Privacy Policy
This policy explains what personal data may be processed through the Weekend Zombies website and for what purposes.
Last updated: October 1, 2026
Data controller
The data controller is STAVĂR M. FLORIN-CĂTĂLIN PERSOANĂ FIZICĂ AUTORIZATĂ, tax identification number (CUI) 54406653, registered with the Trade Register under number F2026017890005, with its registered professional office at Str. Octavian Goga nr. 23, bl. 206A, sc. C, ap. 10, Municipality of Brașov, Brașov County, postal code 500137, Romania. Contact for data protection matters: weekendzombies@gmail.com. Full contact details are also available on the Terms and Conditions page.
Data on the current website
The website is currently a presentation website. There are no user accounts, newsletter form, checkout or payment form. The website does not directly request visitors’ names, email addresses, delivery addresses or payment details. If you choose to contact us by email or through an external service accessed from the website, we will process the information you choose to send us.
Purposes and legal bases for processing
If you contact us, we may process your email address, name and the information included in your message to respond to your request. The usual legal basis is our legitimate interest in communicating with people interested in Weekend Zombies, under Article 6(1)(f) GDPR. If the request concerns steps necessary before entering into a contract, the legal basis may be Article 6(1)(b) GDPR. The processing of certain technical data necessary for the operation and security of the website is based on the legitimate interest in ensuring its availability, security and proper operation. Embedded YouTube videos are loaded only after the user has given consent, on the basis of Article 6(1)(a) GDPR. We do not use received messages to send a newsletter without an appropriate legal basis, and we do not make decisions based solely on automated processing that produce legal effects concerning users or similarly significantly affect them.
Hosting and recipients
The production website will be hosted through ROMARG. As part of providing the hosting service, ROMARG may process technical data necessary for the delivery, operation and security of the website, such as IP addresses, technical browser information and access or security logs. A development or preview version of the website may also be hosted through Vercel. If this version is accessed, Vercel may process technical data necessary to provide and secure the service. Messages sent to our email address are managed through Google/Gmail services. After the user accepts the loading of a YouTube video, certain technical data may be processed by Google/YouTube. We do not sell personal data. For providers that may involve transfers of data outside the European Economic Area, these transfers are carried out in accordance with the mechanisms provided by the GDPR, as applicable, such as adequacy decisions or standard contractual clauses.
Technical operation and browser storage
Like most websites hosted online, hosting providers may process limited technical data, such as IP addresses, browser information and technical or security logs, to deliver and protect the website. The website’s own code stores the user’s chosen language preference locally in the browser to retain that choice. The website does not currently use its own advertising or analytics cookies and does not use Google Analytics, Meta Pixel, TikTok Pixel or other similar tracking technologies for advertising or analytics purposes.
Embedded YouTube videos
Embedded YouTube videos are blocked until the user explicitly selects “Accept and load YouTube video” for the video concerned. Before this consent is given, the video component must not send requests to YouTube and must not load resources, including thumbnails, directly from YouTube or Google servers. After acceptance, the player is loaded using the youtube-nocookie.com domain. Even in Privacy Enhanced Mode, Google may receive technical information such as the IP address and browser information and may use its own storage mechanisms in accordance with its policies. Consent is optional and applies to loading the video concerned. The user may withdraw consent using the option available below the player. Withdrawal removes the player and stops playback, without affecting the lawfulness of processing carried out before consent was withdrawn. Withdrawal of consent cannot automatically delete data or information already stored by third-party services. These can be managed, as applicable, through the browser settings or the settings of the service concerned. A separate YouTube link may open the external service directly, in which case its use is subject to Google/YouTube policies.
External links
The website may contain links to Instagram, TikTok, YouTube, Facebook, email or other external services. Accessing these links opens the service concerned, and the data it processes is governed by its own policies and terms.
Data retention
Correspondence is retained for as long as necessary to resolve the request and any subsequent communications, as well as, where applicable, to comply with legal obligations or defend rights. Technical data and security logs are retained according to the periods or criteria applied by hosting providers and reasonable security needs. The language preference remains stored locally in the browser until the user deletes the website’s data or that preference. Consent to load a YouTube video is not used for marketing and, in the current implementation, is not retained as a user profile.
Your rights
Subject to the conditions provided by the GDPR, you may request access to your personal data, its rectification or erasure, restriction of processing and, where applicable, data portability. You may object to processing based on legitimate interests. Where processing is based on consent, you may withdraw your consent at any time, without withdrawal affecting the lawfulness of processing carried out before withdrawal. To exercise your rights, you may write to: weekendzombies@gmail.com We will respond within the time limit provided by the GDPR, normally no later than one month after receiving the request, subject to circumstances in which the law permits an extension of that period. You have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP). Providing data by email is voluntary. If we are not provided with the information necessary to understand and resolve a request, we may be unable to respond to it.
Future shop
The shop is not active, and the website does not currently accept orders or payments. Before sales are enabled, this policy will be updated to include all processing activities and all providers involved in processing orders, payments, product delivery and, where applicable, commercial communications.