Privacy Policy

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, place an order, or contact our support team. This includes your name, email address, phone number, billing and shipping address, company name, and payment information.

We also automatically collect certain technical information when you use our platform, including your IP address, browser type, operating system, referring URLs, pages visited, and device identifiers. We use cookies and similar tracking technologies to enhance your experience.

2. How We Use Your Information

We use the information we collect to process and fulfill your orders, communicate with you about your orders and account, provide customer support, send you promotional communications (with your consent), improve and personalize your experience on our platform, analyze platform usage and trends, ensure security and prevent fraud, and comply with legal obligations.

We do not sell, rent, or share your personal information with third parties for their own marketing purposes without your explicit consent.

3. Data Retention

We retain your personal information for as long as necessary to provide our services and comply with our legal obligations. Order data is retained for a minimum of 5 years for tax, accounting, and legal purposes as required by Romanian law. Customer account information is retained as long as your account is active. You may request deletion of your account and associated data at any time by contacting us.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our platform. Essential cookies are necessary for the platform to function properly. Analytics cookies help us understand how visitors interact with the site and which features are most popular. Marketing cookies may be used to track your interactions across websites for advertising purposes. You can control cookie preferences through your browser settings.

5. Data Security

We implement industry-standard security measures to protect your personal information, including SSL/TLS encryption for data in transit and AES-256 encryption for data at rest. Payment information is processed through PCI-DSS compliant payment processors and is never stored on our servers. We conduct regular security audits and maintain strict access controls. However, no method of transmission over the internet is 100% secure.

6. Your Rights

Under GDPR and Romanian data protection law, you have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion of your data, object to or restrict processing of your data, request portability of your data in a structured format, and withdraw consent at any time.

To exercise any of these rights, please contact us at privacy@mediabank.ro. We will respond to your request within 30 days as required by law.

7. Third-Party Services and Data Sharing

Our platform integrates with third-party services including Stripe for payment processing and Supabase for data storage. We only share personal data with third parties to the extent necessary to provide our services. These service providers have their own privacy policies and data processing agreements that comply with applicable data protection laws. We do not share data with third parties for their marketing purposes without your explicit consent.

8. International Data Transfers

If you are located outside of Romania, please note that we collect and process your personal information in Romania and within the European Union. By using our Services, you consent to the transfer of your personal information to countries outside your country of residence, which may have different data protection rules. We implement appropriate safeguards for such transfers.

9. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will delete such information immediately and terminate the child's account if applicable.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of significant changes by email or by displaying a notice on our platform. Your continued use of our services after any changes constitutes acceptance of the updated policy.

11. Data Protection Officer

If you have any questions about our data protection practices or wish to lodge a complaint, you may contact our Data Protection Officer at dpo@mediabank.ro. You also have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) in Romania.