Privacy Policy

1 Who is responsible for your data #

The controller of your personal data is NIȚĂ IONUȚ-LAURENȚIU PERSOANĂ FIZICĂ AUTORIZATĂ, Trade Register no. F2024014821004, tax ID 50834649, registered office at B-dul Bucureștii Noi nr. 136, parter, ap. 5, Sector 1, București, România, the operator of selfpage.link.

For any privacy question or request, write to us at [email protected].

We process personal data in line with Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”), Romanian Law no. 190/2018 and Law no. 506/2004 on electronic communications.

2 Who this policy covers #

• Account holders: people who register, buy a plan or are invited to a team.
• Visitors of selfpage.link and of the bio pages, blogs, short links and QR codes created by our users.
• People who contact us, for example through the contact or report forms.

When users collect data from their own visitors through their pages (for example through a contact or newsletter block), the user decides what to collect and why. For that data, the user is the controller and we act as their processor.

3 The data we collect #

4 Why we use your data and on what legal basis #

We do not make decisions based solely on automated processing that produce legal or similarly significant effects for you. Automatic security checks (for example scanning links for malware) may block a link; you can always ask a person to review it.

5 Who we share data with #

We never sell your personal data. We share it only when needed, with:

• Payment providers: our secure checkout and licensed payment processors, to take payments.
• Infrastructure providers: hosting, storage, backups and email delivery, under data processing agreements.
• Security and anti-abuse services: CAPTCHA services (for example Google reCAPTCHA or Cloudflare Turnstile) and link-safety checks, when enabled.
• Sign-in and avatar services: Google, Facebook or X when you choose social sign-in, and Gravatar, which may show a profile picture linked to a hash of your email address.
• Analytics: Google Analytics on selfpage.link, only if you accept analytics cookies.
• Authorities, courts and advisers, when required by law or to establish, exercise or defend legal claims.

Information on a bio page, blog or public link is visible to anyone, by design.

6 International transfers #

We store and process your personal data in Romania, in the European Union. Some providers listed above (for example Google, Meta or Cloudflare) may process data outside the European Economic Area. In that case we rely on an adequacy decision, such as the EU-US Data Privacy Framework, or on the European Commission's Standard Contractual Clauses, with additional safeguards where needed.

7 How long we keep data #

• Account data and content: for as long as your account is active. When you delete your account, we delete or anonymise it, except where we must keep it longer by law.
• Visitor statistics: for the data retention period of the page or link owner's plan, then deleted or aggregated.
• Billing and accounting records: for the period required by Romanian tax and accounting law.
• Security logs: for a limited period, normally no longer than needed to investigate incidents.
• Disputes: we may keep relevant data for up to 3 years when a complaint or legal claim is reasonably likely.
• Marketing consent: until you withdraw it.

8 How we protect your data #

We use technical and organisational measures appropriate to the risk, including encrypted connections (HTTPS), hashed passwords, optional two-factor authentication, access controls based on need, regular backups and monitoring for abuse. No system is completely secure; if a breach is likely to put your rights at risk, we will inform you and the authority as required by law.

9 Your rights #

Under the GDPR you have the right to:

• access your data and receive a copy;
• rectify inaccurate or incomplete data;
• erase your data (“right to be forgotten”);
• restrict processing in certain cases;
• data portability: receive your data in a structured, machine-readable format;
• object to processing based on legitimate interest, and to direct marketing at any time;
• withdraw consent at any time, without affecting earlier processing.

Many of these you can do yourself in your account settings. Otherwise, write to [email protected]. We answer within one month; this can be extended by two more months for complex requests, in which case we will tell you. We may ask you to confirm your identity.

If your data was collected by a Selfpage user through their own page, please contact that user first; we will help them answer you.

10 Complaints #

We would like to solve any concern first, so please contact us. You also have the right to complain to the data protection authority of your country or to the Romanian authority:

National Supervisory Authority for Personal Data Processing (ANSPDCP)
B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, postal code 010336, Bucharest, Romania
Phone: +40.318.059.211 or +40.318.059.212
Email: [email protected] · dataprotection.ro

11 Children #

The Service is intended for people aged 18 or over. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

12 Changes to this policy #

We may update this policy when the Service or the law changes. We will publish the new version here with a new date and inform you of important changes by email or in the dashboard. This policy is available in Romanian and English; if the versions differ, the Romanian version prevails.

13 Contact #

NIȚĂ IONUȚ-LAURENȚIU PERSOANĂ FIZICĂ AUTORIZATĂ
B-dul Bucureștii Noi nr. 136, parter, ap. 5, Sector 1, București, România
Trade Register no. F2024014821004 · Tax ID 50834649
Email: [email protected]

You can also reach us through the contact page.