Privacy Policy
Last updated: 17 July 2026
This Privacy Policy explains how personal data is collected, used and protected when you visit dragosenache.com, contact us or submit a project enquiry.
1. Who controls your data
The data controller is DRAGOS FOTO S.R.L., operating under the name DRAGOSENACHE.COM , based in Bucharest, Romania.
For questions or requests concerning your personal data, contact:
This Privacy Policy applies to the website dragosenache.com owned by DRAGOS FOTO SRL, with its registered office in Bucharest County, city of Bucharest, Str. Doamna Ghica, No. 20, registered with the Trade Register under no. J40/2656/2016, VAT no. RO35698322.
For any additional information regarding the processing of your personal data, please contact us at:
Email: hello@dragosenache.com
Website: www.dragosenache.com
2. Information we collect
When you submit the contact form or contact us directly, we may collect:
Your first and last name
Your email address
Your company or brand name
The type of project you are interested in
Your approximate budget
The intended use of the photography or video
The proposed shoot location and timeline
Information included in your project description
Briefs, moodboards, references or other files you upload
Information contained in subsequent email communications
When you visit the website, certain technical information may also be collected automatically, including your IP address, browser and device type, pages visited, referring website, approximate location and the date and time of your visit.
Please do not include sensitive personal information in your project description or uploaded documents unless it is strictly necessary.
3. How we use your information
We use your personal data to:
Respond to enquiries
Evaluate potential projects
Prepare estimates, proposals and production quotations
Communicate about availability, creative direction and deliverables
Arrange and fulfil photography or film services
Maintain the security and functionality of the website
Understand how visitors interact with the website
Meet accounting, tax and other legal obligations
Establish, exercise or defend legal claims
We do not sell or rent your personal information.
Your information will not be used for promotional emails or newsletters without your separate consent.
4. Legal grounds for processing
Depending on the situation, we process personal data because:
It is necessary to take steps requested by you before entering into a contract or to fulfil an existing contract
It is necessary for our legitimate interests, such as responding to business enquiries, operating the website and protecting our services
It is required to comply with legal obligations
You have provided consent, where consent is legally required, including for certain non-essential cookies or marketing communications
You may withdraw your consent at any time without affecting processing that occurred before withdrawal.
5. Cookies and website analytics
This website is hosted through Squarespace. Squarespace may use cookies and similar technologies required for the website to operate securely and correctly.
With your permission, non-essential cookies may also be used to understand website traffic and visitor interaction. You can accept, refuse or change your cookie preferences through the cookie banner and the Manage Cookies option available on the website.
Disabling certain cookies may affect some website functionality.
6. How your information is shared
Your data may be processed by trusted service providers that help us operate the website and manage enquiries, including:
Squarespace, as the website hosting and form service provider
Email and cloud-storage providers
Analytics and website-security providers
Professional advisers, accountants or legal representatives when necessary
Production collaborators when required for preparing or delivering your project
These providers may only process personal data as necessary to provide their services or comply with legal obligations.
We may also disclose information when required by law, a court order or a competent public authority.
7. International data transfers
Some service providers may process or store data outside Romania or the European Economic Area. Where required, these transfers are protected through appropriate legal safeguards, such as adequacy decisions or Standard Contractual Clauses approved by the European Commission.
8. How long we retain your information
Project enquiries that do not result in a collaboration may be retained for up to 24 months following the last communication, allowing us to respond to follow-up enquiries and maintain relevant business records.
If an enquiry becomes a project, related communications, contracts, invoices and other records may be retained for the duration of the professional relationship and afterwards for the periods required by Romanian accounting, tax and legal regulations.
Information will be deleted or anonymised when it is no longer necessary for the purposes for which it was collected.
9. Your rights
Within the limits and conditions provided by the GDPR, ou may have the right to:
to withdraw consent to the processing of data, without affecting the lawfulness of processing carried out prior to the withdrawal of consent;
of access to data in accordance with Article 15 GDPR;
to rectification of data in accordance with Article 16 GDPR;
to erasure of data in accordance with Article 17 GDPR;
to restriction of processing of data in accordance with Article 18 GDPR;
to data portability in accordance with Article 20 GDPR;
to object to processing, in accordance with Article 21 GDPR;
not to be subject to a decision based solely on automated processing, in accordance with Article 22 GDPR.
To exercise any of these rights, contacthello@dragosenache.com. We may need to verify your identity before completing a request. Without prejudice to your right to lodge a complaint, please contact us first and we promise to make every effortto resolve any dissatisfaction amicably.
You also have the right to complain to Romania’s National Supervisory Authority for Personal Data Processing:
ANSPDCP
28–30 Gheorghe Magheru Boulevard, District 1, Bucharest, Romania
www.dataprotection.ro
10. Data security
Reasonable technical and organisational measures are used to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. However, no internet transmission or electronic storage method can be guaranteed to be completely secure.
11. External links
This website may contain links to external platforms such as Instagram and Facebook. Those platforms process personal data according to their own privacy policies. This Privacy Policy does not cover how external websites or platforms handle your information.
12. Changes to this policy
This Privacy Policy may be updated when the website, services or legal requirements change. The latest version will always be published on this page, together with its most recent revision date.
13. Contact
For any questions about this Privacy Policy or the use of your personal data, contact: