Last updated 11 August 2026

Privacy notice

This notice explains how information submitted through vanaheim.io is handled.

Who is responsible for the information?

Vanaheim SRL is the data controller for enquiries submitted through this website.

CUI 52324484 · Trade Register J2025060779002 · EUID ROONRC.J2025060779002

Registered office: Calea Lui Traian 105, Bl. 2, Sc. B, Et. 4, Ap. 38, 240101 Râmnicu Vâlcea, Vâlcea, Romania.

Contact: [email protected]

What information is collected?

The project form collects your name, email address, company, optional current website, project type, budget range, desired launch timing, project description, submission time, and an enquiry reference. Campaign landing pages may also attach source, campaign, and creative labels included in the page URL.

The website assistant processes the questions you enter and the short conversation history needed to answer them. Do not enter passwords, payment information, private keys, or other sensitive information. Chat transcripts are not added to the project-enquiry file.

The hosting provider may also record standard technical logs such as IP address, browser information, requested pages, and timestamps for security and reliability.

Why is it used?

The information is not used to add you to a marketing list, sold, or used for automated decision-making.

Legal basis

Enquiry information is processed to take steps at your request before potentially entering a contract. Limited records and technical logs may also be processed for the legitimate interests of managing enquiries, protecting the website, and maintaining business records.

How long is it kept?

If an enquiry does not become a project, the submitted brief is kept for no longer than 12 months. Information connected to an active project or legal and accounting obligations may be kept for longer where necessary.

Who may receive it?

Information is accessible only to Vanaheim SRL and service providers needed to host, secure, or operate the website and business communications. Website-assistant questions are sent to Microsoft Azure AI to generate a response. Those providers may process information only for the relevant service. Information may also be disclosed where required by law.

International transfers

If a hosting or communications provider processes information outside the European Economic Area, appropriate contractual or legal safeguards should be used. The production provider list and transfer details should be reviewed when the website is deployed.

Your rights

Depending on the circumstances, you may request access to your information, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You may also complain to your local data-protection authority.

Send a request to [email protected]. Identity may need to be confirmed before a request is completed.

You may also lodge a complaint with Romania’s National Supervisory Authority for Personal Data Processing at dataprotection.ro.

Cookies and analytics

This version of the website does not use advertising cookies. If analytics, embedded media, or additional tracking is added later, this notice and any required consent controls must be updated before those tools are enabled.

Changes to this notice

This page will be updated when the way information is collected or handled changes. The latest revision date appears at the top.