Updated: November 2025

Privacy Policy

CAR STUDIO complies with GDPR and ePrivacy, with full transparency on personal data handling.

Data collected

•Identification data (name, email, phone) provided via the contact or registration form.
•Technical data: IP, browser, device, access logs for security and abuse prevention.
•Operational data: uploaded photos, editing settings, aggregated usage statistics.

Purpose and legal basis

•Providing photo editing services and issuing invoices (contract performance).
•Commercial communications and onboarding only with explicit consent (Art. 6(1)(a) GDPR).
•Product analytics and improvement (legitimate interest) using aggregated/anonymized data.

Storage and security

•Data is hosted in EU data centers (Frankfurt) with encryption in transit (HTTPS) and at rest (AES-256).
•Role-based internal access, quarterly audits, and encrypted backups for 30 days.
•Uploaded photos are stored for 90 days, then anonymized or deleted automatically.

Your rights

•Access, rectification, erasure, portability, restriction, and objection under GDPR.
•You can withdraw consent anytime from the cookie banner or by contacting contact@carstudio.io.
•We respond within 30 days or faster when the situation requires it.

Cookies and analytics

•Necessary cookies keep your session and UI preferences.
•Analytics cookies (GA4) load only after explicit consent via the banner.
•You can clear cookies in your browser; settings will be shown again on the next visit.

DPO contact

•Controller: AB Solutions SRL, Str. Doamnei 15, Bucharest.
•Data protection officer: dpo@carstudio.io
•Supervisory authority: ANSPDCP (www.dataprotection.ro).

For any questions about data protection, email contact@carstudio.io and we will respond within 24 hours.