Privacy Policy

Last updated: 13 July 2026

This Privacy Policy explains how VITESTRA S.R.L. (“Vitestra”, “we”, “us”) collects, uses, and protects personal data when you visit our website, contact us, or use our products and services. We process personal data in accordance with the EU General Data Protection Regulation (“GDPR”) and applicable Romanian law.

1.Data controller

VITESTRA S.R.L. is the data controller for the personal data described in this policy. Our details are at the end of this document. For any privacy request, contact hello@vitestra.com.

2.What we collect

• Contact & enquiry data - name, email, company, and the content of messages you send us.
• Account & billing data - details needed to provide and bill for a product or engagement, including payment information handled by our payment provider.
• Product usage data - data you submit to a product and technical/usage logs needed to operate, secure, and improve it.
• Website technical data - IP address, device/browser information, and similar data collected automatically when you visit the site.

3.How we use it & legal bases

• To provide, operate, and support our products and services - performance of a contract (Art. 6(1)(b) GDPR).
• To respond to enquiries and communicate with you - legitimate interests (Art. 6(1)(f)).
• To take payment and keep accounting records - contract and legal obligation (Art. 6(1)(b) and (c)).
• To secure, maintain, and improve the Services - legitimate interests (Art. 6(1)(f)).
• Where required, with your consent (Art. 6(1)(a)), which you may withdraw at any time.

4.Payments

Payments are processed by Stripe, acting as an independent processor. When you pay, your card and payment details are collected and processed by Stripe under its own privacy policy; we do not store full card numbers on our systems.

5.Sharing & processors

We share personal data only with service providers that help us run the Services - such as our payment provider (Stripe), hosting and infrastructure providers, and analytics or communication tools - under appropriate data-processing agreements. We do not sell your personal data.

6.Hosting & fonts

Our website is hosted on Vercel. The site loads web fonts from Google Fonts, which may involve your browser connecting to Google servers and disclosing your IP address to Google for that purpose.

7.International transfers

Some providers may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

8.Retention

We keep personal data only as long as needed for the purposes above, to provide the Services, and to meet legal, accounting, and tax obligations, after which it is deleted or anonymised.

9.Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, and port your personal data, to object to certain processing, and to withdraw consent. To exercise these rights, email hello@vitestra.com. You also have the right to lodge a complaint with the Romanian supervisory authority (ANSPDCP) or your local data-protection authority.

10.Cookies

Our website uses only what is necessary to serve the site. If we introduce analytics or other non-essential cookies, we will request consent where required and update this policy.

11.Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure.

12.Changes

We may update this policy from time to time. The “Last updated” date above reflects the latest version.