Legal

GDPR & Your Data Rights

Last updated: 8 July 2026

Alkeme Design SRL is committed to protecting your personal data in line with the EU General Data Protection Regulation (GDPR) and Romanian data protection law. This page explains your rights and how to exercise them. For full detail on what we collect and why, see our Privacy Policy.

Data controller

Alkeme Design SRL, registered office at Str. Octav Doicescu nr. 2, ap. 6, Cisnădie, Sibiu County, Romania. Contact for all data requests: privacy@alkeme.design.

Your rights under the GDPR

Right of access: to know what personal data we hold about you and to receive a copy.
Right to rectification: to have inaccurate or incomplete data corrected.
Right to erasure ("right to be forgotten"): to have your data deleted where there is no lawful reason for us to keep it.
Right to restriction: to limit how we process your data in certain circumstances.
Right to data portability: to receive your data in a structured, machine-readable format, or have it sent to another controller.
Right to object: to object to processing based on our legitimate interests, and to direct marketing at any time.
Right to withdraw consent: where we rely on your consent, you can withdraw it at any time.

How to exercise your rights

Send a request to privacy@alkeme.design. We will respond within the timeframe required by law (generally one month) and free of charge, except where the law allows a fee for excessive or repeated requests. We may ask you to verify your identity before acting on a request.

Legal bases we rely on

We process personal data on the bases of contract, legitimate interests, consent, and legal obligation, as described in our Privacy Policy.

International transfers

Where personal data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place, such as standard contractual clauses.

Complaints

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), or with the authority in your country of residence. In the United Kingdom, that is the Information Commissioner's Office (ICO, ico.org.uk), under the UK GDPR and the Data Protection Act 2018.

This document is provided for information and should be reviewed by a qualified legal professional before it is relied upon.