Privacy Policy
Last updated: October 17, 2026This policy explains what personal data the Digital Immersive Box website processes, why, for how long, and who helps us do it. It is short because the site collects very little: there are no accounts, no advertising and no analytics or tracking cookies.
At a glance
- We only receive personal data that you choose to send us, through the contact form or by email.
- We set no cookies and use no analytics, advertising or social-media trackers.
- Your display preferences (theme, language, motion) are saved only in your own browser.
- Our host, Cloudflare, processes technical data such as your IP address to deliver and protect the site.
- We never sell your data or share it for marketing.
Your Rights under the GDPR
As a company registered in Romania and operating across the EU, we are subject to the General Data Protection Regulation (GDPR). You have the following rights in relation to your personal data:
Right of Access
Request a copy of the personal data we hold about you, and information on how we process it.
Right to Rectification
Ask us to correct personal data that is inaccurate or to complete data that is incomplete.
Right to Erasure
Request deletion of your personal data where there is no compelling reason for continued processing.
Right to Restrict Processing
Ask us to pause processing of your data in certain circumstances, for example while you contest its accuracy.
Right to Data Portability
Receive your personal data in a structured, machine-readable format to reuse across different services.
Right to Object
Object to processing where we rely on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on your consent, withdraw it at any time without affecting the lawfulness of prior processing.
Right to Lodge a Complaint
If you believe your rights have been violated, lodge a complaint with a supervisory authority in your EU member state.
The supervisory authority for our operations is:
ANSPDCP — Romanian National Supervisory Authority for Personal Data Processing — dataprotection.ro
If you reside in another EU member state, you may also lodge a complaint with your local supervisory authority.
To exercise any of these rights, contact us at [email protected]
Who is responsible
The controller of your personal data is Digital Immersive Box SRL, Cluj-Napoca, Romania (EU). For any question about this policy or your data, write to [email protected].
What we process, why, and for how long
These are the only situations in which the website processes personal data:
When you contact us
- Data
- First and last name, email address and message (required); phone number, company and project type (optional). The form service also receives your IP address when you send the form.
- Purpose
- To read and answer your enquiry and, if you wish, to prepare an offer or a project with you.
- Legal basis
- Steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering messages sent to us (Art. 6(1)(f) GDPR).
- Retention
- Up to 24 months after our last exchange. If the enquiry leads to a contract, the related correspondence is kept for as long as Romanian law requires for contract and accounting records.
When you visit the website
- Data
- IP address, browser and device type, the page requested, the referring page, and the date and time of the request.
- Purpose
- To deliver the pages to your browser and to protect the site against abuse and attacks. In our hosting dashboard we only see aggregated statistics (for example, requests per country), and we do not use this data to identify you.
- Legal basis
- Our legitimate interest in operating a secure, working website (Art. 6(1)(f) GDPR).
- Retention
- Kept by Cloudflare for a short period under its own retention policy. The aggregated statistics we see contain no personal data.
Your display preferences
- Data
- Theme, language, typeface and motion settings, and only the ones you change.
- Purpose
- To remember your choices on your next visit. They are stored in your browser's local storage under the key dib-tweaks-v1 and are never sent to us.
- Legal basis
- Storage that is strictly necessary for a feature you asked for (Art. 5(3) of the ePrivacy Directive), so no consent is required.
- Retention
- Until you clear your browser's site data for digitalimmersivebox.com.
Cookies
The website itself sets no cookies, and we use no analytics, advertising, social-media or other tracking technologies. That is why there is no cookie banner.
When Cloudflare needs to tell people and automated traffic apart, it may set a strictly necessary security cookie (such as __cf_bm). It is used only for that purpose, not for tracking.
Our fonts are hosted on our own server, so loading the site does not contact Google Fonts.
Service providers
We rely on a small number of providers. They process data only to provide their service to us:
- Cloudflare, Inc.
- Hosting, content delivery, DNS and security, and forwarding of emails sent to our addresses. Processes the technical data of every visit.
- Web3Forms
- Delivers contact-form submissions to our email inbox. Receives the form fields and your IP address when you send the form.
- unpkg
- Public content-delivery network from which your browser loads React, the open-source library the site is built with. Like any web server, it sees your IP address and browser details.
- Our email provider
- Hosts the inbox in which your messages and our replies are stored.
We do not sell your personal data and do not share it with advertisers or data brokers. We disclose it to public authorities only when the law requires us to.
Transfers outside the EU
Some of these providers run servers worldwide, so your data may be processed outside the European Economic Area, including in the United States. Where that happens, the transfer relies on an adequacy decision of the European Commission (such as the EU–U.S. Data Privacy Framework) or on the Commission's Standard Contractual Clauses.
Exercising your rights
You can use any of the rights listed above by writing to [email protected]. It is free of charge. We reply within one month; for complex requests the GDPR allows up to two further months, and we will tell you if we need them. We may ask you to confirm your identity before acting on a request.
Security
The website is served only over encrypted HTTPS connections (TLS 1.2 or newer, with HSTS). Access to our inbox and hosting accounts is limited to the people who need it. No method of transmission or storage is completely secure, but we take reasonable measures to protect your data.
Children's Privacy
The website is not aimed at anyone under 16, and we do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has sent us personal data, contact us and we will delete it.
Changes to this policy
If the website starts processing personal data in a new way, we will update this policy before the change takes effect and change the “Last updated” date at the top of this page.
Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:
Digital Immersive Box SRL
Cluj-Napoca, Romania, EU
You may also use the contact form at digitalimmersivebox.com/contact