Skip to content

Privacy policy

Last updated: 9 November 2026

This page explains what happens to your data when you visit sportburn.com and when you join the launch list. We keep it short on purpose. If anything is unclear, write to [email protected].

Who we are

The controller of your data is Atelier Producție Pompete SRL, a limited liability company registered in Romania.

  • Registered office: Sat Viișoara, Str. Smărăndiței nr. 6, 617513, Neamț County, Romania
  • Tax identification number (CUI): 2615177
  • E-mail: [email protected]

We have not appointed a data protection officer. We are not required to. You can reach the person responsible for data protection at the e-mail address above.

We do not have a representative in the United Kingdom. If you are in the UK, contact us directly at [email protected]. We answer in English.

What we collect and why

If you only visit the site

The site is static. It has no accounts, no shopping cart and no payment. When your browser loads a page, our hosting provider (Cloudflare) receives the technical data every web server receives: your IP address, the page you requested, the time, your browser type and version (user agent), and the page that referred you. Cloudflare uses this data to deliver the page and to protect the site against attacks. It keeps these logs for a short time only.

We count visits with Cloudflare Web Analytics, without cookies and without identifying you: we only see aggregate figures for the pages visited, the referring site, the country, the device type and page speed. We do not set cookies for tracking or advertising. The site works without any non-essential cookie, so there is no cookie banner.

On the home page, our server function reads the two-letter country code that Cloudflare attaches to your request (derived from your IP address) and sends it once to your browser, so that the page can pre-select the edition shown in the showcase and the country in the form. The code is not stored, not logged and not linked to anything.

If you join the launch list

When you fill in the form, we collect:

  • your e-mail address
  • your country
  • the product you are interested in (football fire pit, padel fire pit or both)
  • the language of the page you used
  • how you found us, if the link you clicked carried campaign parameters (so-called utm parameters, for example “newsletter” or “instagram”)
  • the date and time you gave your consent

We use this to:

  • send you a confirmation e-mail with a link (double opt-in)
  • tell you when SportBurn launches
  • send you your 30% launch voucher
  • send you at most a few e-mails about the product before launch

We choose the product shown first in each e-mail by your country and your product choice. That is the only “profiling” we do, and it has no legal or similar effect on you.

After you confirm your address, the page asks you one optional question: where the fire pit would stand and what you would cut into it. If you answer, we keep your answer at Brevo next to your address, for as long as you are on the list, and delete it together with it. Please do not write anything about other people in it.

When you confirm your address

When you click the confirmation link, our e-mail provider (Brevo) records the date and time, your IP address and your user agent. This is our proof that you gave consent. Brevo stores it with your contact record.

The bot check

The form uses Cloudflare Turnstile to tell humans from bots. Turnstile processes technical signals from your browser (such as your IP address, browser headers and the way your browser answers a few technical checks). It does not read what you type in the form. It does not set a tracking cookie and we do not use it for advertising. You can read Cloudflare’s own description in the Turnstile Privacy Addendum.

  • Launch list, voucher and product e-mails: your consent, Article 6(1)(a) GDPR and the equivalent provision of the UK GDPR. You give it by ticking the box and confirming your address. You can withdraw it at any time (see “Your rights”).
  • Proof of consent: our legitimate interest in being able to show that you asked for these e-mails, Article 6(1)(f) GDPR. This is also a legal duty under Article 7(1) GDPR.
  • Technical logs and the bot check: our legitimate interest in running a secure site, Article 6(1)(f) GDPR.
  • Honouring an unsubscribe: our legal duty not to e-mail you after you opt out. For this we keep your address on a suppression list after you leave.

We never make joining the list a condition for anything else. You can learn about SportBurn without giving us any data.

How long we keep your data

  • Address not confirmed: we delete it 30 days after you submitted the form.
  • Address confirmed: we keep your data until 12 months after the SportBurn launch, or until you unsubscribe, whichever comes first. If the launch is cancelled, we delete the list within 12 months of the decision.
  • After you unsubscribe: your contact details are deleted. Your address stays on a suppression list so that we do not e-mail you again by mistake.
  • Proof of consent: kept as long as your contact record exists, plus the time we may need to answer a complaint.
  • Technical logs at Cloudflare: short-term, as set by Cloudflare’s standard retention for this service.

Who we share your data with

We do not sell your data. We do not pass it to advertisers. We share it only with the providers we need to run the site and the list. Both act on our instructions as processors under a data processing agreement.

Brevo

Brevo SAS, Paris, France, runs our mailing list and sends our e-mails. Your contact record, your consent record and the e-mails you receive live at Brevo. Brevo states that it hosts customer data on servers in the European Union. We review Brevo’s data processing agreement and sub-processor list in our account.

Cloudflare

Cloudflare, Inc., San Francisco, United States, hosts the site (Cloudflare Pages), runs the bot check (Turnstile) and counts visits (Web Analytics, aggregate figures only). Cloudflare sees your IP address and technical request data when you load a page or submit the form. Cloudflare does not receive your e-mail address or your form entries as part of the hosting service, except for the moment the form passes through our server-side function to reach Brevo. That function stores nothing.

Transfers outside the EU and the UK

Your contact data stays in the EU at Brevo.

Cloudflare is a US company. Technical data (IP address, request data, Turnstile signals) may be processed in the United States. Cloudflare relies on the European Commission’s Standard Contractual Clauses and is certified under the EU-US Data Privacy Framework. For data from the UK, Cloudflare uses the UK Addendum to those clauses. You can read Cloudflare’s own summary on its GDPR page.

We make no other transfer outside the EU or the UK.

Your rights

Under the GDPR and the UK GDPR you can:

  • Withdraw your consent at any time. Click the unsubscribe link in any e-mail or write to us. This does not affect what we did before you withdrew.
  • Ask what data we hold about you and get a copy (access).
  • Ask us to correct wrong data (rectification).
  • Ask us to delete your data (erasure).
  • Ask us to limit what we do with your data (restriction).
  • Object to processing based on legitimate interest.
  • Ask for your data in a machine-readable format (portability).

We do not make automated decisions about you.

How to exercise your rights

Write to [email protected] from the e-mail address you registered with, or tell us which address you used. We reply within one month. If your request is complex we may take up to two more months, and we tell you why.

We may ask you to confirm that the address is yours before we share or change anything. We do this to protect your data, not to slow you down.

Exercising your rights is free.

Complaints

If you think we handle your data wrongly, tell us first. We want to fix it.

You also have the right to complain to a supervisory authority:

  • In Romania, where we are based: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), www.dataprotection.ro.
  • In any other EU country: the data protection authority of the country where you live or work.
  • In the United Kingdom: the Information Commissioner’s Office (ICO), ico.org.uk.

Children

SportBurn is a fire pit. It is not for children. We do not knowingly collect data from anyone under 16. If you are under 16, do not join the list. If you believe a child has given us an address, write to [email protected] and we delete it.

Security

The site is served over HTTPS only. The form data goes encrypted to our server function and from there encrypted to Brevo. We keep no copy of the list outside Brevo. Access to our Brevo and Cloudflare accounts is limited to the people who need it and is protected with two-factor authentication.

Changes to this policy

When we change this policy, we update the date at the top and keep the previous version available on request. If a change affects what we do with the data you already gave us, we tell you by e-mail before it takes effect and ask for your consent again where the law requires it.

Contact

Atelier Producție Pompete SRL
Sat Viișoara, Str. Smărăndiței nr. 6, 617513, Neamț County, Romania
[email protected]