Skip to main content

Privacy Policy

Last updated: October 15, 2025

1. Data Controller

Surge Studio SRL, based in Bucharest, Romania, is responsible for protecting your personal data in accordance with the General Data Protection Regulation (GDPR).

Contact: contact@surge.ro

2. Data Collected

Contact Form

When you send us a message through the contact form, we collect:

  • Name
  • Email address
  • Your message

Website Analytics

We use Plausible Analytics, a privacy-first web analytics service. Plausible does not use cookies and only collects anonymized visitor data:

  • Pages visited
  • Session duration
  • Device and browser type (anonymous)
  • Country of origin (no IP address)

Plausible is hosted in the EU and is GDPR-compliant by default. No consent is required for Plausible as it does not collect personal data.

3. Purpose of Processing

We use the collected data to:

  • Respond to your inquiries through the contact form
  • Improve user experience on our website
  • Analyze website traffic (anonymously)

4. Legal Basis (GDPR Art. 6)

  • Contact form: Consent (Art. 6(1)(a)) - by submitting the form, you provide explicit consent for data processing
  • Analytics: Legitimate interest (Art. 6(1)(f)) - improving our website

5. Data Retention

  • Contact form data is stored for 2 years in Supabase (EU servers)
  • Analytics data is retained for 26 months in Plausible (EU servers)

6. Data Sharing

We do not sell or share your data with third parties, except:

  • Supabase - database hosting (EU servers, GDPR-compliant)
  • Plausible Analytics - web analytics (EU servers, no personal data)

7. Your Rights (GDPR Art. 15-22)

You have the right to:

  • Access - request a copy of stored data
  • Rectification - correct inaccurate data
  • Erasure - request data deletion ("right to be forgotten")
  • Restriction - limit data processing
  • Portability - receive data in a structured format
  • Objection - object to data processing

To exercise these rights, send an email to: contact@surge.ro. We will respond within 30 days.

8. Data Security

We implement technical and organizational measures to protect your data:

  • Encrypted HTTPS connection (TLS 1.3)
  • Secure database with authentication
  • Restricted access to personal data
  • Regular backups

9. Policy Changes

We reserve the right to update this policy. Changes will be published on this page with the update date.

10. Contact

For questions about data protection:

Email: contact@surge.ro
Address: Surge Studio SRL, Bucharest, Romania