Privacy policy

1. Who processes the data

The data controller is TAPONE ESTATE S.R.L., a company incorporated in Romania, with its registered office at Str. Copăceni nr. 56-58, sector 3, Bucharest, postcode 030396, registered with the Trade Register under no. J2024023212002, tax identification number RO50563540, share capital 200 lei. Podere Design & Build is the brand under which the company provides architecture, interior design and turnkey fit-out services.

For any question about your data, write to us at [email protected] or call +40 746 342 286.

We have no legal obligation to appoint a data protection officer, because we do not monitor people on a large scale and we do not process special categories of data. Gabriel Țapu takes the questions himself.

2. What data we collect and where from

We collect only the data you give us, directly:

• Through the contact form · your name, a phone number or an email address, the type of space and the details you choose to write about the project.
• By WhatsApp, phone or email · the phone number or the address you write to us from and the content of the conversation.
• Later, if we work together · the data the contract and the invoicing need, the address of the space, and in some cases photos of it.

This site uses traffic analysis tools, but only if you accept them: Google Analytics 4 and Microsoft Clarity. Until you accept, they write no cookie at all. Separately, without asking for consent, Cloudflare, which delivers the site, counts visits and taps on WhatsApp, phone and email. It writes nothing in your browser and uses no identifier that could recognise you from one visit to the next; we only see totals per day and per page. The legal basis is our legitimate interest in knowing how many people find us and how many write to us, art. 6 para. (1) letter f) of Regulation (EU) 2016/679. If you also accept the Marketing category, Google may use data about your visit for advertising measurement as well. What each tool collects and which cookies it writes can be found in the Cookie policy. The fonts are hosted on our own server, so they are not loaded from third parties.

3. Why we use them and on what basis

• So we can reply to you and prepare a quote · the basis is art. 6 para. (1) letter b) of Regulation (EU) 2016/679, that is, steps taken at your request before a contract is concluded. We do not ask you to tick a consent box for this, because we need the processing in order to answer you.
• To carry out the contract, if we end up working together · the same art. 6(1)(b).
• So we can meet tax and accounting obligations · art. 6(1)(c), legal obligation.
• So we can reply to messages that are not about a contract, for example from journalists, suppliers, collaborators or people who write to us out of professional curiosity · art. 6 para. (1) letter f), the legitimate interest in carrying on the normal correspondence of a firm.
• To defend a right of ours in court, if a dispute arises · art. 6(1)(f), legitimate interest.
• So we can publish photos of a project we have handed over · on the basis of the contract signed with the owner of the space, art. 6 para. (1) letter b). The photographs show the space as handed over, with no identifiable people and no exact address, so they hold no personal data. If a photograph did contain personal data, we would publish it only with that person’s separate consent, which can be withdrawn at any time.

3b. What we need and what we do not

Your name and a way to reach you, phone or email, are what we need in order to answer you and prepare an offer. Without them we cannot answer your request. The rest of the fields in the form, the type of space and the details about the project, are optional; they help us come to the first conversation prepared, but you can leave them empty.

If you send us another person's data, for example that of a spouse who is a co-owner, of the tenant or of the building manager, please tell them that you gave us their data and why. We send them this notice ourselves as well, at our first direct contact.

4. How long we keep them

• Enquiry with no contract · at most 12 months from the last conversation, then we delete them.
• Supporting accounting documents · 5 years, counted from 1 July of the year following the financial year, under art. 25 of Law no. 82/1991, as amended by Law no. 36/2023.
• Annual financial statements · 10 years.
• The project file · for the term of the contract and a further 3 years, the general limitation period under art. 2517 of the Civil Code.
• The technical design documentation · 10 years from the inspection of the works, and for defects in the structural frame for the whole life of the building, under art. 30 of Law no. 10/1995.
• Portfolio photographs · with no time limit, on the basis of the contract. The owner of the space can ask us, with a reason, to take down a particular photograph for a serious personal reason, and we remove it within 15 days.

5. Who else has access

We do not sell or rent anyone's data. These people can see it, strictly for their own task: the supplier who hosts our site and our email, the company accountant, and, on a project under way, the collaborating architect and the site teams who need the address of the space and the access details. All of them are bound by confidentiality obligations. We pass data to the authorities only where the law obliges us to.

5b. If you write on WhatsApp

We process the content of the conversation and your phone number ourselves, for the same purposes and with the same terms as above. Separately from us, the messaging service is provided by WhatsApp Ireland Limited, which acts as an independent controller for the data connected to the running of the application, in accordance with its privacy policy. By the nature of the service, some data can reach group companies located in the United States, on the basis of the European Commission adequacy decision and of the standard contractual clauses.

We transfer no data outside the European Economic Area by our own means. If you prefer to avoid WhatsApp, write to us by email or call; you reach the same people.

6. What rights you have

Under the Regulation, you have the right:

• to find out what data we hold about you and receive a copy
• to ask us to correct data that is wrong or incomplete
• to ask us to delete them, when we no longer have a legal reason to keep them
• to ask us to restrict the processing
• to object to processing based on our legitimate interest
• to receive your data in a portable format
• to withdraw your consent, where the processing rests on it, without that affecting what happened before the withdrawal

Write to us at the address above. We answer you within one month of receiving your request. If the request is complex, we can extend that term by no more than two months, in which case we tell you in the first month and explain why. The request is free. We take no automated decisions and we do not profile you on the basis of your data.

6b. Your right to object to processing

You have the right to object, at any time, to the processing of your data that rests on our legitimate interest. If you object, we stop the processing, except where we have compelling legitimate grounds that override your interests, or where we need the data to establish, exercise or defend a right in court. A message to the address above is enough.

7. If you have a complaint

Tell us first, it is the quickest. But you always have the right to go to the supervisory authority:

The National Supervisory Authority for Personal Data Processing
B-dul General Gheorghe Magheru no. 28-30, Sector 1, postcode 010336, Bucharest
Telephone: +40 318 059 211 · [email protected] · www.dataprotection.ro

Separately from the complaint to the authority, you can go directly to the courts, under art. 79 of the Regulation, and you can claim compensation for the harm suffered, under art. 82.

8. Changes

If we change something important, for example if we install a traffic analytics tool, we update this page and we change the date at the top. We advise you to read it again when you send us a new message.