Privacy policy
and GDPR.

ANTIKATOPTIS PAREIDOLIA S.R.L., CUI 54981588, Reg. Com. No. J2026040769000, EUID ROONRC.J2026040769000, incorporated on 23.06.2026, with its registered office at Str. Nerva Traian 27-33, Sc. B, Et. 1, Ap. BIR. 6, Code 031044, Bucharest, Sector 3, processes your personal data as operator, under Regulation (EU) 2016/679 (“GDPR”).

Contact for any request regarding your personal data: gdpr@vreau.website, +40 750 460 601 or WhatsApp.

The request form. When you send a request, we collect your name, phone number, email (optional), the description of your business, the preferences you tick and the files you upload, in order to answer you and prepare the first version of the website (art. 6 para. 1 letter b GDPR — steps taken at your request before entering into a contract). The data is stored at Supabase (servers in the EU), the files in a private space accessible only to our team, and internal email notifications are sent through Resend. We do not store the IP address in plain text. If we do not conclude a contract, we delete the request and the files within at most 12 months. For any request regarding your data: gdpr@vreau.website.

Categories of data: name, phone number, email address (optional), the content of the request (including the description of the business and the materials sent: logo, brand guide, documents with information).

Data collected automatically. The site does not use analytics cookies and does not keep any identifier on your device. We do not use advertising tools, we do not identify your browser by its technical features and we do not follow you from one site to another. The fonts, images and scripts of the page are delivered from our own servers.

To know whether the page is read and whether requests reach us, we record a few events with no name, phone or e-mail: that the page opened, that you reached the offer or the form, that the request was sent, as well as technical data about loading speed. The IP address is used only at the moment of receipt, to compute two signals that change daily and weekly respectively, and it is not kept. If your browser sends the Do Not Track or Global Privacy Control signal, we record nothing.

The events end up in a database of the operator, hosted by Supabase as processor, separate from the one where requests end up. What we record, how long we keep it and how you can object are explained on the page What we measure.

Separately from this measurement, the hosting infrastructure temporarily records technical access data (including the IP address), in the legitimate interest of the security and operation of the service, art. 6 para. (1) letter (f) GDPR.

We use your data exclusively for: (a) answering your request and preparing the first version of the website — legal basis: pre-contractual measures at your request, art. 6 para. (1) letter (b) GDPR; (b) communication related to the subscription contract, if you conclude one — art. 6 para. (1) letter (b) GDPR; (c) fulfilling legal obligations (commercial, fiscal archive) — art. 6 para. (1) letter (c) GDPR; (d) aggregated measurement of the visits and requests on this site, to know whether the page does its job — legal basis: legitimate interest, art. 6 para. (1) letter (f) GDPR. We do not build advertising profiles and we do not make automated decisions concerning you. You can object by enabling Do Not Track or Global Privacy Control in your browser, or by writing to the contact address for data protection.

We do not use your data for automated marketing and we do not make automated decisions or profiling with effects on you.

We do not sell and do not rent out your data. Communication takes place through strictly necessary third-party services:

WhatsApp (Meta Platforms Ireland Ltd.) — the channel through which you send and receive messages. Their processing is governed by Meta’s Privacy Policy. Attaching files is done exclusively by you, directly in the conversation.

Vercel Inc. (USA) — the hosting and delivery of the site: Vercel’s servers answer your browser’s requests and temporarily record technical access data. Vercel participates in the EU–U.S. Data Privacy Framework; to the extent an international data transfer takes place, it is protected under articles 44–49 GDPR, including through Standard Contractual Clauses, where applicable.

Supabase (servers in the EU) — storing the data as the operator’s processor: the requests database (section 2) and the separate database of measurement events described in section 2 and on the page What we measure.

When you conclude a subscription, necessary data may be communicated to the domain registrar (the .com domain is registered by the operator), to the email provider and to the tax authorities, to the extent necessary. Transfers to countries outside the European Economic Area (such as hosting in the USA) are protected through the mechanisms described above (Data Privacy Framework, Standard Contractual Clauses).

For the data on client websites and emails, we act as the operator’s processor, based on the agreement in Annex 3 to the contract.

Data from conversations that do not lead to a contract is kept for at most 12 months, then deleted. The data of active clients is kept for the duration of the contract and according to the applicable legal archiving terms (as a rule 10 years for financial and accounting documents).

Under GDPR, you have the right of: access to your data (art. 15), rectification (art. 16), erasure (art. 17), restriction of processing (art. 18), data portability (art. 20), objection (art. 21) and the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) — www.dataprotection.ro, B-dul G-ral. Gheorghe Magheru 28-3, Bucharest.

For any of these rights, write to us at gdpr@vreau.website or call us / write to us on WhatsApp at the contact details above, and we answer within 30 days at most.

The data in the request reaches the requests database. The measurement events, which contain no form data, reach a separate database. The IP address is not kept in the measurement data. Communication takes place through encrypted channels (HTTPS, WhatsApp). The files selected in the order window stay on your device until you send them yourself, directly on WhatsApp.