RO‹ Back to the site

Privacy policy

This is a translation. The Romanian version is the authoritative one.

Who is responsible for your data

The ShadeWorks website is run by the holder below, referred to as "ShadeWorks" or "we". We are the controller of the personal data processed to run this site and handle the requests we receive.

Name
AXINTE RAUL PERSOANA FIZICA AUTORIZATA
Tax identification number (CUI)
55089316
Trade register number
F2026033711005
European unique identifier (EUID)
ROONRC.F2026033711005
Registered office
Str. Stefan Mihaileanu nr. 33, Constanta, jud. Constanta
Registered with
Oficiul Registrului Comertului de pe langa Tribunalul Constanta
Contact
contact@shadeworks.ai

For any question about your data, including the rights below, write to contact@shadeworks.ai. The same details are on the Legal details page.

What data we process

When you ask for a proposal through the form, you send us your company name, an email address or a phone number (one field, you fill in one of them) and, optionally, a description of your business or project. If you tick one of the project types above the form, your choice is added to the description.

The company name and the contact are required to send the form: without them the form is not sent and we have no way to reply. The description is optional. Please do not enter passwords, bank details, medical data or other sensitive information.

When the form is sent, we record together with the request:

  • the date and time of the request;
  • information about the browser used, as it presents itself (usually name, version and operating system);
  • the source of the request: the site and, if the link you opened carries a campaign identifier, that identifier.

To limit repeated submissions, the system may compute and keep a fingerprint derived from the IP address. The IP address itself is not stored in the request record. The fingerprint is pseudonymised information, not anonymous.

The form also uses anti-spam checks: a technical field that must stay empty and the time elapsed since the form was loaded. The page language is sent so the right messages are shown. These are not stored with the request.

When the site is accessed, the hosting infrastructure may process technical data needed to deliver and secure the pages, including the IP address and information about requests to the server.

If you write to us directly by email, we process the sender address, the message, any attachments and the correspondence that follows.

Why we use the data and on what basis

We use the data to understand the request, communicate with you and prepare a proposal.

If you ask for the services on your own behalf, the processing needed to prepare and perform the contract is based on Art. 6(1)(b) GDPR. If you represent a company, we use your business contact details on the basis of our legitimate interest in communicating with the company and managing the business relationship, Art. 6(1)(f).

Preventing abuse and identifying the source of requests rely on our legitimate interests in the security of the site and in assessing the channels through which requests reach us. For documents required by law we rely on legal obligation, Art. 6(1)(c).

These bases do not mean that sending the form is consent to any later use. The applicable framework is Regulation (EU) 2016/679 (GDPR).

The form does not sign you up to a newsletter. We do not sell your data.

Who may receive the data

The data is accessible to authorised people at ShadeWorks and to the providers involved in running the services, to the extent they need it:

  • Vercel, for hosting the site and processing the form;
  • Supabase, for keeping and managing requests in the database;
  • Zoho Mail (Zoho Corporation B.V., data hosted in data centres in the European Union), for correspondence by email;
  • Resend (Resend, Inc., sending from the EU region - Ireland), for internal email notification of requests received through the form.

We may also share data with professional advisers or authorities when this is necessary to meet legal obligations or defend a right.

Where the data is processed

Form processing is configured in Vercel's Frankfurt region, and the Supabase database is also hosted in the Frankfurt region, in the European Union.

Some providers may access or process data outside the European Economic Area, for example in the United States, for infrastructure or support. For these transfers, the safeguard is the standard contractual clauses adopted by the European Commission, included in the providers' data processing agreements (Vercel, Supabase, Resend, Zoho). Vercel and Resend are also certified under the EU-U.S. Data Privacy Framework, for which the Commission has adopted an adequacy decision.

You can ask us by email, at the address above, for a copy of these safeguards.

How long we keep the data

Your request (company name, contact, description, source and time sent) and the related correspondence are kept for 3 years from the last relevant interaction, whether or not it becomes a project. After that we delete them, unless there is a documented legal reason to keep them.

The browser information and the IP fingerprint attached to the form are deleted separately, 30 days after sending.

Contract documents are kept for as long as needed to perform the contract and defend the rights arising from it. Accounting documents are kept for the periods set by the applicable law.

Data deleted from live systems may remain for a while in backups, until those are replaced. Access to backups is restricted.

Your rights

Under the law, you may ask for access to your data, rectification, erasure, restriction of processing and portability. You may object to processing based on legitimate interest. Where processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing.

Write to contact@shadeworks.ai. We may ask for additional information strictly needed to verify your identity. We usually reply within one month; if the legal extension is needed, we tell you within the first month. Exercising your rights is, in principle, free of charge.

You can lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), through its official complaints page, and you can go to the competent courts.

We do not use the form for solely automated decisions with legal or similarly significant effects. The automated checks we run are anti-spam.

What the site keeps in your browser

This version of the site keeps nothing in your browser: it sets no cookies, writes nothing to localStorage or sessionStorage and uses no traffic analytics or advertising pixels.

The details are in the Cookies and local storage policy.

Updates

We update this policy when the relevant processing changes. Last updated: 2 October 2026.