This policy explains what personal data KEYFRAME24 SRL collects when you visit this website or work with us as a client, why we collect it, and what rights you have under the EU General Data Protection Regulation (GDPR) and Romanian data protection law.
1. Who is responsible for your data
The controller of your personal data is KEYFRAME24 SRL, Str. Toamnei nr. 4, Municipiul Bacău, Bacău County, Romania. CUI 53178565, Trade Register no. J2025100215002. You can reach us at hello@keyframe24.com for any question or request concerning your data.
2. What we collect
Server logs. Our hosting provider records standard technical information each time a page is requested: your IP address, the date and time, the page requested, the referring page, and your browser and operating system. These logs exist to keep the site running and secure.
Contact forms and email. If you write to us or submit a demo request, we receive your email address, name, company name, phone number (if provided), and the content of your message.
Client project material. When you engage us, you send us product data — CAD files, 3D models, drawings, photography, specifications, brand assets. This material may contain the names and contact details of people at your company. We treat it as confidential and, where it contains personal data, we act as your processor rather than as a controller.
Embedded video. Some pages embed video hosted by third-party platforms (YouTube and/or Vimeo). When a video loads, the platform receives your IP address and may set its own cookies. See our Cookie Policy.
What this site does not do. keyframe24.com has no user accounts, no login, no shopping cart, and no payment processing. We do not run advertising or behavioural tracking, we do not operate a newsletter, and we do not sell or rent personal data to anyone.
Planned services. We intend to offer the 360° viewer and configurator as a licensed, subscription-based service hosted on our own infrastructure. That will involve client accounts, billing data, and usage records for the embeds we host. None of it is in operation yet. Before it launches we will update this policy and notify anyone it affects; nothing described here applies retrospectively.
Production material featuring people. Some work involves footage, photography, or 3D scans in which people are identifiable — your staff on a site visit, talent on a shoot, crew on a virtual production stage. We keep this material only for the project it was made for, store it confidentially, and use it solely as the signed release for that person permits.
3. Why we collect it, and on what legal basis
- Operating and securing the website — legitimate interest (Art. 6(1)(f) GDPR). Server logs let us diagnose faults and identify abuse.
- Answering your enquiry — legitimate interest, or steps taken prior to entering a contract (Art. 6(1)(b) GDPR).
- Delivering a project you commissioned — performance of a contract (Art. 6(1)(b) GDPR).
- Using footage or scans in which a person is identifiable — that person’s consent, recorded in a release (Art. 6(1)(a) GDPR).
- Accounting and invoicing — compliance with Romanian tax and accounting obligations (Art. 6(1)(c) GDPR).
- Third-party video playback — your consent, given by choosing to play the video (Art. 6(1)(a) GDPR).
4. How long we keep it
Server logs are retained by our hosting provider for a short technical period and then rotated out. Email correspondence is kept for as long as the relationship is active and for a reasonable period afterwards so we can answer follow-up questions. Client project material, which currently reaches us by email or file transfer rather than through any upload on this site, is kept for the duration of the engagement and archived afterwards so that assets can be updated or re-rendered; you may ask us to delete your archive at any time, subject to any invoicing records we are legally required to retain. Accounting documents are kept for the period Romanian law requires.
5. Who else processes your data
We keep the number of third parties deliberately small. Currently:
- Hostinger — website hosting and server logs (EU-based infrastructure).
- Our email provider — receiving and storing correspondence.
- Resend — securely delivering emails sent through our contact forms.
- YouTube / Vimeo — only where a page embeds their video player, and only once it loads.
- Our accountant — invoicing and statutory bookkeeping.
Each of these acts under a contract that restricts them to processing data on our instructions. Where a provider processes data outside the European Economic Area, that transfer relies on the European Commission’s Standard Contractual Clauses or an adequacy decision.
6. Your rights
Under the GDPR you have the right to request access to the personal data we hold about you, to have inaccurate data corrected, to have data erased, to restrict or object to processing, and to receive your data in a portable form. Where processing rests on your consent, you may withdraw it at any time. Write to hello@keyframe24.com and we will respond within one month.
If you believe we have handled your data improperly you may lodge a complaint with the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), Bd. G-ral. Gheorghe Magheru 28-30, Bucharest — dataprotection.ro.
7. Children
This is a business-to-business website. It is not directed at children and we do not knowingly collect data from anyone under 16.
8. Changes to this policy
If we change how we handle data we will update this page and revise the date at the top. Material changes affecting active clients will be communicated directly.