1. Data controller
The controller of your personal data is:
- Legal name
- Spatiu 360 - Marius Minia PFA
- Trading name
- Spațiu360
- Tax ID
- RO48556478
- Professional address
- Strada Lungă 179, Brașov, Romania
- marius93rm@gmail.com
- Website
- https://spatiu360.ro
For questions about how we process personal data, or to exercise your rights, please contact us by email at the address above.
2. Data we collect
The data we process depends on how you interact with Spațiu360.
When you request a quote through the contact form, we may collect your name, email address, telephone number, property or space type, the locality where the property is located, approximate floor area, the service you are interested in, and the information you enter in the message field.
Telephone number, floor area and certain property details may be optional, depending on the form.
When you contact us directly by telephone, email or through a social platform, we may process the information you send us during the conversation.
While you use the website, certain technical information may be processed automatically, such as IP address, browser and device type, date and time of access, requested page, information about server requests, and technical data needed for security and website operation.
3. Why we use data
Personal data is used to respond to information requests and quote requests, assess the property or space to be photographed, prepare and send a quote, arrange an appointment, communicate about delivery of the service, create and deliver 360° virtual tours, manage client relationships, meet tax, accounting and legal obligations, and protect the website and prevent misuse.
We do not use information submitted through the form to send unsolicited commercial messages.
If we introduce newsletters or marketing communications in the future, they will be subject to a separate choice and, where required, separate consent.
4. Legal basis for processing
When you contact us for information or a quote, processing is necessary to respond to your request and, where applicable, to take steps before entering into a contract, under Article 6(1)(b) of the General Data Protection Regulation (GDPR).
For operating, securing and protecting the website, and for keeping a reasonable record of professional communications, we may rely on our legitimate interest under Article 6(1)(f) GDPR.
Where certain information must be retained to meet tax, accounting or other legal obligations, processing is based on Article 6(1)(c) GDPR.
Where the law requires consent, it will be requested separately and can be withdrawn at any time, without affecting the lawfulness of processing before withdrawal.
5. Contact form
The form on this website is for requests related to Spațiu360 services.
Data entered in the form is used only to assess the request, prepare a quote and continue communication with the person who contacted us.
Please do not submit special categories of personal data, health information, identity documents, sensitive financial information, passwords or other information that is not needed to request a quote.
For the technical processing of the form, we may use Formspree, provided by Formspree, Inc. Data entered in the form is sent to Formspree infrastructure for processing, spam protection, technical storage and delivery of the message to Spațiu360.
Formspree may also process technical information associated with form submission, such as IP address, browser type, access time and device information.
Formspree operates infrastructure including in the United States. Where data is transferred outside the European Economic Area, transfers must use the mechanisms and safeguards required by European data-protection law.
Further information about how Formspree processes data is available in the provider’s privacy policy.
6. Data processed when creating 360° virtual tours
If you become a Spațiu360 client, we may additionally process the address or location of the property, details needed to arrange the session, billing data and the 360° photographic material created in the photographed space.
The main purpose of photography is to present the space, not to identify people.
Where possible, tours are made without identifiable people in the frame. Before the photo session, we recommend removing documents, personal photographs, displayed data, sensitive objects and other information that should not be publicly visible.
If an identifiable person appears accidentally in material, we may edit or remove that image where necessary and technically possible.
The client requesting photography is responsible for ensuring they have the right to allow access to and photography of the space, and for informing us about relevant restrictions before the work is carried out.
7. Website hosting and technical data
The Spațiu360 website is hosted through Netlify infrastructure.
When providing hosting and website-delivery services, Netlify may process technical information associated with requests to the server, including IP address, browser and device information, request date and time, and requested resources.
This data is used mainly to provide the website, for security, abuse prevention, technical diagnosis and infrastructure operation.
If Netlify Web Analytics is enabled, traffic statistics are generated from CDN-server data without installing an analytics script on the website or using analytics cookies in the browser.
Further details are available in the Netlify privacy policy.
8. Demonstration virtual tour and external content
The website may include a demonstration virtual tour delivered through Clear Pano external infrastructure.
