Updated 24 September 2026 · Courtesy translation; the Romanian version prevails.
Privacy and cookies notice
The controller
Crepes Factory SRL (tax ID 46237332), a Romanian company, operator of the grantera.ro site and its subdomains (Grantera Digital). For any request regarding personal data: office@grantera.ro.
What data we process and why
The contact form. We collect your name, email address, company name (optional), the service you are interested in and the description of the project, together with proof of your consent (the version of the notice accepted and the time of submission). We use them to assess your request and reply to you. The legal basis is your consent (art. 6(1)(a) GDPR) and steps taken at your request prior to entering into a contract (art. 6(1)(b) GDPR). We do not use this data for marketing and we do not make automated decisions that affect you.
Technical data. When the form is submitted, your IP address is used to limit abuse: we cryptographically derive from it an identifier that cannot be turned back into the address and that we delete after at most 24 hours. The IP address is also sent to Cloudflare's Turnstile service for anti-abuse verification. Hosting produces standard technical logs (IP address, page accessed, browser type), kept for a short time by the hosting provider.
We do not ask for and do not wish to receive through the form identity documents, passwords, bank details or other confidential information. If we receive them, we delete them.
Who we share the data with
- Cloudflare, Inc.: hosting of the site, anti-abuse protection (Turnstile) and the database in which requests are stored. The database is configured in the Western Europe region. Cloudflare is certified under the EU-U.S. Data Privacy Framework.
- Resend, Inc.: delivery of the internal email notification when we receive a new request. The transfer is based on the standard contractual clauses approved by the European Commission.
- Public authorities: only where the law requires it.
We do not sell the data and do not share it for advertising. The fonts and other resources of the site are hosted by us and are not loaded from third parties.
How long we keep the data
Form requests are kept for at most 6 months from submission if no collaboration follows. If you become a client, the data needed for the contractual relationship is kept for the duration of the contract and then for the periods required by accounting and tax legislation. Abuse-limiting identifiers are deleted after at most 24 hours.
Cookies
The site does not set analytics, advertising or tracking cookies and does not use social network pixels. That is why we do not show a consent banner. The Turnstile anti-abuse check may use technical mechanisms strictly necessary to prevent abuse, which are exempt from the consent requirement. If we introduce traffic measurement tools in the future, we will update this page and ask for consent where the law requires it.
Your rights
You have the right of access, rectification, erasure, restriction of processing, objection, portability (where applicable) and the right to withdraw your consent at any time, without affecting prior processing. Write to us at office@grantera.ro; we reply within one month at most. You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (dataprotection.ro) or with the supervisory authority in your country.
Security
The site is served exclusively over HTTPS. The form is protected by anti-abuse verification, rate limiting and data validation. Access to the requests received is limited to authorised persons within the company.
Minors
Our services are addressed to adults: companies, professionals and individuals. We do not knowingly collect data from persons under 18; if we learn that we have received such data, we delete it.
Changes
We may update this notice. The version published on this page, with its update date, is the applicable one. The version of the notice accepted is recorded with every request sent.
Back to the home page