no contact form, no user accounts, no newsletter and no advertising or tracking cookies. We do not collect personal data through the website.

Server logs

Like any website, the hosting server automatically records basic technical information for each visit (IP address, date and time, page requested, browser type). These logs are used only for security and to produce anonymous visit statistics, and are deleted automatically by the hosting provider after a limited period.

Anonymous visit statistics

To understand how the website is used (number of visits, pages viewed, country, device type and referring website), we use Cloudflare Web Analytics. It does not use cookies or local storage, does not create visitor profiles, does not track you across other websites and does not identify you personally; the statistics are only shown to us in aggregated form.

Legal basis:
Art. 6(1)(f) GDPR – our legitimate interest in understanding, in an anonymous way, how the website is used, in order to improve it.

When you email us

If you write to [email protected], we receive your email address and whatever you choose to include in your message. We use it only to:

• Reply to your message
• Send you the quote or the information you asked for
• Send a single follow-up email, strictly related to your request

Legal basis:
Art. 6(1)(b) GDPR – processing is necessary to take steps at your request before entering into a contract.

We do not send newsletters or recurring marketing messages.

3. How long we keep data

We keep personal data only for as long as needed for the purposes above:

• Quote requests: up to 24 months from the last interaction, after which the data is deleted if no collaboration follows.
• Clients (contracts): the data needed for invoicing and accounting is kept as required by tax law (5–10 years).

4. Who receives the data (third parties)

We do not sell or share your data with third parties.

To run the website and our communication, we work with the following providers, acting as processors under the GDPR:

• Google (Google Workspace) (Ireland / USA) – email services
• Namecheap, Inc. (USA) – website hosting
• Cloudflare, Inc. (USA) – website delivery (content delivery network) and anonymous visit statistics (Cloudflare Web Analytics)
• BunnyWay d.o.o. (bunny.net) (Slovenia, EU) – delivery of the videos and images, from servers in Europe

Videos. The showreel on the home page, most project videos and the images are delivered by bunny.net from servers in the European Union, without cookies. Some project videos are embedded from YouTube (privacy-enhanced mode) and Vimeo: on those pages, only preview images are loaded from YouTube’s image server, and the video players load only when you press Play. From that moment, the provider’s own privacy policy applies.

Transfers of data outside the European Union are based on the Standard Contractual Clauses approved by the European Commission, ensuring an adequate level of protection.

5. Data security

The website is served over an encrypted SSL (HTTPS) connection. Access to data and email accounts is protected by appropriate technical and organisational measures, including two-factor authentication (2FA), to prevent unauthorised access, loss or disclosure.

6. Cookies

Details are on the Cookie Policy page.

7. Your rights

Under the GDPR, you have the right to:

• Access your personal data
• Have inaccurate data corrected
• Have your data erased (“the right to be forgotten”)
• Restrict processing
• Data portability
• Object to processing
• Lodge a complaint with the Romanian data protection authority, ANSPDCP

To exercise these rights, contact us at: [email protected]

We will reply within 30 days at the latest.