1.Who is responsible for your data
The data controller is Digital Star Marketing S.R.L., with its registered office at Strada Maria Rosetti 6, etaj 8, București 030167, tax ID RO26390950, Trade Register no. J2010000359408 (“Digital Star”, “we”). For any question about personal data, write to us at [email protected] or by post to our registered office.
2.What data we process, why and on what basis
| Situation | What data | Why | Legal basis (GDPR) | How long we keep it |
|---|---|---|---|---|
| You visit the website | IP address, browser and device type, pages visited, date and time, technical data from server logs | Running and securing the website, preventing abuse | Legitimate interest, Art. 6(1)(f) | No more than 12 months |
| You accept analytics or marketing cookies | Online identifiers, interactions with the website and with our ads | Usage statistics, measuring and showing Digital Star campaigns | Consent, Art. 6(1)(a) | As set out in the Cookie policy |
| You write to us via a form, email or phone | Name, email, phone, company, job title, the services you are interested in, an approximate budget, the content of your message | To reply to you, prepare an offer, arrange a meeting | Steps prior to a contract, Art. 6(1)(b), or legitimate interest in communicating with business partners, Art. 6(1)(f) | 24 months from the last interaction, if we do not become partners |
| You subscribe to the newsletter or sign up for an event | Name, email, company, whether you open the emails and which links you click | Sending the newsletter, invitations and materials you asked for, measuring interest in the content | Consent, Art. 6(1)(a) | Until you unsubscribe, plus proof of consent for as long as the law may require it |
| You are a contact person at a client, supplier or partner | Name, job title, company, contact details, project correspondence | Performing the contract, invoicing, project communication | Performance of the contract and legitimate interest, Art. 6(1)(b) and (f); legal obligations, Art. 6(1)(c) | For the duration of the collaboration, plus the periods required by accounting and limitation laws |
| You apply for a job or send us your CV | Data in your CV and cover letter, interview notes, results of work tests | Assessing your application | Steps prior to a contract, Art. 6(1)(b) | No more than 6 months after you apply |
| You interact with our social media pages | Profile name, your messages and comments, aggregate statistics provided by the platform | Replies, moderation, understanding our audience | Legitimate interest, Art. 6(1)(f) | For as long as the content is live on the platform |
| You contact us to exercise your rights | The data in your request and our reply | Handling the request and proof that it was handled | Legal obligation, Art. 6(1)(c) | 3 years from resolution |
We do not use your data for decisions based solely on automated processing that produce legal effects concerning you, including in recruitment. We do not ask for and do not wish to receive sensitive data (for example about health or religion). If you send it to us anyway, for example in a CV, we delete or disregard it.
3.Where we get the data
Most of the time, directly from you. Sometimes we receive it from your employer (when you are the contact person on a project), from recruitment platforms or from public professional sources such as LinkedIn, when we contact you about a collaboration.
5.How you found us
If you have accepted analytics cookies and send us the contact form, we also save, with your message, how you first reached the site in the last 90 days: the type of source (for example a Google search, LinkedIn or another website), the site that sent you, the campaign parameters in the link, the first page you visited and the date. We use this only to learn which channels bring us clients. The legal basis is your consent to analytics cookies. If you withdraw it, this information is no longer saved and the cookie is deleted straight away. We keep it for as long as we keep your message, and delete it together with it.
Also with your consent to analytics cookies, we keep your browser's Google Analytics identifier with your message. If the conversation becomes a project, we send Google Analytics only the fact that the lead was qualified or won, with an estimated value and the source type, linked to that identifier. We never send your name, email, phone, company or message. We use this to see which channels and campaigns bring projects, not for personalised ads.
6.Companies that visit the site
If you have accepted marketing cookies, we use Leadfeeder (Dealfront) to find out, from the IP address, which company a visit comes from and which pages were viewed. We are interested in the company, not the person, and we do not combine this with your name unless you contact us yourself. The legal basis is your consent, which you can withdraw at any time from “Cookie settings”.
7.Transfers outside the European Economic Area
Some suppliers may process data outside the EEA, for example in the United States. In these cases we make sure a safeguard recognised by the GDPR is in place: an adequacy decision of the European Commission (including the EU-US Data Privacy Framework, for certified companies) or the standard contractual clauses adopted by the Commission, together with supplementary measures where needed. You can ask us for a copy of the applicable safeguards.
8.How we protect data
We apply appropriate technical and organisational measures: encrypted connections, access to data only for colleagues who need it, two-step authentication on important accounts, suppliers that follow recognised security standards. If an incident occurs that may affect your rights, we will inform you and notify the authority within the legal deadlines.
9.Your rights
You have the right:
- to find out whether we process your data and to receive a copy (right of access);
- to ask for incorrect or incomplete data to be corrected;
- to ask for your data to be erased, when we no longer have a legal reason to keep it;
- to ask for processing to be restricted;
- to receive your data in a structured format or to ask for it to be sent to someone else (portability);
- to object to processing based on our legitimate interest, including, at any time and without giving a reason, to processing for direct marketing;
- to withdraw your consent at any time, without affecting what happened before;
- to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro, or with the authority in the country where you live or work.
For any of these, write to us at [email protected]. We reply within one month at the latest. If the request is complex, this period may be extended by two further months and we will tell you why. We may ask you for additional information to confirm that it is you.
10.Children
Our website and services are aimed at companies and professionals. We do not knowingly collect data from people under 16.
11.Links to other websites
The website may contain links to websites of clients, partners or social platforms. We are not responsible for their practices and recommend that you read their policies.
12.YouTube clips in articles
Some articles contain YouTube clips. Until you press play, the page shows only an image hosted by us and makes no request to YouTube. When you start a clip, the player loads from youtube-nocookie.com, YouTube's privacy-enhanced mode. From that moment Google receives data such as your IP address, browser and device information and the fact that you started the clip, and may store information on your device. Google acts as an independent controller here, under the Google Privacy Policy. The legal basis is your consent, given by pressing play. Details about storage are in the Cookie Policy.
13.Changes
We update this policy when new purposes or categories of data appear, or when the law changes. The date at the top shows the latest version. If the changes are significant, we will also let you know by email, where we have your address.