This Privacy Policy explains how BOGDAN IONUT DUTU, trading as DutuStudio ("we", "us", "our"), collects, uses and protects personal data of visitors and clients of dutustudio.digital (the "Site"). We comply with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the UK GDPR / Data Protection Act 2018 where applicable.
1. Data Controller
BOGDAN IONUT DUTU
Email: contact@dutustudio.digital / ditu.bi@inbox.eu
Phone: +49 1551 1475130
2. Personal Data We Collect
- Contact details: name, email address, phone number, postal address.
- Project information: project description, budget, files and content you share with us.
- Billing data: invoice details, payment references (we do not store card numbers).
- Technical data: IP address, browser type, device information, pages visited (via cookies — see our Cookie Policy).
3. Purposes and Legal Bases
- To respond to enquiries and provide services — Art. 6(1)(b) GDPR (performance of a contract / pre-contractual steps).
- To issue invoices and meet tax obligations — Art. 6(1)(c) GDPR (legal obligation).
- To improve our Site and services — Art. 6(1)(f) GDPR (legitimate interest).
- Marketing emails (only if you opt in) — Art. 6(1)(a) GDPR (consent).
4. Sharing of Data
We share data only with trusted processors strictly to operate our business: hosting providers, email delivery services, payment processors and accounting providers. All processors are bound by GDPR-compliant data processing agreements.
5. International Transfers
Where data is transferred outside the EEA or UK, we rely on adequacy decisions or Standard Contractual Clauses approved by the European Commission and the UK ICO.
6. Retention
We retain personal data only as long as necessary: client and billing records for up to 10 years (legal accounting obligations); enquiry data for up to 24 months; marketing data until you withdraw consent.
7. Your Rights
Under the GDPR / UK GDPR you have the right to: access, rectification, erasure ("right to be forgotten"), restriction, data portability, objection, and withdrawal of consent at any time. You can exercise these rights by emailing contact@dutustudio.digital.
You also have the right to lodge a complaint with a supervisory authority — in the EU, your local Data Protection Authority; in the UK, the Information Commissioner's Office (ICO) at ico.org.uk.
8. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss or alteration, including encryption in transit (TLS), access controls and regular backups.
9. Changes
We may update this Policy from time to time. The "Last updated" date at the top reflects the latest revision.