Last updated: 12 September 2026
Privacy at a glance. Contact details and messages are used strictly to review, process and respond to your inquiry. We do not sell them, use them for unrelated advertising or share them with unrelated third parties. Optional analytics remains off until you consent.
1. Who is responsible for your data
CELUM Data SRL, doing business as Prepress Standard ("Prepress Standard", "we", "us" or "our"), is the data controller for the personal data described in this policy.
CELUM Data SRL dba. Prepress StandardStr. Bucium 34
700265 Iași, Romania
VAT: RO54117523
Email: prepress@prepress-standard.com
2. Scope of this policy
This policy applies when you visit prepress-standard.com, submit its contact form or correspond with us about an inquiry that began through the website. It explains what personal data we process, why we use it, who may process it for us, how long we keep it and the rights available to you.
3. Personal data we collect
Contact-form and correspondence data
When you submit the form, we receive your email address, name, optional company name and message. We also process any information you later choose to include in emails or files sent as part of the inquiry. Please avoid sending unnecessary personal data or special-category information through the form.
Technical and security data
Our hosting infrastructure may record information needed to serve and protect the website, such as an IP address, request date and time, requested URL, response status, browser or user-agent information and security events. The form uses a server-session identifier, a hidden anti-bot field, origin checks and rate limiting to reduce abuse.
Consent and analytics data
Your browser stores a record of your privacy categories and the date of your choice. If you allow Analytics, Google Analytics 4 may process a random pseudonymous browser identifier, pages viewed, session events, referral or campaign source, browser and device characteristics, and approximate region. We do not intentionally send the contact-form fields or message content to Analytics.
4. Why we use personal data and our legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Review, process and answer an inquiry; prepare a quote; take requested steps before a contract | Contact-form data, correspondence and project information | Steps at your request before entering a contract (GDPR Article 6(1)(b)); our legitimate interest in answering business inquiries (Article 6(1)(f)) |
| Provide an agreed service and administer the business relationship | Contact, project, delivery, transaction and correspondence data | Performance of a contract (Article 6(1)(b)); compliance with legal obligations where applicable (Article 6(1)(c)) |
| Operate, secure and troubleshoot the website and form | Technical logs, session and security data | Our legitimate interest in maintaining a reliable and secure service (Article 6(1)(f)) |
| Measure website use and improve pages and journeys | Pseudonymous analytics data | Your consent (Article 6(1)(a)) |
| Remember and demonstrate your privacy choice | Consent categories, policy version and choice date | Compliance with legal obligations (Article 6(1)(c)); our legitimate interest in recording and respecting your choice (Article 6(1)(f)) |
5. How we use contact-form data
We use the information you submit strictly to understand, process and respond to your inquiry, prepare any requested quote or next step, and maintain the resulting business correspondence. We do not sell this information, add it to an unrelated marketing list, disclose it for third-party advertising or share it with unrelated third parties.
The information necessarily passes through service providers that host the website, transmit the form and deliver business email. Those providers process data for us to provide the infrastructure, security and communication functions we request; they do not receive it from us for their own unrelated marketing. We may also disclose information if required by law, a binding authority request or the establishment, exercise or defence of legal claims.
If an inquiry progresses into a project, we may ask separately for any additional information or approval needed to provide the requested service. We do not use a contact inquiry for email marketing without a separate lawful basis, such as your consent.
6. Cookies and anonymised analytics reporting
Necessary browser storage supports consent preferences and contact-form security. Google Analytics remains disabled until you allow Analytics through the consent panel. You can change your choice at any time through . The names, purposes and typical lifetimes of these technologies appear in our Cookie Policy.
We use analytics to understand overall site use, not to identify people who submit inquiries. The reports available to us are primarily aggregated and anonymised at reporting level. Underlying Analytics cookie identifiers are random and pseudonymous rather than names, so they reduce direct identification but may still count as personal data under the GDPR.
Google states that IP addresses from visitors in the EU are used only to derive coarse location information and are then discarded before the data is logged or stored. We do not intentionally send names, email addresses, company names or contact-form messages to Google Analytics.
7. Service providers and other recipients
We limit access to people and providers who need the data for the purposes described above:
- Hostinger: website hosting, server infrastructure, security and email transmission or delivery.
- Google Ireland Limited: Google Tag Manager and, only after consent, Google Analytics 4.
- Professional advisers and authorities: only where reasonably necessary for legal, accounting, security or claims purposes, or where disclosure is required by law.
We require providers acting as processors to handle personal data only under appropriate instructions and protections. Provider privacy information is available in Hostinger's Privacy Policy and Google's Privacy Policy.
8. International data transfers
Some providers may process or support data from locations outside Romania or the European Economic Area. Where personal data is transferred to a country without an applicable European Commission adequacy decision, we rely on an appropriate transfer mechanism, such as the European Commission's Standard Contractual Clauses, together with supplementary measures where required.
9. How long we keep data
- General or unsuccessful inquiries: only as long as needed to answer and follow up, normally no more than 24 months after the last meaningful communication, unless a legal issue requires longer retention.
- Customer and project records: for the business relationship and afterwards for applicable accounting, tax, contractual limitation and legal-claims periods.
- Security and server logs: for a short operational period, generally up to 30 days, unless an incident, investigation or legal duty requires them for longer.
- Consent preference: up to 12 months, after which we ask again or the record is replaced.
- Google Analytics event and user-level data: for the period configured in GA4, no longer than 14 months. Aggregated reporting data may remain available for longer.
We may retain a limited record for longer where necessary to establish compliance, handle a dispute or meet a legal obligation. When retention ends, we delete or anonymise the data as appropriate.
10. How we protect data
We use reasonable technical and organisational safeguards appropriate to the data and service, including HTTPS transport encryption, access controls, input validation, anti-abuse controls and keeping email configuration outside the public website directory. No internet transmission or storage system can be guaranteed completely secure.
11. Your data-protection rights
Subject to the conditions and exceptions in applicable law, you may have the right to:
- request access to personal data we hold about you and receive a copy;
- ask us to correct inaccurate or incomplete data;
- ask us to erase data;
- ask us to restrict processing;
- receive data you provided in a structured, commonly used and machine-readable format, and have it transmitted where applicable;
- object to processing based on legitimate interests, including by explaining your particular situation;
- withdraw consent at any time for future analytics processing; and
- lodge a complaint with a competent supervisory authority.
To exercise a right, email prepress@prepress-standard.com. We may need to verify your identity before acting on a request. We normally respond within one month, subject to the extensions permitted by law.
12. Complaints
You can contact us first so we can try to resolve the matter. You also have the right to complain to the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP). Current contact and complaint information is available at dataprotection.ro. If you live or work elsewhere in the EEA, you may also contact the supervisory authority in that country.
13. Automated decisions and children
We do not use the website data described here to make decisions based solely on automated processing that produce legal or similarly significant effects. The website is a business-to-business service and is not directed to children under 16. Please do not submit a child's personal data through the contact form.
14. External links
The website may link to services or websites operated by others. Their own privacy notices apply when you visit them, and we are not responsible for their independent processing.
15. Changes to this policy
We may update this policy to reflect changes to the website, services, providers or law. The current version will remain available on this page with its latest revision date. If a change materially affects consent-based processing, we may ask you to make a new choice.
16. Contact us
For privacy questions or requests, contact prepress@prepress-standard.com.