Privacy Policy

1. Who we are

Portraits by Valentin Țăpârdea (hereinafter referred to as "Portraits by Valentin Țăpârdea", "we", "us", "our"), operated by VRS FAMILY ART MOMENTS SRL, CUI 44910490, Nr. Reg. Com. J2021015965409, having its registered office at Șoseaua Giurgiului, Nr. 131, Bloc 1, Sc. 3, Et. 8, Ap. 1, București, Sector 4, is the data controller responsible for the personal data processed in connection with the website portraitsbyvalentintapardea.com (hereinafter referred to as the "Website").

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the rights you have under Regulation (EU) 2016/679 (hereinafter referred to as "GDPR") and applicable Romanian law.

2. Scope of this Policy

This Policy applies to personal data we process:

• when you submit an enquiry or booking request through our Step Inside form;
• when you continue your enquiry through WhatsApp after completing the Step Inside form.

For details on the specific cookies we use, please see our Cookie Policy.

3. Personal data we collect

3.1 Data you provide directly

• Step Inside form: the type of shoot selected (PORTRAIT, COUPLE, EDITORIAL or BRANDING), preferred date, number of outfits, and the other information you choose to submit through the form.

We do not knowingly collect special categories of personal data (e.g. data concerning health, religion, or political opinions) through the Website, and we ask that you do not include such information in the Step Inside form or WhatsApp conversation.

4. Purposes and legal basis for processing

Continuing enquiries through WhatsApp after completion of the Step Inside form
Legal basis: Art. 6(1)(f) – legitimate interest in communicating with visitors who initiate contact.

Responding to enquiries submitted via the Step Inside form and scheduling photography sessions
Legal basis: Art. 6(1)(b) – steps taken at your request prior to entering into a contract, or Art. 6(1)(f) – our legitimate interest in handling business enquiries where no contract is contemplated.

Complying with legal, accounting, and tax obligations
Legal basis: Art. 6(1)(c) – compliance with a legal obligation.

5. Recipients of personal data

We do not sell, rent, or trade your personal data. We may share personal data, to the extent strictly necessary, with the following categories of recipients:

• WhatsApp, when you choose to continue your enquiry there after completing the Step Inside form;
• our website hosting provider, which stores the technical infrastructure of the Website;
• professional advisers (e.g. accountants, IT providers) bound by confidentiality obligations, where necessary for the operation of our business;
• public authorities, where required by law.

6. International data transfers

Where a service provider processes personal data outside the European Economic Area, the transfer is carried out on the basis of an adequacy decision or appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

7. Data retention

• Contact / booking enquiries: retained only for as long as necessary to respond to and resolve your enquiry. Once your enquiry has been dealt with and no further follow-up is expected, the data is deleted, unless a client relationship is subsequently established, in which case the statutory retention periods applicable to accounting and legal records under Romanian law apply instead.
• WhatsApp conversations: retained for as long as necessary to handle your enquiry and, where a client relationship is established, to manage that relationship, unless a longer period is required or permitted by law.

We do not retain personal data collected through the form or WhatsApp for longer than necessary for the purpose for which it was provided, unless a longer period is required or permitted by law.

8. Your rights under the GDPR

In relation to your personal data, you have the right to:

• Access — obtain confirmation of, and access to, the personal data we hold about you.
• Rectification — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your data ("right to be forgotten"), where applicable.
• Restriction — request that we limit the processing of your data in certain circumstances.
• Objection — object to processing based on our legitimate interest.
• Data portability — receive your data in a structured, commonly used format, where technically feasible.
• Withdraw consent — withdraw consent at any time (e.g. via the cookie banner), without affecting the lawfulness of processing carried out before withdrawal.
• Lodge a complaint — with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro, or with the supervisory authority of your habitual residence.

To exercise any of these rights, please contact us using the details in Section 13 below.

9. Cookies

The Website uses cookies. Full details are available in our Cookie Policy.

10. Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or loss, including transmission of the Website over HTTPS. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children

The Website is not directed at, and we do not knowingly collect personal data from, individuals under the age of 16. If you believe a child has provided us with personal data, please contact us so that we can take appropriate action.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal or operational reasons. The "Last updated" date at the top of this page indicates when it was last revised.

13. Contact

For any privacy-related questions or to exercise your rights, please contact VRS FAMILY ART MOMENTS SRL, CUI 44910490.