Privacy policy

1. Who we are (data controller)

The data controller is PHARMA CAMP MARKETING SRL, company registration number (CUI) RO43040777. "the light" is a brand of PHARMA CAMP MARKETING SRL, under which we operate thelight.marketing and the services described on it.

You can reach us at hello@thelight.marketing and by phone at +40 759 865 823.

If you have any questions about this policy or your data, write to us at the address above.

2. What data we collect and why

Contact form: name, email address, phone number and chosen subject. We use them exclusively to answer your request and prepare an offer, at your request. Legal basis: steps prior to entering into a contract (Art. 6(1)(b) GDPR).

Technical logs: like any website, servers may record your IP address, browser and visited pages, for security and operation. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

We do not collect special categories of data and we do not use your data for profiling or automated decision-making.

3. Cookies

We use strictly necessary cookies and similar technologies: to run the site and for the anti-spam verification of the contact form (Cloudflare Turnstile). Under EU law, strictly necessary cookies do not require consent.

On your first visit we show a banner where you can accept all cookies or only the necessary ones. Your choice is stored in your browser (localStorage) and can be changed by clearing the site's data in your browser.

We currently do not use analytics or marketing cookies. If we introduce them, we will ask for your consent beforehand and update this policy.

4. Who has access to the data

Contact form data is stored in our platform's cloud infrastructure (Lovable Cloud) and emailed to us. For anti-spam verification, the request passes through Cloudflare Turnstile, which may process technical data under its own privacy policy.

We do not sell or rent your data to third parties. Access is limited to the the light marketing team and the technical providers mentioned, under processing agreements.

5. How long we keep data

Contact form messages are kept for as long as needed to handle your request and, afterwards, for a reasonable record-keeping period. You can ask for their deletion at any time.

6. Your rights

Under the GDPR, you have the following rights:

• the right of access to your data;
• the right to rectification of inaccurate data;
• the right to erasure ("the right to be forgotten");
• the right to restriction of processing;
• the right to data portability;
• the right to object to processing;
• the right to lodge a complaint with your national data protection authority.

7. Security

We apply appropriate technical and organisational measures: restricted data access, encrypted connections (HTTPS) and anti-spam verification of forms.

8. Changes to this policy

We may update this policy when we change how we process data. The current version is always available on this page, with the date of the latest update.