How we process personal data on graphic-beast.com, in accordance with the General Data Protection Regulation (GDPR).
Access, rectification, erasure, restriction of processing, data portability, objection, withdrawal of consent and complaint to a supervisory authority.
When you visit our website, our hosting provider automatically processes data sent by your browser: IP address, date and time of access, page requested, referrer URL, browser type and operating system. This data is technically necessary to deliver the website and keep it secure. The legal basis is our legitimate interest in a secure and stable operation (Art. 6(1)(f) GDPR). Log files are kept for a limited period and then deleted.
When you write to us via the contact form, we process the data you enter: name, phone number, email address, optionally your company name, and your message. The request is forwarded to our mailbox by email. The same applies when you contact us by email, phone or WhatsApp.
We use this data only to answer your request and, where applicable, to prepare an offer. The legal basis is the performance of pre-contractual measures (Art. 6(1)(b) GDPR) or our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). If you message us on WhatsApp, WhatsApp (Meta Platforms Ireland Ltd.) also processes your data under its own privacy policy.
So that we can respond quickly, we also receive a WhatsApp notification for every request sent through the form. We use the CallMeBot service (api.callmebot.com) for this. The notification contains your name, company, phone number, email address and an excerpt of your message. This data is passed to CallMeBot and to WhatsApp (Meta); processing outside the European Union cannot be ruled out. The legal basis is our legitimate interest in handling your request quickly (Art. 6(1)(f) GDPR). You can object at any time or contact us directly by email instead.
To protect our forms against spam and abuse, we use Google reCAPTCHA Enterprise, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). reCAPTCHA is only loaded on the contact page and when you open the request form, and checks, based on signals such as IP address, browser information and interactions, that the input comes from a human. The legal basis is our legitimate interest in protection against automated submissions (Art. 6(1)(f) GDPR). Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework.
On your first visit, a banner asks for your consent. Your choice is saved in your browser's local storage (entry "gb_consent") so that the banner does not appear on every visit. This storage is strictly necessary.
Analytics cookies are only used with your consent (Art. 6(1)(a) GDPR). The "marketing cookies" category shown in the banner is currently not used – we do not use any advertising or remarketing services. You can withdraw or change your consent at any time:
With your consent, we use Google Analytics 4 from Google to understand how our website is used and to improve it. Cookies are set and usage data is processed, such as pages visited, time spent on the site, device and browser information and approximate location. Google Analytics 4 does not store full IP addresses.
Google Analytics is only loaded after you have consented to analytics cookies in the banner. Without your consent, no connection to Google Analytics is made and no data is sent to it. The legal basis is your consent (Art. 6(1)(a) GDPR). Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework.
For animations, we load the GSAP library via the cdnjs content delivery network of Cloudflare, Inc. (USA). Your IP address is transmitted to Cloudflare so that the file can be delivered. The legal basis is our legitimate interest in displaying the website quickly and reliably (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework.
Our website contains links, for example to WhatsApp or social networks. No data is sent to these services until you click the link. From then on, the privacy policy of the respective service applies.
We keep personal data only as long as it is needed for the respective purpose. Requests are deleted once they have been handled, unless statutory retention obligations (for example under commercial or tax law) apply.
Under the GDPR, you have the right to:
To exercise your rights, simply write to the email address above. You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular in the EU member state where you live. The authority responsible for us is the Romanian ANSPDCP (dataprotection.ro).
We do not sell personal information. Analytics and advertising tools (Google, Meta) run only after you accept them in the cookie banner, and you can change that choice at any time in the cookie settings. The rights described above are available to every visitor, wherever you live: to exercise them, write to the email address above.
For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by "https://" in your browser's address bar.
We update this privacy policy when our website or the legal requirements change. The version published on this page applies.
Last updated: October 2026