Legal pages
MC · LEGALPrivacy Policy
Last updated on: September 5, 2026Volant Concept EVG SRL, trading as Microcut Studio ("we", "us"), respects your privacy. This policy explains what personal data we collect through microcut.studio, why, and what rights you have over it under the EU General Data Protection Regulation (GDPR).
Who we are
Data controller: Volant Concept EVG SRL, trading as Microcut Studio
Registered address: Strada Ovid Densusianu, Bloc CS9, Scara A, Ap. 4, 110317 Mun. Pitești, Argeș, Romania
Trade register number: J03/2750/2022
Tax ID (CUI): RO46949675
Contact: [email protected]
What data we collect
- Enquiry / quote request data. When you submit our intake form (hosted directly on microcut.studio, with submissions stored in Airtable), we collect whatever you enter — typically name, email, and details about your release (format, run size, timeline). The page you submitted the form from is also recorded as a hidden field.
- Email correspondence. If you email us directly, we keep that correspondence for as long as needed to handle your order and for a reasonable period afterward for accounting and dispute purposes.
- Analytics data. With your consent (see our Cookie Policy), we use Google Analytics 4 and Microsoft Clarity to understand how visitors use the site — pages viewed, approximate location (country/region level), and device type. This data is pseudonymous and not tied to your name unless you also submit the enquiry form.
Why we process it (legal basis)
- Enquiry data — to respond to your request and, if you proceed, to perform a contract with you: Article 6(1)(b) GDPR (performance of a contract, or steps taken at your request prior to entering one).
- Analytics data — based on your consent via the cookie banner: Article 6(1)(a) GDPR (consent). You can withdraw consent at any time by clearing your cookies or using your browser's tracking settings.
- Accounting records (invoices, correspondence tied to a paid order) — to comply with Romanian legal retention obligations: Article 6(1)(c) GDPR (legal obligation).
- Fraud prevention and basic security logging (e.g. abnormal form-submission patterns) — Article 6(1)(f) GDPR (legitimate interest), weighed against your rights; you can object at any time by contacting us.
Processors we use
We use the following third parties to process data on our behalf. Each acts under its own data processing terms:
| Processor | Purpose |
|---|---|
| Airtable, Inc. | Stores and manages submissions from our intake form (current) |
| Google LLC (Google Forms) | Previously used for our intake form; kept in reserve, not currently receiving submissions |
| Resend | Sends us an email notification when you submit the intake form |
| Telegram | Sends us an instant chat notification when you submit the intake form |
| Google LLC (Google Analytics 4) | Site usage analytics (with consent) |
| Microsoft Corporation (Clarity) | Session recordings / heatmaps (with consent) |
| Cloudflare, Inc. | Website hosting and delivery (Cloudflare Pages) |
| Namecheap, Inc. (Private Email) | Business email hosting |
Who else sees your data
We don't sell your data. Beyond the processors listed above, it may also be visible to:
- The pressing plant handling your order — only the details needed to fulfil your specific order (e.g. shipping address for drop-ship delivery), never your full enquiry history.
International transfers
Some of our processors (Airtable, Inc., Google LLC, Microsoft Corporation, Resend) are US-based and may process data outside the European Economic Area. Such transfers rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework and/or Standard Contractual Clauses, where the receiving company is certified or bound by them.
How long we keep it
| Data | Retention |
|---|---|
| Enquiries that don't become an order | 24 months from last contact, then deleted |
| Invoices and accounting records | 10 years, per Romanian fiscal record-keeping law |
| Order correspondence (non-financial) | 5 years from order completion, for warranty/dispute purposes |
| Analytics data (GA4 / Clarity) | Per each provider's default window, typically 14 months or less |
The retention periods above are reasonable defaults for a business of this size — confirm the 10-year accounting figure with your accountant, as it follows general Romanian fiscal law but can vary by record type.
Your rights
Under GDPR, you can ask us to: access the data we hold about you, correct it, delete it, restrict how we use it, or receive a copy in a portable format. Email [email protected] to exercise any of these. You also have the right to complain to your national data protection authority, or Romania's ANSPDCP.
Changes to this policy
We'll update this page if what we collect or why changes, and update the date at the top.