Privacy Policy
Data privacy and your trust are important to Metropolis, where we respect the privacy and right to the protection of personal data of our visitors, customers, potential customers, and collaborators under applicable law.
We take this matter seriously, and through this policy, we aim to inform you about the collection and use of your data, ensure transparency regarding incidental data processing, and have the right to decide for yourself how the information you provide us is used.
As of May 25, 2018, the legal basis is Regulation (EU) 679/2016 on the protection of individuals concerning the processing of personal data and on the free movement of such data ("Regulation") and secondary legislation.
We also mention that we will use all the data and documents you transmit to us exclusively for the purpose for which they were sent, by the information provided in this policy and applicable law.
Name and contact details of the person responsible:
Metropolis S.R.L.
Unique Registration Code: 16926998
Iasi County, City of Iasi, Tudor Neculai Alley no. 17, bl. 943, sc. E, floor 3, ap. 13
Postal Code 700734
Email address: dragos@metropolis.studio
Phone: +40 747 409 171
Principles of Personal Data Processing
"Personal data" refers to all information regarding an identified or identifiable natural person. An identifiable natural person can be identified directly or indirectly, especially by an identifier such as a name, an identification number, location data, an online identifier, or one or more specific factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of the natural person. These include names, addresses, telephone numbers, and email addresses, for example.
We collect, process, and/or use personal data only if you have voluntarily provided it to us, for example when establishing, entering content, or making changes in the contractual relationship between you and Metropolis or when signing up for personalized services or when submitting a request through the website. Your data will also be used only with your prior consent to send you advertising materials and materials for market research.
Under the provisions of the Regulation, Metropolis undertakes to process personal data collected through the website https://metropolis.studio/ under the following principles:
-
i. Legality, fairness, and transparency - data are processed lawfully, fairly, and transparently to the data subject;
-
ii. Purpose limitation - data are collected for specified, explicit, and legitimate purposes and are not further processed in a manner incompatible with those purposes;
-
iii. Data minimization - data are adequate, relevant, and limited to what is necessary concerning the purposes for which they are processed;
-
iv. Accuracy - data are accurate and up-to-date, and when inaccurate, will be deleted or rectified without delay, considering the purposes for which they are processed;
-
v. Storage limitation - data are kept in a form that permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes subject to implementation of the appropriate technical and organizational measures;
-
vi. Integrity and confidentiality - data are processed in a manner that ensures appropriate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, by taking appropriate technical and organizational measures;
-
vii. Accountability - data will be processed in compliance with the aforementioned principles, and Metropolis assumes responsibility for demonstrating compliance with processing.
What data do we collect and how do we process it?
A. Contact
To communicate with you and respond to your requests, in the Contact section, we collect data such as name, surname, email address, and phone number, which will be processed internally by colleagues able to provide you with the most suitable responses to your requests. The collected data will be kept for different periods, depending on the content of your request and the specific need to hold this data. The legal basis for processing personal data is Metropolis' legitimate interest in communicating with you or performing the concluded contract.
Mandatory fields are marked with an asterisk. Fields without an asterisk are optional.
A. Browsing the website
To improve your browsing experience on our website, we use functional cookies and other similar technologies, with local storage, to collect information about how you use the site and to provide you with its features. The legal basis for processing is your express consent expressed by actively checking the acceptance box displayed in the cookie usage balloon when accessing the site.
We collect the following information:
-
An anonymous cookie ID, which cannot be correlated with your IP address;
-
The operating system, web browser you use, and screen resolution setting;
-
The date and time of your visit;
-
The websites you visited from our website;
-
The website from which you visit us.
For more information, please visit the Cookie Policy section.
Voluntary provision of personal data
If you provide us with data voluntarily, e.g., in forms, and this data is not necessary for fulfilling contractual obligations, we will process the data on the assumption that the processing and use of the data are in your interest
Storage of your data
Your data is stored on specially protected servers. Through appropriate technical and organizational means, the data on these servers are protected against loss, destruction, unauthorized access, alteration, or sharing by unauthorized persons. Access to your data is only allowed to a limited number of authorized persons. Such persons are responsible for technical, business, or editorial support of the servers. However, despite regular checks, it is not possible to guarantee complete protection against all possible risks.
The transfer of the Metropolis website and your data records over the internet is generally unencrypted. Therefore, the possibility of viewing and/or accessing data transferred by third parties cannot be excluded. Metropolis recommends considering this when deciding whether to send data over the internet and what data to transmit in this way.
Metropolis stores your data only for as long as storage is necessary to achieve the purpose for which it was collected or processed. To the extent necessary, Metropolis stores your data for the entire duration of the business relationship. This includes, in particular, the initiation and execution of the Contract.
Additionally, Metropolis stores your data to the extent and for as long as it is necessary to fulfill contractual or legal obligations. Thus, we process your data to fulfill commercial or tax legal obligations regarding the provision of supporting documents and data retention.
If the data is no longer necessary for fulfilling contractual or legal obligations, it will be regularly deleted, unless Metropolis has obtained your consent for the processing of your data and/or further processing is necessary based on Metropolis' legitimate interests, e.g., for customer recovery, for defense against legal claims in case of disputes.
