GDPR & Cookies 

Privacy Notice (Article 13 GDPR) — Next Sunset Project SRL
Controller: Next Sunset Project SRL
Registration / Tax ID (CUI): 46334963

1) What personal data we process

• Identification & contact data: name, role, company, email, phone.
• Communication data: message content, attachments, timestamps, related metadata.
• Website & technical data: IP address, device/browser identifiers, cookie IDs, pages viewed, timestamps (see Cookie Policy).
• Engagement & billing data (when applicable): scope of work, deliverables, invoicing details, records required by law.
• Third-party contact details only if you provide them (e.g., colleagues you copy in emails).

2) Purposes and legal bases
                        
Purpose                                                  Legal basis



3) Recipients (categories)

• IT/service providers acting as processors (e.g., hosting, email, SITE123 website platform, cloud storage/backup, analytics if enabled) under data processing agreements.
• Professional advisers (legal, accounting) where necessary.
• Public authorities when required by law.We do not sell your personal data.

4) International transfers

We do not transfer personal data outside the EEA. If this changes, we will rely on a valid safeguard (e.g., adequacy decision or Standard Contractual Clauses) and update this notice accordingly.

5) Retention

• Enquiry/communication data: kept for up to 12 months after the last interaction.
• Contract/engagement & invoicing records: retained for the periods required by applicable law (e.g., accounting/tax).
• Security logs: up to 12 months unless a longer period is necessary to investigate incidents.
• Cookies & similar tech: as described in the Cookie Policy.Data are deleted or anonymised after the retention period expires.

6) Your rights

You have the rights to access, rectification, erasure, restriction, portability, objection, and not to be subject to a decision based solely on automated processing, as applicable.Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

7) Mandatory data & consequences

If you do not provide basic contact details, we may be unable to respond by email or enter into/perform a contract. Alternative channels (e.g., phone/post) may be available.

8) Security & confidentiality

We apply proportionate technical and organisational measures, restrict access on a need-to-know basis, and can sign NDAs on request. We do not use unlawful or deceptive collection methods.

9) Complaints

You may lodge a complaint with the Romanian Supervisory Authority (ANSPDCP) or with your local supervisory authority in the EEA.

10) Cookies & online identifiers

See our Cookie Policy for details on categories, providers, lifetimes, and your choices. Consent for analytics/marketing cookies can be managed via the Cookie settings panel.

Website: https://next-sunset.eu
Controller: Next Sunset Project SRL (CUI 46334963)
Privacy contact: alina@next-sunset.com

1) Scope

This policy explains what cookies we use on next-sunset.eu, why we use them, and how you can control them. We use only Essential cookies. For broader data processing information (rights, retention, recipients), see our Privacy Notice.

2) What are cookies?

Cookies are small text files stored on your device by your browser when you visit a website. They help the site function securely and reliably. Cookies do not run programs and cannot access information on your hard drive.

3) Cookies we use (Essential only)

We use Essential cookies required for core functionality, security, load balancing, and—where applicable—storing your cookie choices. These cookies do not require consent under GDPR/ePrivacy because the service cannot work properly without them.Legal basis: Art. 6(1)(b) GDPR (performance of a service you request) and/or Art. 6(1)(f) GDPR (our legitimate interest in operating a secure website).
We do not use Analytics, Functionality, or Marketing cookies.

4) What data may be processed via cookies

Depending on implementation, Essential cookies may process online identifiers (e.g., session ID, anti-CSRF token), and preference state (e.g., your cookie choice). These are limited to what is strictly necessary for the site to work.

5) Retention

• Session cookies are deleted when you close your browser.
• Persistent essential cookies (e.g., to remember your cookie preference) remain until their set expiry or until you delete them in your browser.

6) Managing cookies

Because we use only Essential cookies, disabling them in your browser may affect core functionality. You can delete or block cookies via your browser settings (Chrome, Firefox, Safari, Edge). See your browser’s Help section for instructions.

7) International transfers

We do not transfer personal data outside the EEA through cookies. If this changes, we will update this policy and rely on a valid safeguard (e.g., adequacy decision or Standard Contractual Clauses).

8) Updates

We may update this Cookie Policy to reflect changes in technology or law. 
This website uses only essential cookies required for core functionality and security, in line with Regulation (EU) 2016/679 (GDPR). You can manage cookies in your browser.