Privacy Policy
Last updated: 20 July 2026
This English version is provided for convenience only. In case of any discrepancy, the Romanian version prevails.
This Privacy Policy explains how LENZIA S.R.L. processes personal data in connection with the website lenzia.ro (the “Website”) and the related commercial communications, in accordance with Regulation (EU) 2016/679 (“GDPR”) and the applicable national legislation.
1. Who we are (the Data Controller)
The controller of your personal data is LENZIA S.R.L., a company with its registered office at București, Sectorul 6, Splaiul Independenței, Nr. 313B, Bl. C10, registered with the Trade Registry under no. J2026045089000, fiscal code RO55244754. For any request concerning personal data you can write to us at contact@lenzia.cam.
We have not appointed a data protection officer (DPO), as this obligation does not apply to our activity. For any data protection matter you can contact us at the e-mail address above.
2. Scope
This policy covers the personal data of Website visitors and of the people who contact us for a quote or with other questions. Processing carried out while providing the Services to clients is governed by the contracts concluded with them.
3. A founding principle: the Lenzia service does not identify people
The Lenzia service is built around completely anonymous counting: the system generates exclusively numeric data about how busy a space is (how many people are inside). We store no images, keep no recordings and identify no one entering or leaving a monitored space. The occupancy data generated this way is anonymous data and does not constitute personal data within the meaning of art. 4 (1) GDPR.
4. What data we process through the Website, and why
a) Data you send us voluntarily (the quote request)
The form on the contact page sends the data you fill in to our server, which delivers it to us as an e-mail message at contact@lenzia.cam; alternatively, you can write to us directly at the same address. This way you may send us: your name, e-mail address, phone number, the name of the venue/space, the county, the number of entrances and the content of your message. One contact method is enough for us to reach you - e-mail or phone, whichever you prefer. To prevent abuse (for example automated bulk submissions), when the form is sent the server also processes the IP address it was filled in from.
b) Technical data collected automatically
When you access the Website, the web server automatically records logs which may include: IP address, date and time of access, the page accessed and the browser type. This data is used exclusively for the security and proper operation of the Website.
c) Web fonts
The Website loads fonts from the Google Fonts service (Google LLC). When the fonts are loaded, your IP address is transmitted to Google's servers. Details about Google's data processing are available in the Google privacy policy.
| Purpose of processing | Categories of data | Legal basis (art. 6 GDPR) | Storage period |
|---|---|---|---|
| Responding to quote requests and questions (by e-mail or phone) | Name, e-mail, phone number, name of the space, county, number of entrances, content of the message | Art. 6 (1) (b) - pre-contractual steps taken at your request | Maximum 3 years from the last contact |
| Negotiating, concluding and performing contracts | Contact details, identification and billing data | Art. 6 (1) (b) and (c) - performance of the contract and legal obligations | Duration of the contract + statutory archiving periods (5–10 years for accounting documents) |
| Preventing abuse when the contact form is submitted | The IP address the form was filled in from | Art. 6 (1) (f) - our legitimate interest in preventing automated bulk submissions | Maximum 12 months |
| Security and operation of the Website | Server logs (IP, date/time, page, browser) | Art. 6 (1) (f) - our legitimate interest in protecting the Website | Maximum 12 months |
| Statistics about the use of the Website and its improvement (the analytics tools described in section 9) | Page usage data, visit source, device and browser type, cookie identifiers | Art. 6 (1) (a) - your consent (the cookie banner) | Until consent is withdrawn; cookies expire after at most 24 months |
| Establishing, exercising or defending legal claims | The relevant correspondence | Art. 6 (1) (f) | The statutory limitation periods |
5. Who we disclose data to
Your data may be accessed, strictly as necessary, by the following categories of recipients:
- providers of Website and infrastructure hosting services (servers located in the European Union);
- the providers of the analytics tools described in section 9 (Google, Contentsquare) - only if you have given your consent;
- the provider of the e-mail service used for correspondence;
- accounting and legal service providers, as necessary;
- public authorities, where the law requires it.
We do not sell your data and we do not pass it to third parties for marketing purposes.
6. Transfers outside the European Economic Area
Data processed through the Website is stored, as a rule, on servers in the European Union. Loading Google Fonts, as well as the analytics tools described in section 9 (if you have given your consent), may involve a transfer of data (IP address) to Google LLC (USA); this transfer is based on the adequacy decision regarding the EU–U.S. Data Privacy Framework.
7. How long we keep data
We keep data only for as long as necessary for the purposes described above, according to the periods indicated in the table. Once those periods expire, the data is deleted or anonymised.
8. Your rights
Under the GDPR, you have the following rights:
- the right of access to the data we process about you (art. 15);
- the right to rectification of inaccurate or incomplete data (art. 16);
- the right to erasure (“the right to be forgotten”), under the conditions of art. 17;
- the right to restriction of processing (art. 18);
- the right to data portability (art. 20);
- the right to object to processing based on legitimate interest (art. 21);
- the right to withdraw your consent at any time, where processing is based on consent (for example, analytics cookies), without affecting the lawfulness of processing carried out before the withdrawal.
To exercise these rights, write to us at contact@lenzia.cam. We will reply within one month of receiving the request; this period may be extended by two months in complex cases, with notice to you.
You also have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) - B-dul G-ral. Gheorghe Magheru nr. 28–30, Sector 1, Bucharest, dataprotection.ro - as well as to bring the matter before the courts.
9. Cookies and similar technologies
The Website uses analytics cookies only with your prior consent (art. 6 (1) (a) GDPR), given through the notice displayed on your first visit. If you close the notice or choose “Decline”, no analytics tool is loaded and no analytics cookie is placed. You can change your choice at any time through the “Cookie settings” link in the Website footer; withdrawing consent does not affect the lawfulness of the processing carried out beforehand.
With your consent, we use the following tools:
- Google Analytics 4 (Google Ireland Ltd. / Google LLC) - aggregated statistics about the use of the Website (pages visited, visit source, device type). The data may be transferred to Google LLC (USA) on the basis of the adequacy decision regarding the EU–U.S. Data Privacy Framework. Details in the Google privacy policy.
- Contentsquare (Contentsquare SAS, France) - analysis of how the pages are used (for example interaction maps and navigation replays, in which text entered into fields is masked by default), with storage in the European Union. Details in the Contentsquare privacy policy.
Analytics cookies expire at most 24 months after being placed.
10. Data security
We apply appropriate technical and organisational measures to protect data, including: encryption of communications (TLS/HTTPS), hosting in the European Union, restricting access to data on a need-to-know basis and keeping systems regularly updated.
11. Minors
The Website and our services are not addressed to minors. We do not knowingly collect personal data of children under 16.
12. Changes to this policy
We may update this policy from time to time. The version in force, together with the date of the last update, is permanently published on this page. Significant changes will be signalled visibly on the Website.
13. Contact
For any question about this policy or your personal data: contact@lenzia.cam. The general conditions for using the Website are available in the Terms and Conditions.