Privacy Policy

Last updated: 17 August 2026 · Version 1.0

01Data Controller

S.C. RB PRODUCTION BOOKING&MEDIA S.R.L.
Registered address: Str. Stadionului nr. 1, Vadu Pașii, Buzău County, Romania
Tax ID (CUI): 41534839 · Trade Register: J10/1099/2019
Email: office@rbagency.ro

As an entity registered in Romania, the General Data Protection Regulation (EU) 2016/679 (GDPR) applies directly. The competent supervisory authority is ANSPDCP (Romanian National Supervisory Authority for Personal Data Processing).

02What Data We Collect and How

2.1 Contact form

When you submit the contact form on our website, we collect: first and last name, email address, phone number, type of service requested, and the content of your message.

2.2 Direct correspondence

Emails sent to office@rbagency.ro are received and stored in our email account. We process the data contained in the correspondence (name, email address, and any personal data included in the message).

2.3 Press accreditations

For events we organise, journalists and media representatives may request accreditation by sending their full name and the name of the media institution to our email. These data are used solely for verifying eligibility and managing access to the event and are not shared with third parties.

2.4 Photography and video recording at events

At events we organise or promote, we may photograph and/or film participants for the purpose of documenting and promoting our activities. Images and video footage may be published on our website, social media channels (Facebook, Instagram, TikTok), and in other promotional materials.

2.5 Newsletter and commercial communications

If you tick the optional checkbox on our contact form, we will send you offers and news from RB Agency by email. You may withdraw this consent at any time by emailing us.

03Purposes and Legal Bases

Processing activity	Purpose	Legal basis
Contact form	Responding to your enquiry and potential pre-contractual steps	Art. 6(1)(b) — necessary for pre-contractual measures; Art. 6(1)(f) — legitimate interest
Direct correspondence	Managing business communication	Art. 6(1)(b) / Art. 6(1)(f) — legitimate interest
Press accreditations	Event access management and security	Art. 6(1)(b) / Art. 6(1)(f) — legitimate interest
Photography / video at events	Documenting and promoting our events	Art. 6(1)(f) — legitimate interest
Newsletter / commercial emails	Sending promotional offers and news	Art. 6(1)(a) — consent

Right to object to legitimate interest processing: Where we process your data on the basis of legitimate interest (Art. 6(1)(f)), you have the right to object at any time, including to the use of photographs taken at events in which you appear. To exercise this right, please contact us at office@rbagency.ro.

04Recipients

Your data may be accessed by the following categories of recipients:

Hostinger International Ltd. — our web hosting and email infrastructure provider (servers located in the EU/EEA, GDPR compliant);
Authorised employees and collaborators of RB Agency who need access in order to respond to your enquiry;
Public authorities — when required by law (e.g., tax authorities, courts).

We do not sell or rent your personal data to any third party.

05International Transfers

Your data is processed within the European Economic Area (EEA). Hostinger's servers are located in the EU (Lithuania). No transfers to third countries take place.

06Retention Periods

Category	Retention period
Enquiries that did not lead to a contract	12 months from last contact
Active clients — correspondence and contract data	Duration of the relationship + 5 years (general prescription period under Romanian Civil Code)
Press accreditations	6 months from the event date
General correspondence	3 years
Newsletter subscriptions	Until consent is withdrawn
Event photographs / video	For as long as they are relevant for promotional purposes; you may request removal at any time

07Your Rights

Under GDPR, you have the following rights regarding your personal data:

Right of access (Art. 15) — to obtain confirmation and a copy of your data;
Right to rectification (Art. 16) — to correct inaccurate data;
Right to erasure (Art. 17) — to request deletion, where applicable;
Right to restriction (Art. 18) — to limit processing in certain circumstances;
Right to object (Art. 21) — including to processing based on legitimate interest;
Right to data portability (Art. 20) — to receive your data in a structured format;
Right to withdraw consent (Art. 7(3)) — at any time, without affecting the lawfulness of prior processing;
Right not to be subject to automated decision-making (Art. 22) — we do not carry out automated decision-making or profiling.

To exercise any of these rights, contact us at office@rbagency.ro. We will respond within one month (Art. 12 GDPR).

08Right to Lodge a Complaint

You have the right to lodge a complaint with the Romanian supervisory authority:

ANSPDCP — Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal
Bd. G-ral. Gheorghe Magheru nr. 28–30, Sector 1, 010336 București, România
Email: anspdcp@dataprotection.ro · www.dataprotection.ro

You also have the right to seek a judicial remedy before the competent courts.

09Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or destruction. Data submitted through our contact form is transmitted over HTTPS.

10Changes to This Policy

We may update this Privacy Policy from time to time. The current version and its effective date are always shown at the top of this page.

RB Agency · privacy policy v1.0 · 17 Aug 2026