Privacy Policy

1. Data Controller

The data controller responsible for your personal data is:

2. Data We Collect

We may collect and process the following categories of personal data:

• Identity data: first name, last name
• Contact data: email address, phone number
• Communication data: the content of messages you send us through our contact form
• Technical data: IP address, browser type and version, time zone, browser plug-in types, operating system — collected automatically when you visit our website
• Usage data: information about how you use our website (pages visited, time spent)

We do not collect special categories of personal data (health data, biometric data, etc.) unless you voluntarily provide such information in a message to us.

3. Purpose & Legal Basis

We process your personal data for the following purposes:

4. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Contact form enquiries: up to 3 years from the date of last contact
• Technical/usage data: up to 12 months
• Legal and financial records: up to 10 years as required by Romanian law

After the applicable retention period, data is securely deleted or anonymised.

5. Sharing Your Data

We do not sell, trade, or rent your personal data to third parties. We may share your data with:

• Service providers who process data on our behalf (e.g., form processing via Formspark / submit-form.com), subject to data processing agreements
• Competent authorities when required by law or legal process

All third-party processors are required to keep your information confidential and to process it only in accordance with our instructions and applicable law.

6. Your Rights

Under GDPR you have the following rights regarding your personal data:

• Right of access — you can request a copy of the personal data we hold about you
• Right to rectification — you can ask us to correct inaccurate data
• Right to erasure — you can ask us to delete your data ("right to be forgotten")
• Right to restriction — you can ask us to limit how we use your data
• Right to data portability — you can request your data in a structured, machine-readable format
• Right to object — you can object to processing based on legitimate interests
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at office@ortobrand.net. We will respond within 30 days. You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) at www.dataprotection.ro.

7. Cookies

Our website may use strictly necessary cookies to ensure the website functions correctly. We do not use tracking, analytics, or advertising cookies without your explicit consent.

You can control or delete cookies through your browser settings. Disabling cookies may affect the functionality of some parts of the website.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Our website uses HTTPS encryption for all data transmissions.

Despite our best efforts, no transmission of data over the internet can be guaranteed to be completely secure. If you believe your data has been compromised, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this policy periodically.

10. Contact

If you have any questions about this Privacy Policy or our data practices, please contact us: