Privacy policy

1. Who the controller is

Personal data collected through this site is processed by the company below, as data controller, in accordance with Regulation (EU) 2016/679 (“GDPR”).

Company

RARE LIVING SRL

Registered office

Str. Baba Novac 8A, Bl. C, Et. 2, Ap. 221, Cod poștal 031628

Trade Register no.

J2022003723409

Tax identification number

45713667

E-mail

rarelivingsrl@gmail.com

Phone

+40 748 265 666

For anything concerning your data, the e-mail address above is the most direct route. The company has not appointed a data protection officer, as it does not fall into any of the cases where the GDPR requires one.

2. What we collect

The contact form is the only place on this site where we ask you for personal data. When you send it, we store:

• your name
• your phone number
• your e-mail address, if you choose to fill it in — it is optional
• your message and, if you started from a particular apartment, the code of that apartment
• the page you sent the request from and the language you were reading it in — so we know which project you mean and which language to answer in
• your consent and the moment you gave it

Outside the form, the server hosting this site records, as any web server does, minimal technical data: IP address, browser type, the page requested and the time of the request.

Your IP address has exactly one further use: an anti-abuse limit of at most 5 form submissions per hour from the same address. That tally lives only in the server's memory, for at most an hour, and is lost on every restart — it never reaches the database and is never attached to your request.

We do not profile you, we make no automated decisions about you, and we neither buy nor sell personal data.

3. Legal basis and purposes

• Consent (Art. 6(1)(a) GDPR) — for the form data, used solely to reply to you, send you what you asked for and arrange a viewing.
• Legitimate interest (Art. 6(1)(f) GDPR) — for the technical logs and the anti-abuse limit, that is, for keeping the site working and secure.

We do not use form data for unsolicited commercial messages or marketing, and we pass it to nobody for advertising purposes.

4. Where the data goes

Data is accessible to authorised Rare Living personnel and the providers that help us record and handle enquiries:

• Into the database — hosted by Supabase (our processor), in a data centre inside the European Union. The site may write to that table but not read it: the records cannot be read from a browser, by anyone.
• Into an e-mail notification to the Rare Living sales team, carrying the same content. Delivery is handled by Resend, our e-mail provider, and the message lands in the team's mailbox.
• Communication and notification service providers — to deliver enquiries to the people authorised to handle them and respond to you.

The site runs on a server rented by the company. The hosting provider has, as any infrastructure provider does, technical access to that machine.

Where one of these providers processes data outside the European Economic Area, the transfer relies on the safeguards in Chapter V GDPR — an adequacy decision or the European Commission's standard contractual clauses.

Beyond that, we disclose data only to public authorities, and only where the law obliges us to.

5. How long we keep it

Form requests

For the time needed to respond to your enquiry and continue the discussions you have initiated. The period depends on resolving the enquiry, any continuing contractual relationship and applicable legal retention obligations. You may request erasure or withdraw consent using the contact details above; applicable legal obligations may require certain data to be retained.

Server technical logs

rotated automatically, keeping a limited volume; we do not archive them and use them for nothing else

The anti-abuse tally

at most one hour, in server memory only

6. Your rights

Under Art. 15–22 GDPR you have the right of access to your personal data, the right to rectification, the right to erasure (“the right to be forgotten”), the right to restriction of processing, the right to data portability, the right to object, and the right not to be subject to a decision based solely on automated processing. Consent may be withdrawn at any time, without affecting the lawfulness of processing carried out beforehand.

To exercise them, write to us at rarelivingsrl@gmail.com. You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) — www.dataprotection.ro.

7. Cookies, and what your browser keeps

This site uses no cookies — none for analytics, none for marketing, none belonging to third parties. There is no Google Analytics, no Facebook Pixel, and it loads no script, font or map from another server. That is why you see no consent banner: there is nothing to consent to.

Links to Google Maps and to our social networks open on those sites only when you click them; from that moment their own privacy policies apply.

8. Changes to this policy

When the site changes in a way that touches your data, the text above changes with it, and the update date at the top of the page moves accordingly.