Architecture DropWho we are — the data controller
ARCHITECTURE DROP S.R.L.CUI/CIF: 46554152Trade Register no.: J2022002814229EUID: ROONRC.J20220028142291 Titu Maiorescu Street, Cârlig village, Popricani commune, Iași County, 707381, Romaniacontact@architecturedrop.com+40 787 732 385For the purposes of Regulation (EU) 2016/679 (the “GDPR”), ARCHITECTURE DROP S.R.L. is the controller of the personal data described in this Policy. For questions or to exercise your rights, you may contact us atcontact@architecturedrop.com.
Who this Policy applies to and when
This Policy applies to visitors to the Website, people who contact us by email or telephone using the details shown on the Website and, where relevant, prospective clients whose enquiries may lead to a proposal or contract.
The Website includes the home page, portfolio and project pages with images, galleries and videos, information about the studio, services and process, the contact page and RO/EN versions. It does not allow users to create accounts, place orders or make payments. Contact links open the user’s email or phone application. The Website has no contact form and does not automatically send message contents.
Personal data we may process
Depending on how you interact with us, we may process the following categories:
- Technical browsing data:IP address, date and time of access, page requested, browser and device information, HTTP headers, security events and logs generated by the hosting infrastructure.
- Data provided through direct communication:name, email address, telephone number, company or professional role, message content, documents and any other information you choose to send us.
- Data relating to a potential collaboration:information about the project, property, site, requirements, budget, schedule and other data needed to prepare a discussion or proposal.
- Contractual and administrative data:identification, communication, contracting and billing data, if the enquiry leads to a collaboration.
- Data transmitted to external resource providers:when Google Fonts or images delivered through the Adobe/Behance infrastructure are loaded, the browser requests those resources directly and may communicate the IP address, browser type, referring page and other technical information ordinarily included in an HTTP request.
- Analytics and marketing data, only with your consent:online identifiers, pages visited, interactions, device information and conversion events collected through Google Analytics 4 and Meta Pixel.
We do not request special categories of personal data through the Website, such as medical or biometric data. Please do not send us such information or data about other people unless it is necessary and you have a lawful basis for sharing it.
Where the data comes from
- directly from you, when you contact us or provide information about a project;
- automatically from your browser and device through the normal operation of the Website and its servers;
- from technical providers used for hosting, security, email and resource delivery;
- from professional or public sources, only where necessary to manage an enquiry and where the processing is permitted by law.
If we obtain personal data about you from a public or professional source and are required to inform you under Article 14 GDPR, we will provide the relevant information within the statutory period and no later than our first communication with you, unless a legal exception applies.
Purposes and legal bases for processing
| Purpose | Data used | Legal basis |
|---|---|---|
| Displaying the Website, security and abuse prevention | IP address, technical data, logs and security events | Article 6(1)(f) GDPR — legitimate interests |
| Responding to enquiries and preparing a proposal | Contact details, message and project information | Article 6(1)(b) and/or (f) GDPR |
| Entering into and performing a collaboration | Identification, contractual and project data | Article 6(1)(b) GDPR |
| Legal obligations and financial or accounting records | Contract data, billing and supporting documents | Article 6(1)(c) GDPR |
| Protecting rights and resolving disputes | Communications, contracts, documents and relevant evidence | Article 6(1)(f) GDPR and applicable legal obligations |
| Displaying externally hosted fonts and portfolio images | IP address and technical information transmitted to resource providers | Article 6(1)(f) GDPR — consistent presentation of the Website |
| Analysing Website use and improving the experience | Online identifiers, pages visited, interactions and technical information | Article 6(1)(a) GDPR — consent |
| Measuring the effectiveness of communications and campaigns | Online identifiers, visits, interactions and conversion events | Article 6(1)(a) GDPR — consent |
Before processing based on legitimate interests, we assess whether the interests and rights of the data subject override our interests. You may object to such processing under Article 21 GDPR.
We do not use data collected through the Website for decisions based solely on automated processing, and we do not carry out profiling that produces legal or similarly significant effects. We do not send unsolicited marketing communications; if we introduce a newsletter, it will operate only on the basis of separately requested consent.
