Who we are

Star Media Advertising SRL, tax ID RO21085573, trade register J40/2978/2007, registered in Romania, is the personal data controller responsible for expertizadiamante.ro.

Data protection contact: [email protected].

This policy is prepared in accordance with Regulation (EU) 2016/679 on personal data protection (GDPR) and applicable Romanian legislation.

What we collect and why

Contact forms: name, email, optional phone number, message and sender IP. Purpose: responding to enquiries and keeping correspondence records. Legal basis: contract performance or pre-contractual steps, Article 6(1)(b), and/or legitimate interests, Article 6(1)(f).
Appointments: name, email, phone, details of the item and IP. Purpose: managing appointments and providing the service. Legal basis: contract performance, Article 6(1)(b).
Newsletter subscriptions: email address. Purpose: service, pricing and industry news. Legal basis: explicit consent, Article 6(1)(a). Consent may be withdrawn through any email's unsubscribe link or direct contact.
Technical access logs: IP, browser, operating system, accessed pages and date/time. Purpose: security, diagnostics and attack detection. Legal basis: legitimate interests, Article 6(1)(f).
Cookies and analytics: as described in the Cookie policy.

Retention periods

Contact and appointment information: up to 3 years after the last interaction, then deleted or anonymised.
Form submitters' IP addresses: automatically anonymised after 90 days through a scheduled internal procedure.
Newsletter data: until unsubscribe or an erasure request.
Server logs: up to 90 days, then automatically deleted.
Billing and contractual records: according to accounting and tax obligations, at least 5 years from document issue.

Who receives data

We do not sell, rent or transfer your personal data to third parties for advertising or commercial purposes. Access is limited to what is necessary by:

Technical providers, such as server hosting and transactional email, under data processing agreements and acting as our processors.
Google LLC for Google Analytics 4, only following consent, as explained in the Cookie policy.
Competent public authorities where disclosure is legally required.

International transfers

Google Analytics 4 may transfer data outside the European Economic Area. Google LLC participates in European Commission-approved transfer mechanisms, including Standard Contractual Clauses / Data Privacy Framework. We do not make other international data transfers.

No automated profiling

We do not use your data for automated decisions or profiling within Article 22 GDPR.

Your rights

As a data subject, you have:

Access, Article 15: request a copy of data we hold about you.
Rectification, Article 16: correct inaccurate data or complete missing information.
Erasure, Article 17: request deletion under GDPR conditions.
Restriction, Article 18: temporarily suspend processing in certain situations.
Portability, Article 20: receive data supplied under consent or contract in a structured, commonly used, machine-readable format.
Objection, Article 21: object to legitimate-interest or direct-marketing processing.
Withdrawal of consent, Article 7: withdraw at any time without affecting earlier lawful processing.

To exercise a right, contact [email protected]. We will respond within a maximum of 30 calendar days.

Complaints

If you believe your rights have been infringed, you may complain to the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), Bd. Gheorghe Magheru 28–30, Sector 1, Bucharest, dataprotection.ro.

Changes to this policy

This policy may be revised periodically. The updated version will appear here with its last modification date. Please consult it on significant visits.