Receipt and transmission of data
As a general rule, the data you provide us with is not transmitted to third parties. In particular, your data is not transmitted to third parties for advertising purposes. However, Metropolis may use service providers to operate these web pages or other Metropolis products. Personal data may come into the possession of a service provider in this context. We carefully select our service providers, especially concerning data confidentiality and security, and take all necessary measures by privacy laws to ensure the legitimate processing of data.
We do not transfer your data to third countries outside the EU and EEA (European Economic Area).
Links to other internet pages
The website https://metropolis.studio contains references (links) to other internet pages, such as social media pages (e.g., Facebook, Instagram, etc.). This policy is valid only for the page https://metropolis.studio. Please consider the relevant data protection policy for each of these websites to which you are redirected from the page https://metropolis.studio.
We do not assume any responsibility for foreign content made available through links and marked as such. Metropolis is not liable for illegal content, presentation of incorrect or incomplete information, as well as for damages arising from the use or non-use of the information contained on these websites.
What rights do you have regarding your data
i. Right of access to data
The data subject has the right to obtain from Metropolis confirmation as to whether personal data concerning him or her are being processed and, if so, a copy of the personal data undergoing processing. For any further copies requested by the data subject, Metropolis may charge a reasonable fee based on administrative costs.
ii. Right to rectification of data
The data subject has the right to obtain from Metropolis without undue delay the rectification of inaccurate personal data concerning him or her.
Taking into account the purposes for which the data was processed, the data subject has the right to obtain the completion of incomplete personal data, including by providing a supplementary statement.
iii. Right to the erasure of data
The data subject has the right to obtain from Metropolis the erasure of personal data concerning him or her without undue delay when one of the situations provided for in the Regulation occurs, allowing the refusal of the erasure request.
iv. Right to restriction of processing
The data subject has the right to obtain from Metropolis restriction of processing in the following cases:
-
The data subject disputes the accuracy of the data for a period allowing Metropolis to verify the accuracy of the data;
-
The processing is unlawful, but the data subject opposes the erasure of personal data, requesting instead the restriction of their use;
-
Metropolis no longer needs personal data for processing purposes, but the data subject requests them to establish, exercise, or defend legal claims.
-
The data subject has objected to processing, for the period during which it is verified whether Metropolis' legitimate interests prevail over those of the data subject.
v. Right to data portability
The data subject has the right to receive the personal data concerning him or her and which he or she has provided to Metropolis in a structured, commonly used, and machine-readable format and has the right to transmit such data to another controller without hindrance from the controller to whom the personal data have been provided, where:
-
processing is based on consent;
-
processing is based on a contract; or
-
processing is carried out by automated means.
vi. Right to object
At any time, the data subject has the right to object, on grounds relating to his or her particular situation, to the processing of his or her data, including profiling based on those provisions, unless there are contrary legal provisions.
When personal data processing is aimed at direct marketing, the data subject has the right to object at any time to the processing of personal data concerning him or her for such marketing, including profiling, to the extent that it is related to such direct marketing.
vii. Right not to be subject to a decision based solely on automated processing
The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly, affects him or her to a significant extent, having the right to request and obtain:
-
the withdrawal or cancellation of any decision that produces legal effects concerning him or her, adopted solely based on automated processing intended to evaluate certain aspects of his or her personality, such as professional competence, credibility, behavior, or other similar aspects;
-
the review of any other decision made concerning him or her, which significantly affects him or her, if the decision was made solely based on processing that meets the conditions set out above.
viii. Right to appeal to the courts and/or the National Authority for the Supervision of Personal Data Processing
How to exercise your rights
You can exercise the rights mentioned above through a written request, sent online to the email address: dragos@metropolis.studio
To avoid providing information to unauthorized persons, according to the internal procedure for resolving such requests, the applicant may be asked for additional information to verify his or her identity/interest/right to represent.
The request will be processed within one month of receipt. This period may be extended by two months when necessary, taking into account the complexity and number of requests, with Metropolis providing information on any such extension within one month of receiving the request, presenting the reasons for the delay.
If the data subject submits a request electronically, the information is provided electronically where possible, unless the data subject requests another format.
If no action is taken regarding the data subject's request, Metropolis will inform the data subject, without delay and within one month of receiving the request, of the reasons for not taking action and of the possibility of filing a complaint with a supervisory authority and bringing judicial proceedings.
The information provided is free of charge. If requests from a data subject are unfounded or excessive, especially due to their repetitive nature, Metropolis may:
-
charge a reasonable fee considering the administrative costs for providing information or communication or for taking the requested measures;
-
refuse to comply with the request.
Security measures regarding data processing
All information collected through the website https://metropolis.studio/ is processed by the above-mentioned principles, to which technical and organizational measures are added, allowing traceability and transparency regarding the processing of your data. Regarding the delegates through whom personal data can be processed, Metropolis takes necessary measures to ensure that they meet legal requirements regarding data protection and comply with relevant standards, and access to data is restricted to a limited number of persons who need it for the execution of contractual obligations.
In principle, accessing databases and files/platforms requires authentication through ID and password, and the servers on which they are stored are located in Romania and properly managed.