Privacy Policy

This Privacy Policy explains what personal data we collect through the website garbaligroup.co (the "Site") and in the course of providing our video editing and photo retouching services, why we collect it, and the choices you have. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

1. Who we are

The data controller is VLADIMIR GARBALÎ, an independent post-production studio registered at:

• Strada Petricani 86, MD-2059 Chișinău, Moldova
• Email: jiri.kaluha@gmail.com
• Website: garbaligroup.co

2. Data we collect

Information you provide to us through the contact form, email or other communication:

• Name and contact details (email address)
• Project details you choose to share (message content, footage descriptions)
• Correspondence history between you and the studio
• Billing details, if applicable to a project (invoicing data)

Information collected automatically when you visit the Site:

• IP address, browser type and version, device type and operating system
• Pages visited, time spent on the Site and referring pages
• Cookies and similar technologies (see Section 5)

Information about project content: when you engage us for a service, we may temporarily process the video and photo files you provide for the purpose of delivering the agreed service. This material is processed on your instructions and does not constitute personal data unless it depicts identifiable individuals, in which case you are responsible for ensuring you have the necessary rights and consents to share it with us.

3. How we use your data

• To respond to inquiries and provide quotes for services
• To deliver services you request (video editing, color grading, retouching) and communicate about them
• To invoice, where applicable, and keep business records
• To improve and secure the Site (analytics and maintenance)
• To comply with legal obligations
• To send occasional project-related updates — only with your consent

We do not sell, rent or trade your personal data to third parties.

4. Legal basis for processing

• Contract: processing necessary to perform a service you have requested
• Legitimate interest: responding to inquiries, improving the Site, preventing misuse
• Consent: where you have given explicit consent (e.g., for non-essential cookies or marketing contact)
• Legal obligation: where we must process data to comply with law

5. Cookies and similar technologies

The Site uses cookies and similar technologies. For full details, see our Cookie Policy. In summary:

• Strictly necessary cookies: required for the Site to function (e.g., session cookies)
• Performance/analytics cookies: used with your consent to understand how the Site is used
• Third-party cookies: may be set by services such as Google Analytics and YouTube embeds, subject to your choices

You can manage or withdraw consent to non-essential cookies at any time through your browser settings or our cookie preference controls.

6. Sharing your data

We do not share your personal data with third parties except:

• Service providers who help us operate the Site or deliver services (e.g., hosting providers, secure file-transfer and cloud-storage services), acting only on our instructions
• Legal requirements — when disclosure is required by law or to protect our rights
• Analytics providers — for aggregated, anonymised usage statistics, subject to your consent

All service providers are bound by confidentiality and data-protection obligations.

7. International transfers

Your data may be processed on servers located in the European Economic Area (EEA) and other regions through our hosting and cloud providers. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as the European Commission's standard contractual clauses, so your data remains protected.

8. Data retention

• Inquiry data: retained for up to 24 months after your last contact, unless you request earlier deletion
• Client project material: retained for the duration of the project plus the period agreed in your contract; intermediate copies are deleted on request
• Billing records: retained as required by applicable tax and accounting law
• Analytics data: retained according to the analytics provider's policy

9. Security

We take reasonable technical and organisational measures to protect your personal data, including encrypted data transmission (HTTPS/TLS), access restrictions, and secure file-transfer channels. No method of transmission or storage is completely secure, but we work to protect your data to a high standard.

10. Your rights

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data ("right to be forgotten")
• Restrict or object to processing in certain circumstances
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent at any time where processing is based on consent
• Lodge a complaint with a supervisory authority

To exercise any of these rights, email jiri.kaluha@gmail.com. We will respond within one month.

11. Children's privacy

The Site and our services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. Changes take effect when posted on this page, and the "Last updated" date at the top will be revised accordingly. Where significant changes affect you, we will take reasonable steps to notify you.

13. Contact and complaints

For any questions about this Privacy Policy or your data, contact us at:

• Email: jiri.kaluha@gmail.com
• Address: VLADIMIR GARBALÎ, Strada Petricani 86, MD-2059 Chișinău, Moldova

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority or the National Centre for Personal Data Protection of the Republic of Moldova.