Privacy policy

Crenzy Creativity S.R.L., VAT no. RO42954326, Str. Grigore Ionescu no. 63, bl. T73, sc. 2, fl. 4, apt. 42, Sector 2, Bucharest. Requests regarding personal data are sent to office@zeff.ro.

Account data: first and last name, email address, password (stored encrypted), language and display preferences.

Creator profile data: city, niches, languages spoken, equipment, video portfolio, rates, availability, confirmed phone number and, where applicable, a social media account used solely for validation.

Tax and payment data: billing details, tax identification number, bank account and, for private individuals, the data required for the assignment contract and tax filings.

Company data: name, tax number, contact person, verification data.

Usage data: messages and files exchanged in Projects, the history of deliveries and approvals, a technical log (IP address, the city, region and country approximately derived from the IP address, device type, browser and operating system, the time of visits and actions), needed for account security, preventing fraud and duplicate accounts, and proving the acceptance of contracts. The visit log is kept for 12 months.

Providing the service, including contracting, payment and delivery of Projects: performance of a contract (art. 6(1)(b) GDPR).

Verifying Creators and companies, fraud prevention and Platform security: the Operator's legitimate interest (art. 6(1)(f)).

Invoicing, accounting records and tax obligations: legal obligation (art. 6(1)(c)).

Communications about the account and Projects: performance of a contract. Commercial communications are sent only with consent, which may be withdrawn at any time.

Data is processed by providers acting on the Operator's behalf under data processing agreements: hosting and database (Supabase, European Union), video processing and storage (Cloudflare), card payment processing (Stripe), email delivery (Resend), courier services (Sameday) for shipping products, invoicing (FGO). To ship a product, the Creator's name, phone number and delivery address (or chosen easybox) are sent to the courier and appear on the AWB label printed by the Brand.

Brands see about Creators: first name, city, niches, portfolio, level and rating. Creators' contact details are not displayed to Brands. Creators see the Brand's name and the brief.

Data may be disclosed to authorities where required by law.

Data is stored in the European Union. Where a provider processes data outside the European Economic Area, the transfer relies on standard contractual clauses approved by the European Commission or on an adequacy decision.

Account data is kept for the life of the account and for 3 years after closure, to handle potential claims.

Contractual and tax documents are kept for the statutory periods, generally 10 years.

Original video files of completed Projects are deleted 180 days after completion, with prior notice; licensed Content remains available to the Brand in its library.

The rights of access, rectification, erasure, restriction of processing, objection, data portability and withdrawal of consent, under the conditions of the GDPR.

Requests are sent to office@zeff.ro and answered within 30 days at most. You may also lodge a complaint with the Romanian supervisory authority (dataprotection.ro).

The Operator applies appropriate technical and organisational measures: separation of data per organisation at database level, encrypted communications, two-factor authentication for the Operator's team, logging of financial and contractual actions.

This policy may be updated. The current version is published in the Platform with the date of the last update.