STATUTORY REGISTER // EU & GDPR

LEGAL & COMPLIANCE

REGISTERED ENTITY: CRAFTIVOLAB SRL • FISCAL REG: RO4920194 • CLINCENI, ILFOV, ROMANIA

// POLICY DIRECTORY

Data Protection Officer:

Location: Ilfov, Romania

01 // PRIVACY POLICY (GDPR COMPLIANCE)

EU 2016/679

This Privacy Policy outlines how CraftivoLab Studio SRL (registered at 077060, Str. Principală nr. 258, Clinceni, Jud. Ilfov, Romania; Email: [email protected]) processes, stores, and protects personal and corporate data collected via our digital properties.

1. Data Controller Identification

CraftivoLab Studio SRL acts as the Data Controller in accordance with the European Union General Data Protection Regulation (Regulation (EU) 2016/679). For inquiries concerning data subject rights, access requests, or deletion notices, contact our compliance officer at [email protected].

2. Information Collection Categories

Identification Information: Name, professional corporate email, telephone contact, entity name.
Technical Telemetry: IP address, browser user-agent tokens, referrer headers, and edge performance metrics.
Billing Information: Payment tokens processed exclusively through Stripe under PCI-DSS Level 1 encryption. No plaintext credit card data is stored on our servers.

02 // TERMS OF SERVICE

REV 2026.1

By commissioning architectural services or purchasing subscription retainers from CraftivoLab, the client agrees to be bound by the following commercial terms and delivery criteria.

1. Intellectual Property & Transfer of Title

All source code, design assets, database schema definitions, and custom software created for the client remain the proprietary work of CraftivoLab until final invoice payment is settled in full. Upon receipt of complete settlement, 100% of title and worldwide copyright are irrevocably assigned to the commissioning entity.

2. Service Level Agreement (SLA) Commitments

CraftivoLab maintains a 99.98% availability guarantee on all managed edge deployments. Critical severity incidents receive engineer intervention within 60 minutes of automated telemetry alert dispatch.

03 // COOKIE COMPLIANCE DIRECTIVE

ePrivacy

We utilize strictly necessary technical session tokens and privacy-preserving aggregate telemetry. We do not engage in third-party behavioral retargeting or cross-platform data brokerage.

TOKEN NAME	PURPOSE	EXPIRATION
craftivolab_session	Cryptographic CSRF and session integrity	Session End
craftivolab_cookies_accepted	Consent choice persistence	365 Days

04 // REFUND & MILESTONE SETTLEMENT

CLAUSE 4.8

Initial discovery and deposit retainers are 100% refundable within 5 business days of engagement kickoff if milestone specification agreements are not mutually ratified. Once design approval and development commence, refunds are pro-rated against delivered milestone artifacts.