Privacy Policy

1. Who is responsible

Catalin Romeo Media (“we”, “us”, “our”), based in Bucharest, Romania, is the controller of personal data processed through this website (https://thisisromeoo.com).

Questions or requests: [email protected].

2. What this policy covers

This policy explains how we handle personal data when you browse the site or send an inquiry. It is written for a simple marketing and portfolio site — we do not run user accounts or sell personal data.

3. Data we collect

Contact inquiries. When you use the contact form, we receive the details you submit, typically name, brand or company, email address, message, and whether you are contacting us about creator partnerships or studio services. Optional fields (such as intent) are included if you provide them.

Email. If you write to [email protected] (or another address we publish), we process the content of that correspondence and your email address.

Security (reCAPTCHA). The contact form uses Google reCAPTCHA to reduce spam and abuse. Google may collect device and usage signals as described in Google’s privacy documentation. We receive a verification result (and related score / status) so we can accept or reject the submission.

Technical data. Our hosting and server logs may automatically record limited technical information such as IP address, browser type, request time, and pages requested — only as needed to operate, secure, and troubleshoot the site.

4. Why we use it

• to respond to inquiries and discuss potential work or partnerships;
• to send a short confirmation email when you submit the form;
• to protect the form and site from spam, bots, and misuse;
• to keep the website available, secure, and performing reasonably.

5. Legal bases (GDPR)

Where the GDPR applies, we rely on:

• Steps prior to a contract / legitimate interests — handling inquiries you initiate and running a small studio site (Article 6(1)(b) and/or 6(1)(f));
• Legitimate interests — security, abuse prevention, and basic logging (Article 6(1)(f));
• Consent — where a specific tool requires it (for example certain reCAPTCHA / cookie-related processing under ePrivacy rules), to the extent applicable (Article 6(1)(a)).

6. Who we share data with

We do not sell your personal data. We share it only as needed to operate the site and reply to you:

• email delivery via our SMTP / email provider, so messages can reach us and confirmation emails can reach you;
• Google, for reCAPTCHA verification;
• hosting / infrastructure providers that process technical logs;
• professional advisers or authorities if we are legally required to disclose information.

Some providers may process data outside Romania or the EEA. Where that happens, we rely on appropriate safeguards recognized under GDPR (such as the provider’s standard contractual clauses or equivalent mechanism), where required.

7. How long we keep it

Inquiry emails and form submissions are kept only as long as needed to handle the conversation and any related project follow-up, then deleted or archived under ordinary business practice — typically up to 24 months unless a longer period is needed for an active project, accounting, or legal claim. Technical logs are retained for shorter operational periods set by our hosting setup.

8. Cookies and similar technologies

This site does not use advertising or analytics cookies of our own. Essential operation and security tools (including Google reCAPTCHA on the contact form) may set or read cookies or similar identifiers as part of their service. Your browser settings can block cookies, but that may affect form submission.

9. Your rights

If you are in the EU/EEA (including Romania), you may have the right to access, rectify, erase, or restrict processing of your personal data, to object to processing based on legitimate interests, and to data portability where applicable. Where processing is based on consent, you may withdraw consent at any time without affecting prior lawful processing.

To exercise these rights, email [email protected]. You may also lodge a complaint with the Romanian supervisory authority (ANSPDCP) or your local EU data protection authority.

10. Children

The site is aimed at adults and businesses. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, contact us and we will delete it.

11. Changes

We may update this policy when our practices or legal requirements change. The “Last updated” date at the top will reflect the latest version.