Controller: Order or Caras SRL (CUI 52516811), Brașov, Romania.
What we collect
- Identity & contact: name, email, phone, billing details (if provided).
- Order data: brief content, references/files you send.
- Payment data: processed securely by our payment processor (we do not store full card details).
- Technical data: cookies and logs (see GDPR Policy/Cookie info).
Why we collect (legal bases)
- To process your order and deliver files (contract).
- To issue invoices and keep accounting records (legal obligation).
- To protect our services and prevent abuse (legitimate interest).
- With your consent, for optional communications (consent, where applicable).
Retention
- Invoicing/accounting records: 10 years (as required by Romanian law).
- Project files/briefs: typically up to 3 years after delivery (or earlier upon justified request, unless law requires retention).
Sharing
- Payment processor (secure payments).
- Invoicing provider (e.g., Oblio).
- Hosting/email/service providers strictly as needed, under confidentiality and data protection commitments.
Your rights
Access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with ANSPDCP (Romanian DPA).
Contact us via the website contact form or at our registered office (Brașov, Romania).
