Privacy Policy

Last updated: April 10, 2026

1. Data Controller

I-RENT ENTERPRISES S.R.L., registered in Bucharest, Romania, operating the domain i-vory.studio, is the controller of your personal data.

Contact: [email protected]

2. Data We Collect

• Contact data: name, email, phone, company, message — submitted voluntarily via forms, WhatsApp, or email.
• Technical data: IP address, browser, device, pages visited — collected automatically for analytics.
• Marketing data: campaign performance metrics, cookie data — only with your explicit consent.

3. Purpose of Processing

• Responding to your inquiry and providing a quote.
• Executing the contract if you engage our services.
• Improving the website (analytics) and marketing campaigns.
• Legal compliance (invoicing, accounting, tax reporting).

4. Legal Basis

• Explicit consent (marketing cookies, newsletter).
• Pre-contract and contract execution (quote, collaboration).
• Legal obligation (fiscal records).
• Legitimate interest (fraud prevention, platform security).

5. Data Retention

We retain personal data only as long as necessary: 3 years for commercial inquiries that do not convert, 10 years for active clients (fiscal requirement), immediate deletion on GDPR request if no legal obligation prevents it.

6. Your GDPR Rights

Under GDPR, you have the right to:

• Access your data.
• Rectify incorrect data.
• Erasure («right to be forgotten»).
• Restrict processing.
• Data portability.
• Object to processing.
• Withdraw consent at any time.
• Lodge a complaint with the Romanian Data Protection Authority (ANSPDCP).

To exercise these rights: [email protected]

7. Third Parties & Sub-processors

We share data only with processors necessary for service delivery:

• Google Analytics (anonymized traffic).
• Google Tag Manager (tag management).
• Contentsquare (UX heatmaps, anonymized).
• Cloudflare (hosting, CDN).
• Meta, TikTok, LinkedIn (advertising, only with consent).

8. Security

Data is transmitted via HTTPS. Access to our internal systems is restricted to authorized personnel.

9. International Transfers

Some processors (Google, Meta) are based in the US. Transfers are protected by GDPR-compliant contractual safeguards (Standard Contractual Clauses).

10. Contact

For any question regarding the processing of your data: [email protected]