Privacy Policy (GDPR)

1. Data controller

ESI Quality SRL, registered office at 231A Calea Dobrogei Street, Room 1, Valu lui Traian village, Valu lui Traian commune, Constanța County, Romania, is the controller of your personal data. Contact: hello@thisisnamia.com.

2. What data we collect

• Contact data: name, email, phone number and company name, provided through the contact form or email.
• Billing data: address, VAT ID/company registration number, when needed to issue the fiscal invoice.
• Technical data: IP address, functional cookies and local storage entries related to language, cookies and interface state.
• Provided content: briefs, texts, images, voice recordings or other materials supplied by the client for production.
• Image and voice (Digital Clone): the video recording in which you speak to the camera, the consent video and the digital clone (image and voice) created from them. We treat them with the level of protection of biometric data and process them only on the basis of your explicit consent.

3. Legal bases for processing

• Consent: for contact requests sent through the form and for any optional communications initiated by the user.
• Legitimate interest: for site security, abuse prevention, service continuity and basic operational logging.
• Contractual necessity: for producing and delivering the requested services after an order is confirmed.
• Legal obligation: for invoicing, accounting and record retention required by Romanian law.

4. Storage and security

• Contact and project-related data are stored on secured systems for up to 2 years from the last relevant interaction, unless a longer legal retention period applies.
• Billing and accounting data are kept for the period required by fiscal and accounting legislation.
• We use reasonable technical and organizational measures to protect data against unauthorized access, loss or misuse.

5. Your rights

• The right to access the personal data we process about you.
• The right to rectification - correcting inaccurate or incomplete data.
• The right to erasure ("right to be forgotten"), within the limits of legal archiving obligations.
• The right to portability - receiving your data in a structured format.
• The right to object to processing or to withdraw consent where processing is based on consent.
• The right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro.

To exercise your rights, contact hello@thisisnamia.com. We respond within 30 days at most.

6. Cookies and consent

This site uses strictly necessary cookies and local storage for functionality, language preference and consent choices. Optional analytics or marketing scripts should be activated only after valid consent has been obtained.

7. Digital Clone (image and voice)

• Purpose: we use your recording exclusively to create the digital clone and the videos you order.
• Legal basis: your explicit consent, given in writing (email) and through the consent video required by the cloning platform. You can withdraw it at any time, and the clone is deleted.
• Use: your clone is not used for other clients and does not appear in our portfolio or promotional materials without your written approval.
• Retention: we keep the source recording and the clone while you have an active project and for up to 12 months after the last delivered video, then we delete them unless you ask otherwise.
• Deletion: on your request sent to hello@thisisnamia.com, we delete the clone and the source recording within 30 days at most.

8. Providers and data transfers

To provide our services we use providers that process data on our behalf: Cloudflare (website hosting and email forwarding), Formspree (delivering contact form messages), Google (email service and Google Drive, for delivering files) and AI video, image and voice generation providers (for example HeyGen). Some of them may process data outside the European Economic Area, based on the safeguards provided by the GDPR, such as standard contractual clauses.