SmartStudio

Privacy policy

We process as little personal data as possible. This page explains which data that is, why we need it and what rights you have.

1. Controller

Operion SRL
Bd. Revoluției din 1989 nr. 3, et. 1, ap. 5
300054 Timișoara, jud. Timiș
Romania
CUI 55537967 · J2026053018001
kontakt [at] smartstudio.work

SmartStudio is a brand of Operion SRL.

2. In short

The public website sets no cookies, uses no analytics or advertising services and loads fonts and content from its own server. The only exception is the security check in the contact form (section 5).

3. Hosting

The website runs on the infrastructure of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you visit, Cloudflare processes technically necessary data such as your IP address, the time, the requested address and browser details in order to deliver the page and protect it from attacks. We do not keep access logs ourselves. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR). Cloudflare is our processor and is certified under the EU-US Data Privacy Framework; the European Commission’s standard contractual clauses also apply.

4. Call-back form

When you request a call back, we store your name, phone number, the optional details (email, business, preferred time, message), the language of the page and the time. We need your name and phone number to call you back; everything else is optional.

The purpose is to handle your request; the legal basis is steps taken at your request prior to a contract (Art. 6(1)(b) GDPR). The request is stored in our database at Cloudflare, and we receive an email notification in our mailbox at Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. There are no other recipients.

We delete requests no later than 12 months after receipt. If a contract results from a request, we keep the necessary data for as long as the law requires.

5. Security check (Cloudflare Turnstile)

To stop automated abuse of the form we use Cloudflare Turnstile. The check is loaded from challenges.cloudflare.com only on pages that contain the form. Cloudflare evaluates technical browser characteristics and the IP address for this purpose; the data is not used for advertising. The legal basis is our legitimate interest in preventing abuse (Art. 6(1)(f) GDPR).

6. Contact by email

Messages to kontakt [at] smartstudio.work are forwarded to our Google mailbox via Cloudflare Email Routing. We use your address and message only to reply (Art. 6(1)(b) or (f) GDPR) and delete them once they are no longer needed – at the latest after 12 months, unless the law requires us to keep them.

7. Partner area

The login is only for SmartStudio staff and partners. After signing in, a technically necessary session cookie is set that expires after eight hours or on sign-out. For security we log sign-ins and changes (without IP addresses) and delete these entries after 365 days.

8. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR). Just write to us at kontakt [at] smartstudio.work.

You can also lodge a complaint with a data protection authority. The authority responsible for us is the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru nr. 28–30, Sector 1, 010336 București, www.dataprotection.ro; in Austria it is the Datenschutzbehörde (www.dsb.gv.at).

Last updated: September 2026