Privacy policy.

1. Data Controller

Vanaheim SRL, CUI 52324484, with registered office at Calea Lui Traian 105, Bl. 2, Sc. B, Et. 4, Ap. 38, 240101 Râmnicu Vâlcea, Vâlcea, România.

Contact: [email protected]

2. What Data We Collect

When you interact with us, we may collect:

• Name and email address (when you contact us directly)
• Message content from your correspondence
• Technical data: IP address, browser type, operating system (via server logs)

3. Legal Basis for Processing

Under GDPR (Regulation (EU) 2016/679):

• Legitimate interest (Art. 6(1)(f)) — responding to inquiries, website security
• Consent (Art. 6(1)(a)) — optional cookies, marketing communications
• Contract performance (Art. 6(1)(b)) — processing necessary to provide services

4. How We Use Your Data

• To respond to your inquiries
• To provide and improve our services
• To maintain website security

5. Data Sharing

We do not sell personal data. We may share data with service providers bound by data processing agreements, or authorities when required by law.

6. Data Retention

We retain personal data only as long as necessary to fulfil its purpose. Correspondence data is retained for up to 3 years after the last interaction.

7. Your Rights

Under GDPR you have the right to:

• Access your personal data (Art. 15)
• Rectify inaccurate data (Art. 16)
• Erase your data (Art. 17)
• Restrict processing (Art. 18)
• Data portability (Art. 20)
• Object to processing (Art. 21)
• Withdraw consent at any time

To exercise these rights, email [email protected].

8. Right to Lodge a Complaint

You may lodge a complaint with the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 București — www.dataprotection.ro.

9. Cookies

See our Cookie Policy.

10. Changes

We may update this policy. Changes will be posted here with an updated date.