Privacy policy

Data you may provide

The contact flow may include your name, business sector, selected service, colour preferences, project description, features, phone number and email address. By phone, email or WhatsApp, you may choose to provide other information needed for the discussion.

Do not send passwords, banking details, identity documents or other sensitive information that is unnecessary for your request through the form or messaging channels.

How the form works

Your details remain in your browser while you fill in the form. When you select “Send request”, your request is saved in CERB's protected database so it can be viewed in the administration interface and to prevent loss or duplicate submissions.

After saving, the website displays confirmation that your request was registered. CERB uses the contact details you provided to respond. The form does not open WhatsApp or automatically send a message through that application.

Purpose and legal basis for processing

The data you send is used to respond to your request, clarify the project, prepare a quote and, if you choose to proceed, take the steps needed to work together. Processing is based on pre-contractual measures requested by you and, where necessary, legitimate interests in security, organising correspondence and defending rights.

External services and technical data

When you choose WhatsApp, email, a phone call, Facebook or Instagram, you leave this website and use the respective provider's service under its policies. Hosting and database providers may process technical data and the information needed to deliver, store and secure your request.

The website currently has no active advertising, profiling or marketing analytics tools and does not make automated decisions about visitors.

Connecting Google in CERB Bookings

For online sessions, the professional can optionally connect their own Google Account in Settings. This connection is separate from signing in to CERB. We receive the verified email address, Google Account identifier, granted permissions and technical credentials needed for the connection, not the Google password.

The calendar.app.created permission allows the app to create a secondary calendar named “CERB · Programări” and manage events in calendars created by the app. We do not request access to read pre-existing personal calendars. The superadmin and other professionals are not given access to them; sessions do not use a shared CERB Google Account.

Data used for Calendar and Google Meet

For an online booking with an automatic link, we send Google the session start and end times, time zone, a generic title and technical identifiers to create or update the event and a distinct Meet link. The event does not include the client's name or email address, the professional's notes or financial data. Google data is used for the connection and session management, not for advertising.

Google processes calendar and conference data under its own policies. The platform releases the Meet link to the client through the booking's private page after the professional starts the session. The connected Google Account and Google's rules can affect participant access.

Storage and disconnection of Google access

The connection and its links to the calendar and booking are stored in private tables in the Bookings database. The Google refresh credential is encrypted on the server and bound to the professional; it is not displayed in the administration interface.

Disconnecting in Settings removes the local credential and stops future use of that connection; a request already sent to Google may still complete. It does not automatically delete existing Google calendars or events or revoke the permission granted in the Google Account. You can separately remove CERB's access in your Google Account connections. Revoking access does not automatically delete data already created in Google.

Retention period

Unsaved information disappears when the form is closed or reset. Saved requests and messages sent through WhatsApp, email or other channels are retained only as long as necessary for responding, preparing quotes, working together, securing records and meeting applicable legal obligations. If no collaboration begins, data is deleted once it is no longer needed to manage the request or defend a right.

Your rights

You may request information about data processing, access, correction, deletion, restriction or objection, within the limits provided by law, by writing to contact@cerbstudio.net. You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing.

Contact and data requests

For questions, corrections or requests to delete submitted data, write to contact@cerbstudio.net. CERB may request only the information necessary to verify your identity before responding to a personal data request.