PRIVACY POLICY

1. Controller and contact

The controller is Thematic Channels S.R.L., 74A Nicolae G. Caramfil Street, Building B, District 1, Bucharest, registered with the Romanian Trade Registry under no. J40/7488/2007, VAT ID RO21563430. For questions or to exercise your rights: office@thematicchannels.ro.

2. Technical data required for operation and security

Hosting and delivery infrastructure may automatically process your IP address, request date and time, requested URL, response code, referrer, and browser/device information. The purposes are site delivery, abuse prevention, incident diagnosis, and security, based on legitimate interests (Article 6(1)(f) GDPR).

The portfolio, audience, and team pages read published content from Google Firebase Cloud Firestore. Google may receive technical request data to provide and secure that service.

Firebase App Check with Google reCAPTCHA v3 verifies app integrity and sends attestation material and security tokens to Google. This protects the public databases from abusive automation. App Check does not retain attestation material; tokens remain valid for the configured TTL, which cannot exceed 7 days.

3. Contacting the company

The site displays email and telephone links but does not submit your message through the website. If you contact us, the information in your message is processed to answer your request, take pre-contractual steps, or manage a contractual relationship as applicable (Article 6(1)(b) and (f) GDPR). Your chosen email or telephone provider has its own terms.

4. Cookies, local storage, and optional analytics

Google Analytics 4 is not loaded before consent and is not loaded at all unless the site has a valid measurement ID. If accepted, page and interaction information and technical browser/device data are sent to Google. Google signals and advertising personalization are disabled.

The site configuration caps Google Analytics cookies at 395 days and does not renew their expiry on each page. User-level and event-level data is retained for no more than 14 months. You can withdraw consent at any time in Cookie Settings; known Analytics cookies are then removed to the extent the browser permits.

Your cookie choice is stored only in browser localStorage. It is not sent to our server and remains until you remove it, clear browser data, or we publish a new consent-mechanism version.

The items below are strictly necessary for the site to work securely, except those marked optional:

• thematic_channels_cookie_consent (localStorage, Thematic Channels): your cookie choice; until removed or until a new consent-mechanism version.
• thematic-language (localStorage, Thematic Channels): your chosen language; until removed.
• thematic:cache:* (localStorage, Thematic Channels): a copy of the public portfolio, audience, and team content for fast display; replaced the next day and contains no data about the visitor.
• _grecaptcha (localStorage) and _GRECAPTCHA (cookie on www.google.com, about 6 months), set by Google reCAPTCHA: risk analysis for App Check.
• firebase-app-check-database (IndexedDB, Google Firebase): the App Check token, until it expires.
• Optional, only after consent and only if Analytics is configured: _ga and _ga_<ID> (Google Analytics cookies), no more than 395 days.
• Optional, only after you press the map load button: Google Maps cookies, under Google’s policy.

5. Google Maps and external services

Google Maps is blocked initially. Only after you press the load button does the browser connect to Google Maps, at which point Google may receive your IP address and browser/device information under its own policy. You can use the postal address without loading the map. External links open only at your request and are governed by the destination site’s policy.

6. Providers, transfers, and disclosures

Some Google services operate on global infrastructure, so data may be processed outside the EEA. Transfers rely, as applicable, on adequacy decisions, the EU–US Data Privacy Framework, and/or Standard Contractual Clauses. We do not sell personal data.

• The hosting/delivery provider, strictly for site operation and security.
• Google and its subprocessors for Firebase, App Check/reCAPTCHA v3, Google Maps after a click, and Google Analytics only after consent.
• Authorities or professional advisers only where legally required or necessary to establish or defend a legal claim.

7. Retention

• Hosting and security logs: no more than 30 days unless an incident, legal claim, or legal obligation justifies longer retention.
• App Check tokens: the configured TTL (currently 24 hours), no more than 7 days; if replay protection is used, Firebase may retain used tokens for no more than 30 days.
• Google Analytics, if enabled and accepted: cookies for no more than 395 days; user-level and event-level data for no more than 14 months.
• Email correspondence sent directly to us: as long as necessary for the request, contractual relationship, and applicable legal periods.

8. Your rights

• Access, rectification, erasure, restriction, portability, and objection under the conditions of the GDPR.
• Withdrawal of Analytics consent without affecting processing before withdrawal.
• The right to complain to the Romanian supervisory authority (ANSPDCP) — www.dataprotection.ro.
• Requests: office@thematicchannels.ro. We may request reasonable information to verify identity.

9. Security, children, and automated decisions

We use HTTPS, browser security policies, Firebase access rules, and App Check. The site is intended for professionals and a general audience, is not designed to collect children’s data, and makes no decisions producing legal effects based solely on automated processing.

10. Updates

We will update this page when services or processing practices change and will amend the effective date. The text on this page describes the site’s current configuration.