When a page containing the tour is opened, the browser may establish a direct connection to Clear Pano servers to load interactive content. In that connection, the provider may receive technical data such as IP address, browser type, device information and referring-page information.
Processing carried out directly by the external provider is subject to that provider’s own terms and policies.
If Spațiu360 tours are hosted entirely on our own infrastructure in the future, this transfer to the provider will no longer occur.
9. Links to social networks and other websites
The website may contain links to Facebook, Instagram, TikTok, Google Business or other external platforms.
Displaying a link does not mean that Spațiu360 automatically sends data to that platform. When you choose to follow an external link, you leave spatiu360.ro and subsequent data processing is governed by the platform operator’s policies.
10. Cookies and local storage
In its current configuration, Spațiu360 does not use advertising cookies or Google Analytics.
The website may use browser localStorage to remember that you closed the privacy notice. This information is strictly technical and is used only to avoid showing the same notice repeatedly.
This preference is not used for profiling, advertising or tracking activity across other websites.
If analytics, advertising or other technologies requiring consent are introduced in the future, this policy will be updated and the necessary consent-management mechanism will be implemented before those technologies are activated.
11. Google Search Console
Spațiu360 may use Google Search Console to manage the website’s presence in Google Search, check indexing and analyse website performance in Google Search.
Google Search Console is not used on the website as a tool to track individual visitors and its configuration alone does not install visitor analytics cookies on spatiu360.ro.
12. Who we may share data with
Data may be accessible, where necessary, to providers that help us operate the website and services, such as the hosting provider, contact-form technical provider, email providers and IT infrastructure providers.
Data may also be shared with the accountant, legal advisers or other professionals where necessary to fulfil professional or legal obligations.
Data may be disclosed to public authorities, courts or other competent bodies where there is a legal obligation to do so.
Spațiu360 does not sell or rent users’ personal data to third parties and does not pass contact data to third parties for their own marketing.
13. International transfers
Some technical providers used by Spațiu360 may be established outside the European Economic Area or use infrastructure outside it.
Where this constitutes an international data transfer under the GDPR, we use providers that state they use legal mechanisms recognised by European law, such as an applicable adequacy decision or standard contractual clauses approved by the European Commission.
14. How long we retain data
Data received in a simple request for information or a quote is retained only as long as needed to manage that request and, ordinarily, for no more than 12 months from the last communication unless there is a legitimate reason or legal obligation to retain it longer.
If a request leads to a contract, data needed to deliver the service and commercial or accounting documents are retained for the contractual relationship and afterwards for the periods set by applicable law.
Photographic material and virtual tours are retained for the period agreed with the client or as long as necessary to provide the service, maintenance and resolution of possible issues.
Technical data and security logs are retained according to the periods applied by infrastructure providers and only as long as necessary for the purposes for which they were collected.
15. Data security
We use reasonable technical and organisational measures to protect data against unauthorised access, loss, alteration or disclosure.
The website is available over HTTPS, and access to the services through which the website, messages and client materials are managed is limited to people who need it to carry out their work.
No electronic transmission or storage method can guarantee absolute security, but the measures used are adapted to the nature and risk of the data processed.
16. Your rights
Under the conditions set out in the GDPR, you have the right to request access to the personal data we hold about you, correction of inaccurate data, erasure of data, restriction of processing, data portability where applicable, and to object to certain processing based on legitimate interest.
Where processing is based on consent, you have the right to withdraw it at any time.
To exercise these rights, contact us at the email address above.
We may request additional information where necessary to verify the identity of the person making the request.
17. Right to lodge a complaint
If you consider that your personal data is processed in breach of applicable law, you have the right to lodge a complaint with the competent supervisory authority.
In Romania, the competent authority is: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal – ANSPDCP. Website: www.dataprotection.ro.
We encourage you to contact us first if there is a concern about your data, so that we can try to resolve it directly.
18. Automated decisions and profiling
Spațiu360 does not use data collected through the website to make decisions based solely on automated processing that produce legal or similarly significant effects on users, and does not carry out individual commercial profiling through the website.
19. Changes to this policy
This Privacy Policy may be updated when we change how the website works, introduce new services, change technical providers or when the applicable legal framework changes.
The updated version will be published on this page together with the date of the last update.