Privacy notice
Last updated: 29 September 2026
About this translation
Who is responsible for your data
The controller of the personal data processed on fonduro.lumosstudio.ro is Lumos Studio, individual (not yet registered as a business), at Roman, Neamț County, Romania. Email: hello@lumosstudio.ro.
You can write to the address above at any time with any question about your data.
What we process, why, and for how long
We only process the data we need. The table below lists all of it.
| Activity | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Hosting and security | IP address, browser type, requested page, date and time | delivering the site, security and preventing abuse | legitimate interest (Art. 6(1)(f) GDPR) | a short period set by the hosting provider |
| Emails you send us | your name, email address and the message | replying to your message | legitimate interest (Art. 6(1)(f)) or steps before a contract (Art. 6(1)(b)) | for the conversation and up to 24 months after the last message |
| Searching programmes and the eligibility checker | the filters and answers you choose (type of applicant, county, budget, age of the company, etc.) | showing suitable programmes; the filters sit in the page address, and the checker's answers are worked out in your browser and are not sent to us | your request, to provide you the service (Art. 6(1)(b) GDPR) | not kept |
| Saved programmes | the list of programmes you save | so you can find them again; it stays only in your browser | your request (Art. 6(1)(b) GDPR) | until you delete them |
| Consultant sign-up | the type (individual or company), name, email, phone, website, description and specializations you fill in on the form | reviewing the request by hand, contacting you and, if it is approved, listing you publicly: your name, description, specializations and website appear in the consultant list; your email and phone are not shown | your request to be listed (Art. 6(1)(b) GDPR); for the public listing, your consent given by sending the form (Art. 6(1)(a) GDPR), which you can withdraw at any time | while you are listed or the request is being processed; we delete them on your written request to the contact address |
| Abuse limiting | the IP address, held in the server's memory | limiting the number of sign-up requests per hour | legitimate interest (Art. 6(1)(f) GDPR) | at most one hour, never written to disk |
We do not sell your data and do not use it for advertising or profiling.
Who receives your data
We use providers that process data on our behalf under data processing agreements. We do not pass your data to anyone else unless the law requires it.
| Provider | What it does | Where | Their policy |
|---|---|---|---|
| Vercel Inc. | website hosting and delivery | USA (with EU data centres where available) | https://vercel.com/legal/privacy-policy |
| Neon, Inc. | database | data is stored in an EU region | https://neon.com/privacy-policy |
Transfers outside the European Economic Area
Some providers are outside the EEA. Transfers rely on the EU–US Data Privacy Framework (for certified providers) and/or the standard contractual clauses approved by the European Commission. You can ask us for a copy of the safeguards.
Cookies and browser storage
The details are on the cookies and storage page.
Your rights
You have the right to:
- find out what data we hold about you and get a copy (access);
- have incorrect data corrected;
- have your data erased (the “right to be forgotten”);
- restrict how we use your data;
- receive your data in a common format and pass it to someone else (portability), where we process it under a contract or consent;
- object to processing based on legitimate interest;
- withdraw consent at any time, without affecting what happened before.
Write to hello@lumosstudio.ro. We reply within one month at most. We may ask for proof of identity so we do not hand your data to an impostor.
If you are not satisfied
You have the right to lodge a complaint with the supervisory authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, cod poștal 010336, București, https://www.dataprotection.ro, anspdcp@dataprotection.ro. We would appreciate the chance to fix the problem first.
Security
We use encrypted connections (HTTPS), limit access to data and choose providers with recognised security measures. No method is 100% safe; if an incident affects you, we will tell you and the authority where the law requires it.
Changes
When we change how we process data, we update this page and the date above.