Privacy Policy

Last updated: 1 September 2026

Glitch Shop SRL respects your privacy and processes personal data only for clear business, technical and legal purposes. This policy explains what we collect through glitch-shop.com, why we use it, who can receive it and what rights you have.

Who controls your data

Glitch Shop SRL is the data controller for this website.

Business address: Strada Vasile Conta 8-10, Sector 2, Bucharest, Romania
Company registration number: J2015006564407
Unique registration code: 34586711
Privacy contact: hello@glitch-shop.com

Data we collect

Contact and project inquiries

The contact form asks for your full name, email address and message. We also receive personal data when you email hello@glitch-shop.com or another published Glitch address. Your message may contain information about your organisation, role, project, budget, timing or other details you choose to share.

We use this information to answer your inquiry, assess a possible collaboration, prepare an offer and manage subsequent correspondence.

Job inquiries

If you contact us about work or collaboration, we may receive your name, contact details, portfolio, CV and any information you include. We use it to assess the inquiry and communicate with you.

Technical and security data

Our hosting infrastructure may record IP address, browser and device information, requested URL, date, time, response status and security events. We use these logs to deliver the website, prevent abuse, diagnose faults and protect the service.

Analytics and cookies

With your consent, we use Google Analytics 4 to understand visits, page views and interactions. Google Analytics may process device and browser information, approximate location derived from the IP address, pages viewed, events and consent status.

Google Analytics remains disabled until you enable Analytics Cookies. We have disabled Google Signals and advertising personalisation. We do not use Google Analytics for personalised advertising.

The consent cookie stores your cookie preference for up to one year. Google Analytics cookies can include _ga and a property-specific _ga_* cookie and can persist for up to two years. Our GA4 property retains user-level and event-level data for two months. Google may retain aggregate reporting data for longer under its service settings and policies.

You can change or withdraw your choice at any time through Cookie Settings. Withdrawal does not affect processing that occurred before withdrawal.

External content and links

Some pages may contain videos, media or links from other organisations. When you choose to load or open external content, that provider may receive technical and usage data under its own privacy policy.

Why we process personal data

We rely on the following legal bases:

• Your request and steps before entering a contract, when we respond to an inquiry or prepare an offer.
• Contract performance, when we manage an agreed project or service.
• Our legitimate interests, when we secure, maintain and improve the website, manage correspondence and protect legal claims.
• Your consent, for Google Analytics and optional cookies.
• Legal obligations, when Romanian or European law requires records or disclosure.

We do not use website data for automated decisions that produce legal or comparable effects.

Who receives personal data

We share data only when the service or law requires it. Recipients may include:

• hosting, website maintenance and security providers;
• email and collaboration providers, including Google Workspace;
• Google Analytics, after analytics consent;
• accountants, lawyers or other professional advisers when required;
• public authorities when the law requires disclosure.

These providers must process data under their contracts, applicable law and our instructions where they act as processors. We do not sell personal data.

International transfers

Some providers, including Google, may process data outside the European Economic Area. They use the transfer mechanisms and safeguards available under data protection law, which can include adequacy decisions and Standard Contractual Clauses. You can read Google’s Privacy Policy and Google’s data transfer information.

How long we keep data

We apply these retention periods unless a contract, dispute or legal obligation requires a longer period:

• General inquiries and related correspondence: up to three years after the last meaningful contact.
• Unsuccessful job or collaboration inquiries: up to 12 months, unless you ask us to remove them sooner or agree to a longer period.
• Contract, accounting and legal records: for the periods required by Romanian law.
• Technical and security logs: only for the period needed to operate and secure the website or investigate an incident.
• GA4 user-level and event-level data: two months. Analytics cookies may remain for up to two years unless you withdraw consent or clear them earlier.
• Cookie preferences: up to one year.

We may anonymise aggregate information that no longer identifies a person and retain it for statistical purposes.

Your rights

Subject to the conditions in the General Data Protection Regulation, you may:

• request access to your personal data;
• correct inaccurate or incomplete data;
• request deletion or restriction;
• object to processing based on legitimate interests;
• receive portable data when the law provides this right;
• withdraw consent at any time;
• complain to a data protection authority.

Send requests to hello@glitch-shop.com. We may ask for information needed to verify your identity before completing a request.

You can also contact the Romanian National Supervisory Authority for Personal Data Processing at dataprotection.ro.

Children’s data

This website addresses organisations and professional audiences. We do not knowingly collect personal data from children through the website.

Changes to this policy

We may update this policy when our website, providers or legal obligations change. We will publish the current version on this page and change the date at the top.