Skip to content
Legal01

Privacy Policy

Privacy, without the fog.

What we collect, why it is needed, who may receive it, and the choices you keep — written for people, not just compliance files.

Updated 7 Sep 20266 min read

Collection

Only what is relevant

Contact details you send, limited operational logs, and data needed for client or protected-content workflows.

Tracking

Only with your consent

Google Analytics and Meta Pixel run only after you accept them in the cookie panel. No hidden profiling.

Control

Your rights stay yours

You can ask what we hold, request a correction or deletion, restrict processing, object, or request portability where applicable.

Who is responsible for this website

HexagonX is the public-facing identity of RAW BTL SRL.

Data controller

Legal entity

RAW BTL SRL, registered in Romania under CUI 36450375 and Trade Register no. J40/11183/2016.

Registered office

Contact point

47 Mehadia Street, Bucharest, Romania. Privacy requests can be sent to contact@hexagonx.ro.

We keep the data surface deliberately small: enough to operate the website, answer enquiries, protect restricted content, and support legitimate client work.

What we use — and why

The purpose comes first. We do not collect personal data simply because we can.

Enquiries

Contract steps / legitimate interest

Name, company, email, and — if you choose to give them — phone number, type of event, event date, indicative budget, and anything else you include in your message, whether you write to us by email or through the contact form. We use them to answer you and to assess or deliver a project. Contact-form requests are stored in our request database together with the page they were sent from and the time of sending, and are read only by the HexagonX team. The form has a hidden anti-spam field; automated submissions that fill it are discarded without being stored.

Website operation

Legitimate interest

Limited device, browser, request, error, security, and media-delivery data used to keep the service available, diagnose faults, and prevent misuse.

Portfolio & access

Contract / legitimate interest

Project media and metadata supplied through client work, plus access checks when restricted material is opened. Public portfolio material remains visible as editorial content.

Legal records

Legal obligation / claims

Records that must be retained for accounting, compliance, dispute resolution, or the establishment and defence of legal claims.

Who may receive data

We use selected providers for hosting, authentication, media delivery, security, and operational support. They receive only the information needed to provide their service and must handle it under applicable data-protection obligations.

The Contact section includes an interactive OpenStreetMap map. Requests to the map provider are independent from the site's essential cookie notice.

External websites are reached only when you choose to follow a link. Their own privacy terms apply after you leave HexagonX. We do not sell personal data. Analytics and advertising tools receive data only if you have accepted them, as described below.

If a provider processes data outside the European Economic Area, we use an available lawful transfer mechanism and appropriate safeguards where required.

Analytics and advertising — only with your consent

To understand what works on the site and to measure our campaigns, we use two tools. Neither runs before you accept it in the cookie panel.

The legal basis is your consent (Article 6(1)(a) GDPR). You can withdraw it at any time from “Cookie preferences” in the footer of any page; withdrawal does not affect processing carried out before it.

Google and Meta may process data in the United States. Both are certified under the EU-U.S. Data Privacy Framework, and the contracts include the European Commission’s standard clauses.

Google Analytics 4

Provided by Google Ireland Ltd. Collects aggregated data about pages visited, where the visit came from and interactions. The IP address is truncated inside the EU; we do not try to identify you.

Meta Pixel and Google Ads

Provided by Meta Platforms Ireland Ltd. and Google Ireland Ltd. They measure whether an ad led to a message sent through the contact form and let us show ads to similar audiences. Meta may link the visit to your account if you are signed in.

Retention periods for each cookie are listed in the Cookie Policy.

How long we keep it

Retention follows the reason for the data, not an unlimited archive.

Enquiries & projects

Contact-form requests are kept for two years from the day they are sent, then deleted. Where an enquiry becomes a project, the related data is kept for the time needed to develop or deliver the work, maintain the business relationship, and meet related legal or contractual requirements.

Technical records

Only while useful for security, fault diagnosis, service recovery, and accountability, unless an incident or legal duty requires longer retention.

End of purpose

Data is deleted or anonymised when it is no longer needed, unless a legal obligation or active legal claim requires it to be retained.

Your GDPR rights

Depending on the processing and its legal basis, you may exercise the following rights.

Send your request to contact@hexagonx.ro. We may ask for enough information to verify your identity. We aim to respond without undue delay and, in principle, within one month.

If you believe your rights were not respected, you may also contact the Romanian supervisory authority, ANSPDCP, or seek a judicial remedy.

  • Be informed and request access to your personal data.
  • Correct inaccurate or incomplete information.
  • Ask for deletion when the legal conditions are met.
  • Restrict processing in specific circumstances.
  • Receive or transfer data where portability applies.
  • Object to processing based on legitimate interest.

Security & changes

Operational systems are limited to authorised users and protected through authentication, access controls, logging, and monitoring where appropriate. No internet service can promise zero risk, so data minimisation remains one of our core safeguards.

We may update this notice when the website, providers, or legal requirements change. The date at the top always identifies the version currently in effect.

Please do not send unnecessary sensitive information through ordinary email or project enquiries.

Direct line

A privacy question should not need a legal dictionary.

Tell us what you need. We will route the request to the right person and respond as clearly as possible.

Email us
Back to top