Providing personal data when you contact us is voluntary. However, we need contact details and essential project information to respond or prepare a proposal. If a collaboration begins, certain identification, contracting and billing data become necessary to enter into and perform the contract or meet legal obligations. Without this information, we may be unable to respond fully, prepare a proposal or begin the collaboration.
Cookies and similar technologies
The Website uses Google Analytics 4 for statistics about visits and interactions and Meta Pixel to measure the effectiveness of communications and campaigns. These optional technologies are loaded only after you consent to the relevant category.
You can accept all optional technologies, reject them, or enable Analytics and Marketing separately. Your choice is stored in your browser's local storage and can be changed at any time using the Cookie settings button. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
Rejecting Analytics and Marketing technologies does not limit access to the Website's content. The hosting platform provider may separately use technologies that are strictly necessary for security, authentication and technical operation.
You can delete or block cookies in your browser settings. Blocking strictly necessary cookies may affect access to the Website or certain technical functions of the hosting platform.
Providers and recipients
Personal data may be disclosed, strictly to the extent necessary, to the following categories of recipients:
- authorised people within Architecture Drop who manage the Website and enquiries;
- the provider of the hosting platform, infrastructure, content delivery and security;
- the email service provider and providers of other communication or productivity tools;
- Google, for font delivery and, after consent, Google Analytics 4; Meta, after consent, for Meta Pixel; and Adobe/Behance, for delivery of certain portfolio images;
- professional advisers, such as lawyers, accountants or IT providers, where necessary;
- public authorities, courts or other bodies where required by law.
Links to Instagram, Facebook and TikTok are external links. Meta Pixel is loaded only if you accept the Marketing category. We do not sell or rent personal data.
Transfers outside the European Economic Area
Some technical providers may process personal data outside the European Economic Area. In such cases, the transfer relies, as applicable, on a European Commission adequacy decision, Standard Contractual Clauses or other safeguards recognised under Chapter V of the GDPR, together with supplementary measures where necessary.
You may request further information about the mechanism applicable to a transfer and, where available, a copy of the relevant safeguards by contacting contact@architecturedrop.com.
Retention periods
| Category | Indicative retention period |
|---|---|
| Technical and security logs | Limited periods determined by technical necessity, security needs and the hosting provider’s policy. |
| Enquiries that do not lead to a contract | Generally, up to 24 months after the most recent interaction, unless there is a legitimate reason for longer retention. |
| Contractual and project data | For the duration of the collaboration and afterwards for as long as necessary to meet legal obligations, limitation periods and the defence of rights. |
| Financial and accounting documents | For the period required by applicable tax and accounting legislation. |
| Requests concerning GDPR rights | For as long as necessary to resolve the request and demonstrate compliance. |
| Cookie preference | Until you change your choice, delete your browser's local data or withdraw consent. |
| Google Analytics and Meta Pixel data | According to the retention periods configured in the providers' services, without exceeding the period necessary for the stated purposes. |
At the end of the relevant retention periods, personal data is deleted, anonymised or retained only where a legal obligation or the need to resolve a dispute requires it. Backups are overwritten in accordance with providers’ technical cycles.
Your rights
Subject to the conditions set out in the GDPR, you may request:
- information about and access to your personal data;
- rectification of inaccurate data or completion of incomplete data;
- erasure of data where the legal conditions are met;
- restriction of processing;
- data portability for eligible processing based on consent or contract;
- objection to processing based on legitimate interests;
- withdrawal of consent if future processing is based on consent;
- the right not to be subject to a solely automated decision, under the conditions of Article 22 GDPR;
- lodging a complaint with the Romanian National Supervisory Authority for Personal Data Processing.
To exercise your rights, contactcontact@architecturedrop.com. We may request additional information to verify your identity. We generally respond within one month; this period may be extended by two months in complex cases, and we will notify you within the initial period.
ANSPDCP: 28–30 General Gheorghe Magheru Boulevard, Sector 1, Bucharest, 010336, Romania — information about filing a complaint.
Data security
We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. No internet transmission can be guaranteed to be entirely risk-free; please therefore avoid sending unnecessary sensitive information in your initial email.
Children
The Website and the services presented are intended for adults and professionals. We do not knowingly collect personal data from anyone under 16 through the Website.
Updates to this Policy
We may update this Policy when the Website, the providers we use or our legal obligations change. The version in force is the one published on the Website and identified by its last-updated date.