Last updated: 14 September 2026.
1. ABOUT THIS POLICY
This Privacy Policy explains how Overlooked collects and uses personal information when you browse overlooked.ro, contact us, request a rental, place a Contemporary Art order, or otherwise interact with the website.
2. INFORMATION WE COLLECT
Depending on how you use the website, we may receive information you provide directly, including your name, email address, phone number, company or project details, rental dates, event or delivery location, billing and delivery details, order information, messages, notes and files you choose to send us.
The website may also process limited technical information needed to operate and secure the service, such as IP address, browser and device information, timestamps, security logs, session information and essential cookies or local storage.
3. CONTACT FORMS
When you use the Contact page, we use the information you submit to answer your message, discuss a project, prepare a quotation or continue the conversation you requested.
4. RENTAL REQUESTS
When you request a rental, we may process your contact details, requested items, dates, pickup or delivery choice, city, address and related logistics information in order to check availability, prepare the booking and organise pickup, delivery or return.
5. CONTEMPORARY ART ORDERS
When you place or prepare an art order, we may process your contact details, selected artwork or custom piece details, size and finish choices, delivery information and any notes needed to prepare and fulfil the order.
6. WHY WE USE PERSONAL INFORMATION
- to respond to inquiries and project requests;
- to prepare quotations and confirm availability;
- to process rental requests and art orders;
- to organise pickup, delivery, production and returns;
- to communicate about an active project, booking or order;
- to maintain records required for accounting, tax, contractual or legal purposes;
- to protect the website and prevent misuse or security incidents.
7. LEGAL BASIS
Where the General Data Protection Regulation (GDPR) applies, personal information is processed only where there is an appropriate legal basis. Depending on the situation, this may include taking steps at your request before entering into a contract, performing a contract, complying with a legal obligation, pursuing a legitimate business interest that does not override your rights, or relying on your consent.
8. EMAIL
Website messages and transactional notifications may be sent and received through our business email infrastructure. The main website contact address is hey@overlooked.ro.
9. SERVICE PROVIDERS
We may use service providers that help us operate the website and business, such as website hosting, email, technical support, cloud infrastructure, production, accounting, courier or delivery services. We share only the information reasonably necessary for the relevant service.
10. COOKIES AND LOCAL STORAGE
The website may use essential cookies or browser storage for core functions such as session handling, carts, booking functionality, security and remembering choices. Optional analytics or marketing technologies should remain disabled unless they are enabled in accordance with applicable consent requirements. More information is available in the Cookie Policy.
11. HOW LONG WE KEEP INFORMATION
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and for any applicable accounting, tax, contractual, warranty, dispute or legal-retention requirements. Information that is no longer needed may be deleted or anonymised.
12. SECURITY
We use reasonable technical and organisational measures intended to protect personal information from unauthorised access, alteration, loss or disclosure. No online system can be guaranteed to be completely secure, so please avoid sending unnecessary sensitive information through ordinary website forms.
13. YOUR RIGHTS
Where applicable, you may have the right to request access to your personal data, correction of inaccurate information, deletion, restriction of processing, data portability, or to object to certain processing. Where processing is based on consent, you may withdraw that consent at any time without affecting processing carried out before withdrawal.
You may also have the right to lodge a complaint with the competent data-protection authority. In Romania, this is the National Supervisory Authority for Personal Data Processing (ANSPDCP).
14. THIRD-PARTY LINKS AND SERVICES
The website may link to or embed services operated by third parties. Their handling of personal information is governed by their own privacy terms, and we recommend reviewing those terms when using an external service.
15. CHANGES TO THIS POLICY
We may update this Privacy Policy when the website, our services, our providers or legal requirements change. The latest version will be published on this page.
16. CONTACT
For privacy questions or requests, email hey@overlooked.ro.