Last updated: 26 July 2026
This policy describes the website's actual activity: project enquiries, correspondence, technical security, and resources needed to display the pages. We collect only what we need and do not sell personal data.
1. Who controls the data
The controller of personal data processed through this website is:
This policy covers website visitors and people who contact us about a project or collaboration. Processing connected with a specific contract may be covered by additional notices.
2. What data we use and why
Messages sent through the form
When you use the contact form, we process your name, email address, phone number, and message. The form also records the page language, the page address from which it was sent, the IP address, browser/device type, and submission time.
We use this information to understand and answer your enquiry, assess whether we can work together, retain the conversation context, and prevent form abuse. Fields marked as required are needed to handle the enquiry; without them we may not be able to reply.
Email and phone
If you contact us directly, we use the message content and your contact details to carry on and follow up the conversation.
Technical and security data
The server may automatically record the IP address, date and time, requested URL, referrer, server response, and browser information. These logs support operation, troubleshooting, abuse prevention, and website security.
Cookie preferences
We keep your category choice and save time locally so the website can respect it on later visits. Details appear in the Cookie policy.
Presentation resources
Pages load web fonts from Google Fonts. When those files are downloaded, Google may receive the IP address and technical headers normally sent by the browser. We do not send contact-form content with this request. More information is available in Google's privacy policy.
3. Legal bases
We process data only where Article 6 GDPR provides a legal basis:
- steps you request before a possible contract — for quote requests and project discussions (Article 6(1)(b));
- legitimate interests — to manage general enquiries, retain a reasonable conversation history, secure and improve technical operation, and present the website consistently (Article 6(1)(f));
- consent — only for optional technologies, if they are enabled and you select that category (Article 6(1)(a));
- legal obligation — where applicable law requires us to retain or disclose information (Article 6(1)(c)).
Before relying on legitimate interests, we assess whether the purpose is necessary and whether your rights override it. You may object at any time.
4. Who may receive data
Access is limited to Mango Vision people who need the information to answer or administer the website. We may use providers acting on our behalf for:
- hosting, infrastructure, backup, and security;
- email transmission and storage;
- platform maintenance and form administration;
- web-font delivery through Google Fonts.
We may disclose information to public authorities or professional advisers where required by law or needed to establish, exercise, or defend a legal claim. We do not sell or rent personal data.
Some global providers may process technical information outside the European Economic Area. In such cases, we use providers that declare a lawful transfer mechanism, such as an adequacy decision or standard contractual clauses, as applicable.
5. How long we keep data
- Enquiries and correspondence: while needed to answer and assess the collaboration, followed by a reasonable period to retain context and protect the parties' rights. Enquiries that are no longer useful are periodically reviewed and deleted.
- Technical logs: for the infrastructure's security and backup cycles, after which they are deleted or overwritten unless an incident justifies longer retention.
- Cookie preference: the technical cookie lasts up to one year; the local-storage choice remains until you change it or clear this website's browser data.
- Information required for an obligation or dispute: for the period required by law or until the applicable limitation periods expire.
At the end of the relevant period, information is deleted, anonymised, or isolated from current use as appropriate.
6. Your rights
Subject to the GDPR conditions, you may request:
- access to your data and a copy;
- correction or completion of inaccurate data;
- erasure where no lawful reason for retention remains;
- restriction of processing;
- portability of data you provided, where the legal conditions are met;
- objection to processing based on legitimate interests;
- withdrawal of consent without affecting lawful use before withdrawal.
We do not use data collected through the website for solely automated decisions that have legal or similarly significant effects on you.
To exercise a right, email . We may request only the information needed to confirm identity. We respond within the period required by the GDPR.
If you believe processing infringes the law, you may complain to the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) or bring a claim before the competent courts.
7. MangoVision Analytics and Google user data
MangoVision Analytics accesses Google Analytics data only after an authorized administrator grants permission through Google OAuth. The application requests the analytics.readonly scope and uses it to display GA4 properties, visits, realtime activity, traffic sources, audience information, page performance, and key events in the administrator's dashboard.
MangoVision Analytics does not create, modify, or delete Google Analytics data. OAuth refresh tokens are encrypted and stored by the central MangoVision connector. Analytics report data is requested directly by the connected installation and is cached only temporarily where necessary for dashboard performance. Analytics report data is not retained by the central MangoVision connector.
Google user data is not sold or used for advertising. Access is limited to providing the requested Analytics dashboard functionality. Administrators can delete the stored connection credentials by disconnecting Google Analytics from MangoVision Settings.
MangoVision's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
8. Security, contact, and updates
We apply technical and organisational measures proportionate to risk, including limited access, form protection, secure connections, and backups. No online system can guarantee zero risk.
The website presents Mango Vision's services and handles professional enquiries; it is not designed to intentionally collect children's data.
We update this policy when our working methods, providers, or applicable requirements change. The current version date appears at the beginning.