Privacy & GDPR
How enquiries, project relationships and website usage data are handled when you contact or work with LiMiT.agency.
Last reviewed: 25 October 2026 · LiMiT.agency
Who is responsible for your data
LiMiT.agency is a service-facing website associated with two Romanian companies: LIMIT SRL and LIMIT MARKETING SRL. Both can contract and invoice clients. Full legal identification and address details are published in the Legal Notice.
Each company is responsible for personal data processing for which it determines the purposes and means. An enquiry may be routed to the company suited to the requested service; the company handling the subsequent proposal, contract or invoice will be identified in the relevant correspondence. Where the two companies determine a processing activity jointly, GDPR rules on joint control apply.
For privacy questions and requests, contact [email protected] or write to the registered address identified in the Legal Notice.
Information we process
- Enquiries: name, business, email, telephone, website URL, project description and messages you voluntarily send.
- Projects and contracts: proposals, approvals, correspondence, billing and company representative details, project files and support requests.
- Technical and security information: IP address, browser and request metadata, timestamps, server error reports and anti-abuse information generated while using the website.
- Optional analytics and communications: information associated with any consented measurement or mailing features enabled on the website.
Do not send passwords, secret keys or special-category personal data in general enquiry forms. We will identify secure transfer methods if such access is genuinely needed for a project.
Purposes and legal bases
| Purpose | GDPR legal basis |
|---|---|
| Respond to enquiries and prepare requested proposals | Pre-contractual steps where applicable; legitimate interests in business communications otherwise |
| Deliver agreed work, provide support and manage accounts | Performance of a contract; legitimate interests for contact with business representatives |
| Issue invoices, keep legally required records and meet tax requirements | Legal obligation |
| Prevent abuse, investigate security events and protect the website | Legitimate interests in service integrity and security, subject to balancing |
| Send optional marketing communications or use non-essential tracking | Consent where legally required; withdrawal remains available |
Recipients, service providers and transfers
Data can be made available to authorised personnel and, where relevant, the company handling your engagement. Service providers may assist with hosting, website maintenance, email delivery, spam protection, analytics where enabled, document handling, accounting and contractual delivery. Access is limited to the services required.
Some service providers or systems may process data outside the European Economic Area. Where a transfer is subject to GDPR Chapter V, an applicable transfer mechanism and safeguards must be used. Details of a specific provider or transfer can be requested using the contact above.
How long information is kept
We retain data only as long as needed for the purpose collected: enquiries for a reasonable follow-up and records period; contractual correspondence for delivery, warranty or claims management; accounting and tax documents for periods required by law; and technical logs for security and troubleshooting as necessary. Retention also depends on ongoing disputes, legal duties and relevant limitation periods.
Where processing relies on consent, withdrawal stops further consent-based use, subject to records necessary to demonstrate compliance. Data may be anonymised or deleted once no longer required.
Your data protection rights
Depending on the circumstances, you may request access, correction, erasure, restriction, portability or object to processing. You may withdraw consent without affecting earlier lawful processing. We may need information to verify identity before processing a request.
Send requests to [email protected]. You may also complain to Romania’s data protection authority, ANSPDCP, or another competent supervisory authority.
Cookies, forms and third-party content
The website may rely on technically necessary browser storage and may offer optional analytics or embedded media. Optional tracking should operate only with the applicable consent. Read the Cookie Policy for categories, choices and withdrawal options.
Links to third-party services are governed by those providers’ notices. Where our work involves personal data on a customer’s system, data-processing terms should be agreed as part of the engagement.
Policy changes and contact
We may revise this policy when services, suppliers or legal requirements change. Material changes will be reflected in the updated publication date. For any privacy query, contact [email protected].