Data Protection Officer Contact

1. DPO status at Media Design S.R.L.

Under GDPR Art. 37, designating a Data Protection Officer (DPO) is mandatory only for:

• public authorities and bodies;
• controllers processing sensitive data on a large scale (special categories per Art. 9 or criminal convictions data);
• controllers whose core activity consists of operations requiring regular and systematic large-scale monitoring of data subjects.

Media Design S.R.L. does not fall into any of the mandatory categories. However, we have designated a single point of contact for data protection who fulfills the role equivalent to a DPO in relation to data subjects and ANSPDCP, in accordance with the principles of accountability (Art. 5(2)) and transparency (Art. 5(1)(a)).

2. Contact details

Our data protection contact point:

• Email: contact@mediadesignro.ro — with the subject "Data Protection" or "GDPR"
• Phone: +40 744 933 131
• Postal address: MEDIA DESIGN S.R.L. (attn. Data Protection Officer), Str. Lt. Col. Pretorian Nr. 3, Bl. N116, Sc. A, Ap. 7, Zalău, Sălaj county, postal code 450131, Romania

3. When to contact us

You can contact us for:

• exercising your GDPR rights (access, rectification, erasure, etc.);
• questions about how we process your data;
• requests for additional information beyond the Privacy Policy;
• notifications about suspected security breaches;
• requests from authorities regarding data we hold.

4. Role of the data protection contact point

Under GDPR Art. 39, main responsibilities include:

• informing and advising management and collaborators about GDPR obligations;
• monitoring compliance with GDPR and internal policies;
• advising on data protection impact assessment (DPIA);
• cooperating with the supervisory authority (ANSPDCP);
• acting as point of contact for ANSPDCP on processing matters.

5. Confidentiality

All your requests are treated with confidentiality. In accordance with the data minimization principle (Art. 5(1)(c)), please provide only the information strictly necessary for identification and for processing your request.

6. Response timeline

We respond to requests within 30 days, per GDPR Art. 12(3). The period may be extended by up to 60 days for complex requests, with notification within the first 30 days.

7. Escalation to ANSPDCP

If you are not satisfied with our response or the way we handled your request, you have the right to lodge a complaint with:

Romanian Data Protection Supervisory Authority (ANSPDCP)
B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, Bucharest, postal code 010336, Romania
Phone: +40 318 059 211 / +40 318 059 212
Email: anspdcp@dataprotection.ro
Web: www.dataprotection.ro

8. Related documents

• Privacy Policy
• Data Subject Rights (GDPR)
• Data Subject Request form
• Cookie Policy

Last updated: 1 June 2026.