This policy explains how S.C. Greieras Music Studio SRL ("the Controller") collects, uses and protects personal data of visitors and clients of the Site shopifyexpert.ro, in accordance with Regulation (EU) 2016/679 (GDPR) and Romanian Law 190/2018.
1. Data we collect
1.1. Data you provide directly
- First name, last name, company name
- Email address
- Phone number
- VAT ID and billing details (for clients purchasing services)
- Content of messages you send us (contact forms, WhatsApp, email)
1.2. Data collected automatically
- IP address, browser type, operating system, device
- Pages visited, visit duration, traffic source
- Cookies and similar technologies (see section 6)
2. Purpose of processing
- Contract execution (Art. 6(1)(b) GDPR) — for delivering ordered services, invoicing, support
- Legitimate interest (Art. 6(1)(f)) — for security, fraud prevention, service improvement
- Legal obligation (Art. 6(1)(c)) — for tax reporting, accounting
- Consent (Art. 6(1)(a)) — for marketing, newsletters, non-essential cookies
3. Retention period
- Billing data: 10 years (legal tax obligation)
- Lead contact data: 3 years from last contact
- Analytics cookies: 14 months (per GA4 settings)
- Marketing data: until consent withdrawal
4. Who we share data with
We never sell your data. We only share it with:
- Service providers: Google (Analytics, Ads), Meta (Pixel), Vercel (hosting), Calendly (scheduling), invoicing software, payment processors
- Public authorities: only if there is a legal obligation
- Subcontractors: developers, accountants, under strict confidentiality
All partners are selected to comply with GDPR. For transfers to the USA, we use Data Privacy Framework certified providers.
5. Your rights
Under GDPR, you have the following rights:
- Access — to know what data we have about you
- Rectification — to correct inaccurate data
- Erasure ("right to be forgotten") — within legal limits
- Restriction — to stop processing for certain purposes
- Portability — to receive data in a structured format
- Objection — especially to direct marketing
- Consent withdrawal — anytime, for consent-based processing
To exercise your rights, write to: selleasy.romania@gmail.com. We respond within a maximum of 30 days.
You have the right to file a complaint with your national data protection authority. In Romania: ANSPDCP — dataprotection.ro.
6. Cookies
We use cookies to improve your site experience. Main categories:
- Essential — necessary for site functionality. Cannot be disabled.
- Analytics (Google Analytics 4) — measure traffic. Activated only with your consent.
- Marketing (Google Ads, Meta Pixel, TikTok Pixel) — for relevant ads. Activated only with consent.
We implement Google Consent Mode v2 — no tracking cookie is activated without your explicit consent. You can change settings anytime through the cookie banner.
7. Security
We apply reasonable technical and organizational measures to protect data: HTTPS encryption (HSTS preload), regular backups, restricted access, 2FA accounts at critical providers. No system is 100% secure, but we treat security as a priority.
8. Minors
Our services are intended exclusively for persons over 18 years of age. We do not intentionally collect data from minors.
9. Changes
This policy may be updated. The current version is always available at shopifyexpert.ro/en/privacy-policy. Significant changes will be notified by email to active clients.
10. Contact
For any GDPR questions: selleasy.romania@gmail.com or +40 785 735 820.