This policy explains how Greieras Music Studio SRL (“the Controller”) collects, uses and protects the personal data of visitors and clients of the website selleasy.ro, in accordance with Regulation (EU) 2016/679 (GDPR) and Romanian Law no. 190/2018. If you contact us from the United Kingdom, you have comparable rights under UK data protection law.
1. Data we collect
1.1. Data you give us
- First name, last name, company name
- Email address
- Phone number
- The address of your store or website
- VAT ID and billing details (for clients who buy services)
- The content of the messages you send us (forms, WhatsApp, email)
1.2. Data collected automatically
- IP address, browser type, operating system and device
- Pages visited, length of the visit and where the visit came from
- Cookies and similar technologies (see section 6)
- When you send a form: the language of the page and your browser’s time zone, so we can tell you the reply deadline in your local time
- On offer pages sent to you personally (addresses /oferta/...): the moment the offer is opened, so we can contact you at a suitable time. We do not use cookies for this and we store nothing on your device.
- If you use our store check: we only read the public page of the address you enter. We do not log in to any account.
2. Why we use it and on what legal basis
- Your request and the contract (Art. 6(1)(b) GDPR) — to answer you, prepare the plan and quote you asked for, deliver the services, invoice and provide support
- Legitimate interest (Art. 6(1)(f)) — for security, abuse prevention and improving our services
- Legal obligation (Art. 6(1)(c)) — for invoicing, accounting and tax reporting
- Consent (Art. 6(1)(a)) — for analytics and marketing cookies and for marketing messages you asked for
3. How long we keep it
- Billing data: 10 years, as required by Romanian accounting law
- Contact data from enquiries: 3 years from the last contact
- Google Analytics statistics: 14 months at most
- Data used for marketing: until you withdraw consent
4. Who we share data with
We never sell your data. It can be seen only by those who help us do the work:
- Hosting and forms: Vercel (website hosting, cookieless statistics)
- Analytics and advertising, only with your consent: Google (Analytics 4, Google Ads), Microsoft (Clarity)
- Communication: Google (email), Resend (sending confirmation emails), Telegram (internal notifications about the enquiries we receive), WhatsApp (if you choose to write to us there), Calendly (scheduling)
- Payments and invoicing: Stripe (card payment), Oblio (invoicing software)
- Work software and collaborators: providers of writing, analysis and automation software, the specialists we work with and our accountant, all bound by confidentiality
- Public authorities: only where there is a legal obligation (tax authority, courts)
Some of these providers also process data outside the European Economic Area, mainly in the United States. In those cases the transfer takes place with the safeguards required by the GDPR: the EU–US Data Privacy Framework, where the provider is certified, or the European Commission’s standard contractual clauses.
5. Your rights
Under the GDPR you have the following rights:
- Access — to know what data we hold about you
- Rectification — to have inaccurate data corrected
- Erasure (“right to be forgotten”) — within the limits of our legal obligations
- Restriction — to stop processing for certain purposes
- Portability — to receive your data in a structured format
- Objection — especially to direct marketing
- Withdrawal of consent — at any time, for processing based on consent
To exercise your rights, write to selleasy.romania@gmail.com. We reply within 30 days at most.
You have the right to lodge a complaint with the data protection authority in your country (in Ireland the Data Protection Commission, in the United Kingdom the ICO) or with the Romanian authority, ANSPDCP: dataprotection.ro.
6. Cookies
We use cookies and similar technologies in three ways:
- Essential — the site works without cookies of its own. We only remember your cookie choice, in your browser’s local storage.
- Analytics (Google Analytics 4 and Microsoft Clarity) — measure visits and how pages are used: clicks, scrolling, anonymised session recordings. They start only after you press “Accept”.
- Marketing (Google Ads) — to measure campaigns and show relevant ads. They start only with your consent.
Microsoft Clarity is provided by Microsoft Ireland Operations Limited and is used only to understand how visitors use the site. We do not use it to identify individuals, and the script is not loaded at all if you decline cookies. See the Microsoft privacy statement.
We use Google Consent Mode v2: without your consent, no analytics or marketing cookie is activated. Until then, the Google tag only sends cookieless signals. Separately, Vercel Web Analytics counts visits without cookies and without following you from one site to another. You can change your choice at any time from the “Cookie settings” button in the footer.
7. Security
We apply reasonable technical and organisational measures to protect data: HTTPS encryption (HSTS preload), regular backups, restricted access and two-factor authentication on accounts at critical providers. No system is 100% secure, but we treat security as a priority.
8. Minors
Our services are intended exclusively for people over 18. We do not knowingly collect data from minors.
9. Changes
This policy may be updated. The current version is always available at selleasy.ro/en/privacy-policy. Significant changes are announced by email to active clients.
10. Contact
For any question about your data: selleasy.romania@gmail.com or +40 785 735 820.