Privacy Policy

    This is an English translation provided for convenience. In case of any discrepancy, the Romanian version prevails. Romanian version

    Last updated: 1 February 2026

    1. Identity of the data controller

    The personal data controller is:

    • Name: Wizz Media
    • Registered office: Str. Păcurari 156, Iași, Romania
    • CUI: 52535678
    • Trade Register No.: J2024071449008
    • Email: codrin@wizz-media.com
    • Phone: +40 760 058 595

    Wizz Media complies with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), as well as applicable national legislation (Law No. 190/2018).

    2. Definitions

    • Personal data: any information relating to an identified or identifiable natural person
    • Processing: any operation performed on personal data (collection, storage, use, deletion, etc.)
    • Controller: Wizz Media, which determines the purposes and means of processing
    • Data subject: the natural person whose data is processed
    • Consent: freely given, specific, informed and unambiguous indication of the data subject's wishes
    • Supervisory authority: Romania's National Supervisory Authority for Personal Data Processing (ANSPDCP)

    3. Categories of personal data processed

    We collect and process the following categories of personal data:

    3.1. Data you provide directly:

    • Identification data: first and last name
    • Contact data: email address, phone number
    • Professional data: company name, industry/niche
    • Indicative financial data: estimated budget range
    • Communications: messages sent through contact forms
    • Consent: evidence of consent to data processing

    3.2. Data collected automatically:

    • Technical data: IP address, browser type and version, operating system
    • Usage data: pages visited, time spent on the site, traffic sources
    • Unique identifiers: device IDs (only with explicit consent)

    ⚠️ Data we DO NOT collect:

    We do not collect sensitive data (racial or ethnic origin, political opinions, religious beliefs, genetic or biometric data, health data or data concerning sex life).

    4. Purposes and legal bases for processing

    We process your data for the following purposes, on the legal bases indicated:

    PurposeLegal basis (GDPR Art. 6)
    Responding to enquiries and communicationConsent [Art. 6(1)(a)]
    Sending offers and service informationConsent [Art. 6(1)(a)]
    Providing contracted servicesPerformance of a contract [Art. 6(1)(b)]
    Improving the website and servicesLegitimate interest [Art. 6(1)(f)]
    Tax and legal complianceLegal obligation [Art. 6(1)(c)]
    Fraud prevention and securityLegitimate interest [Art. 6(1)(f)]

    5. Recipients of personal data

    Your data may be accessed by:

    • Wizz Media employees who need access to perform their duties
    • IT service providers: hosting, email, cloud infrastructure (servers in the EU)
    • Analytics providers: anonymised statistics services
    • Public authorities: where legally required

    Transfer safeguards:

    • All providers have signed Data Processing Agreements (DPAs)
    • Data is stored exclusively on servers located in the European Union
    • We do not transfer data outside the EEA (European Economic Area)

    ❌ We DO NOT sell, rent or share your data with third parties for marketing purposes.

    6. Data retention

    We keep data only for as long as necessary for the purposes for which it was collected:

    Data typeRetention period
    Leads and enquiries3 years from last interaction
    Contract data10 years (tax obligation)
    Consent records5 years after withdrawal
    Technical data (logs)90 days

    When the period expires, data is permanently deleted or irreversibly anonymised.

    7. Your rights under the GDPR

    Under the GDPR, you have the following rights:

    📋 Right of access (Art. 15)

    You may request confirmation of processing and a copy of your data.

    ✏️ Right to rectification (Art. 16)

    You may request correction of inaccurate data or completion of incomplete data.

    🗑️ Right to erasure (Art. 17)

    You may request deletion of data (the ‘right to be forgotten’) in certain circumstances.

    ⏸️ Right to restriction (Art. 18)

    You may request restriction of processing in specific situations.

    📦 Right to data portability (Art. 20)

    You may receive your data in a structured format and transfer it to another controller.

    ✋ Right to object (Art. 21)

    You may object to processing based on legitimate interest or for direct marketing.

    ↩️ Right to withdraw consent (Art. 7)

    You may withdraw consent at any time without affecting the lawfulness of prior processing.

    🤖 Rights regarding automated decisions (Art. 22)

    We do not make decisions based solely on automated processing that significantly affect you.

    How to exercise your rights:

    Send a request to codrin@wizz-media.com. We will respond within 30 days. We may request additional information to verify your identity.

    8. Data security

    We implement appropriate technical and organisational measures under GDPR Art. 32:

    • Encryption: Secure HTTPS/TLS connection for all communications
    • Restricted access: Tiered authentication and authorisation system
    • Secure storage: Databases encrypted at rest in the EU
    • Monitoring: Audit logs and anomaly detection
    • Backups: Encrypted backups and recovery procedures
    • Training: Staff trained in data protection

    9. Cookies and similar technologies

    We use cookies in accordance with the ePrivacy Directive and GDPR:

    Essential cookies (no consent required):

    • Session and authentication
    • Security preferences
    • Remembering cookie consent

    Analytics cookies (with consent):

    • Anonymised usage statistics
    • Traffic sources

    You can manage cookie preferences in your browser settings. Disabling essential cookies may affect the site's functionality.

    10. Protection of minors

    Our services are intended for persons aged at least 18 or legal representatives of companies. We do not knowingly collect data from persons under 16. If we learn that we have collected data from a minor, we will delete it immediately.

    11. Right to lodge a complaint

    If you believe your rights have been violated, you have the right to lodge a complaint with the supervisory authority:

    National Supervisory Authority for Personal Data Processing (ANSPDCP)

    • 📍 B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest
    • 📞 Phone: +40.318.059.211
    • 📧 Email: anspdcp@dataprotection.ro
    • 🌐 Website: www.dataprotection.ro

    12. Changes to this policy

    We reserve the right to update this policy. Significant changes will be communicated by email (if we have your address) and/or through a visible notice on the site. We recommend checking this page periodically. The date of the latest update is displayed at the beginning of the document.

    13. Contact and data protection contact

    For any questions about this policy or exercising your rights:

    • 📧 Email: codrin@wizz-media.com
    • 📱 WhatsApp: +40 760 058 595
    • 📝 Form: Contact page

    We will respond to all requests within the legal period of 30 days from receipt of the complete request.