Legal
Privacy Policy
Last updated: July 2026
This policy explains how AZTEC Inflatables, a registered brand of AMBIENT DESIGN S.R.L., collects and processes personal data, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Romanian law.
1. Who we are (the data controller)
AMBIENT DESIGN S.R.L.
Trade Registry no.: J40/17374/2003 · CUI: 16005616
Registered office: Șoseaua Ghermănești no. 2, Ghermănești, Snagov 077170, Ilfov county, Romania
E-mail: info@aztec.ro · Phone: +40 744 856 954
For any question about your personal data, write to the e-mail address above, mentioning “Data protection”.
2. What data we collect and why
| Situation | Data collected | Purpose | Legal basis |
|---|---|---|---|
| Contact form | Name, e-mail, phone (optional), message | To answer your request | Consent (art. 6 par. 1 letter a) |
| The “Your project” form | Name, e-mail, phone, project details, uploaded files | To prepare a quote / estimate | Consent and pre-contractual steps (art. 6 par. 1 letters a and b) |
| Gallery request (“I want a project like this”) | Name, e-mail, message, project reference | To answer the request | Consent (art. 6 par. 1 letter a) |
| Visiting the website | IP address, browser type (processed by the anti-spam service) | Site security, abuse prevention | Legitimate interest (art. 6 par. 1 letter f) |
We do not ask for and do not want you to send us sensitive data (health, religious or political beliefs etc.). Please do not include such information in your messages.
3. How long we keep the data
- Contact messages with no follow-up: at most 12 months from the last correspondence.
- Quote requests / briefs: up to 3 years, so we can resume the discussion or prove the terms of the offer.
- Contractual relationships: for the duration of the contract and afterwards according to legal archiving terms (usually 10 years for financial-accounting documents).
When these terms expire, the data is deleted or anonymised.
4. Who we share the data with
We do not sell your data. We may share it only with:
- The web and e-mail hosting provider — for hosting the site and delivering the messages received through forms.
- Cloudflare, Inc. — we use the Cloudflare Turnstile service for anti-bot verification of forms. It receives your IP address and technical information about your browser. Details: the Cloudflare privacy policy.
- Wally (getwally.net) — the service that displays the real Google reviews on the contact page. It loads only after your consent for the “Maps and external content” category; it may receive your IP address.
- Public authorities — only where there is a legal obligation.
Some of these providers may process data outside the European Economic Area, in which case the transfer is based on the standard contractual clauses approved by the European Commission.
5. Cookies and similar technologies
On your first visit we ask for your consent through a banner, where you can choose which categories you accept. You can change your options anytime via the “Cookie Settings” link in the footer of every page.
| Category | What they are used for | Can they be refused? |
|---|---|---|
| Necessary | They remember your cookie choice and the admin panel session | No — the site does not work without them |
| Security | Anti-bot verification of forms (Cloudflare Turnstile) | No — they protect the forms from automated submissions |
| Maps and external content | The Google map and the real reviews shown through the Wally service (getwally.net), on the contact page. When you accept them, Google and Wally may receive your IP address and set their own cookies. | Yes |
We do not use traffic analytics tools or marketing/advertising cookies. If we ever add such tools, the corresponding category will appear in the settings panel and we will ask for your consent before activating them.
Optional categories stay inactive until you give your consent. If you refuse them, the site sends no request to third-party servers — fonts and images are hosted on our own server. You can also delete cookies anytime from your browser settings.
6. Your rights
Under the GDPR you have the following rights:
- Access — to find out what data we hold about you.
- Rectification — to have inaccurate data corrected.
- Erasure (“the right to be forgotten”) — to have the data deleted, where we have no legal obligation to keep it.
- Restriction of processing — to limit the way we use it.
- Portability — to receive the data in a structured format.
- Objection — to object to processing based on legitimate interest.
- Withdrawal of consent — at any time, without affecting the lawfulness of processing before the withdrawal.
- Complaint and legal action — you can address the supervisory authority or the courts.
To exercise these rights, write to us at info@aztec.ro. We reply within 30 days at most.
If you believe we have infringed your rights, you can address the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) — B-dul G-ral. Gheorghe Magheru 28-30, Bucharest, or dataprotection.ro.
7. Data security
The site uses an encrypted connection (HTTPS), and access to the admin panel is protected by password and anti-bot verification. We apply reasonable technical and organisational measures to prevent unauthorised access, loss or disclosure of data.
8. Minors
The site is intended for people over 16. We do not knowingly collect data from children. If a parent or guardian notices that such information has been sent to us, they can write to us and we will delete it.
9. Changes to this policy
We may update this policy from time to time. The version in force is the one published on this page, with the date of the last update stated at the top.