PRIVACY POLICY

We value your privacy. This Privacy Policy explains how NovioArts collects, uses, and protects your personal data when you use our website www.novioarts.com and our digital services.

1. Company Information and Contact

2. Categories of Personal Data We Collect

We collect the following types of information:

2.1. Data Provided Directly by You

  • Your name
  • Email address
  • Billing information
  • Child's first name, age, and personalization details
  • Child's photograph(s) uploaded for video creation
  • Any messages or instructions entered in the order form

2.2. Data Collected Automatically

  • IP address
  • Browser type and operating system
  • Device information
  • Pages visited and time spent
  • Cookies and tracking technologies

3. Purpose and Legal Basis of Processing

3.1. To produce and deliver personalized videos

Legal basis: Performance of contract (Art. 6(1)(b) GDPR).

3.2. To process payments and issue invoices

Legal basis: legal obligation + performance of contract.

3.3. To respond to support inquiries

Legal basis: legitimate interest.

3.4. Marketing communications

Only with explicit consent.

3.5. Analytics and site improvement

Legal basis: legitimate interest.

4. Storage Period

  • Personalized materials (photos, data, generated videos): stored only as long as needed for delivery, but no longer than 30 days, after which they are permanently deleted.
  • Billing and accounting data: stored according to Romanian legal requirements.
  • Marketing data: until consent is withdrawn.

5. Data Disclosure

We do not sell or rent personal data.

Data may be shared only with:

  • hosting providers
  • email service providers
  • payment processors
  • IT and security partners
  • authorities, when required by law

All partners operate under GDPR-compliant contracts.

6. International Transfers

Data may be processed outside the EU (e.g., US-based hosting or email providers).

7. Your Rights Under GDPR

You have the right to:

  • access your data
  • request correction or deletion
  • restrict processing
  • portability
  • object to processing
  • withdraw consent at any time
  • lodge a complaint with a supervisory authority (e.g., ANSPDCP Romania)

8. Children's Data (COPPA & GDPR Compliance)

Our services are intended for adults.

We collect child-related data only when uploaded by a parent or legal guardian for the purpose of creating the personalized video.

We do not collect data directly from children.

9. Notice to US Residents (Including California – CCPA/CPRA)

This section applies only to residents of the United States.

9.1. Categories of data collected

We collect identifiers (name, email), personalization details, billing data, and photos uploaded voluntarily by the user.

9.2. Your rights under CCPA/CPRA (if applicable)

  • Right to know what data we collect
  • Right to request deletion
  • Right to correct inaccurate data
  • Right to opt-out of data sale (we do not sell personal data)
  • Right to non-discrimination

9.3. Sensitive data

We do not process sensitive data as defined under CPRA unless voluntarily submitted.

10. Cookies

We use cookies for site functionality, analytics, and (optionally) marketing.

11. Security Measures

We implement:

  • restricted access to personal data
  • secure storage and deletion procedures
  • monitoring against unauthorized access

12. Changes to This Policy

We may update this Privacy Policy when necessary. The latest version will always be posted on the Site.

13. Contact

For privacy-related requests: