Privacy Policy

1. Who we are

Muse and Co. is a brand operated by the data controller:

• Company: TRF INNOVATION LABS SRL
• Tax ID (CUI): 41756436
• Trade Register no.: J2019002376059
• Address: Str. Dunării nr. 22, 410027 Oradea, jud. Bihor, România
• Email: museandcoagency@gmail.com

2. What data we collect

• Contact form data: name, email address, phone number and the content of your message.
• Technical data processed automatically when you visit the site (IP address, browser type, pages requested), used by our hosting provider for security and delivery.
• Cookie preferences: your choice in the cookie banner, stored in your browser.
• Analytics and marketing data (e.g. Google Analytics, Meta Pixel), only if you accept these cookies.

3. Why we use your data and the legal basis

• To answer your request and send you an offer — steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
• To keep the website secure and working properly — our legitimate interest (Art. 6(1)(f) GDPR).
• To measure site traffic and the performance of our campaigns — your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

4. Who we share data with

We do not sell your data. We only share it with service providers that help us run the site, acting on our instructions:

• Cloudflare, Inc. — website hosting, content delivery and security.
• Web3Forms — delivering contact form messages to our email inbox.
• Our email service provider — receiving and storing your messages.
• Google and Meta — only if you accept analytics or marketing cookies.

5. International transfers

Some of these providers may process data outside the European Economic Area. In such cases transfers are based on the European Commission’s Standard Contractual Clauses or an adequacy decision (such as the EU–US Data Privacy Framework).

6. How long we keep data

• Contact form messages: for as long as needed to handle your request, and at most 2 years after our last interaction, unless a contract is concluded.
• Cookie preferences: up to 12 months, after which we ask again.
• Analytics data: according to the retention settings of the respective tool (maximum 14 months).

7. Your rights

Under the GDPR you have the right to:

• access the data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to processing;
• data portability;
• withdraw your consent at any time, without affecting prior processing.

8. Complaints

To exercise your rights, write to us at museandcoagency@gmail.com. We will reply within one month. You also have the right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP), B-dul G-ral Gheorghe Magheru 28-30, Sector 1, Bucharest — www.dataprotection.ro.

9. Cookies

Strictly necessary storage (your cookie preference) is always active. Analytics and marketing cookies are set only after you click “Accept” in the cookie banner. You can change your choice at any time using the “Cookie settings” link at the bottom of every page.

10. Changes to this policy

We may update this policy from time to time. The current version is always available on this page, with the date of the last update.