This page complements our Privacy Policy and Cookie Policy. Where the Privacy Policy describes what data we collect and why, this page focuses on the rights the GDPR gives you and the practical steps to exercise them.
Your data subject rights
Under the GDPR you have the following rights regarding the personal data we hold about you:
- Right of access. You can ask us to confirm whether we process your personal data and to receive a copy of that data along with information about how it is used.
- Right to rectification. You can ask us to correct personal data that is inaccurate or to complete data that is incomplete.
- Right to erasure ("right to be forgotten"). You can ask us to delete your personal data where there is no overriding legal reason for us to keep it.
- Right to restriction of processing. You can ask us to limit how we use your personal data in certain circumstances, for example while we verify its accuracy.
- Right to data portability. You can ask to receive the personal data you provided to us in a structured, commonly used, machine-readable format, and to have it transmitted to another controller where technically feasible.
- Right to object. You can object to processing based on our legitimate interests, and you can object at any time to the use of your data for direct marketing.
- Right to withdraw consent. Where we rely on your consent (for example, non-essential analytics and marketing cookies), you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
- Rights related to automated decision-making. We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing.
How to submit a request
To exercise any of the rights above, send a request to the data controller, MARKETING PRO EUROPE S.R.L. (Bulevardul Theodor Pallady, Nr. 66A, Bl. 10, Etaj 7, Ap. 92, Sector 3, Bucharest, Romania), through our contact page or email us at privacy@marketingpro.group. Please tell us which right you want to exercise and include enough detail for us to locate your data. We may ask you for additional information to verify your identity before we act on a request — this protects you against unauthorised disclosure.
Response time. We will respond to your request within one month of receipt. If your request is complex or you have made a number of requests, we may extend this period by up to two further months and will let you know within the first month if that is the case. Exercising your rights is free of charge, although we may charge a reasonable fee or decline to act on requests that are manifestly unfounded or excessive.
Legal bases we rely on
We only process personal data when we have a lawful basis to do so. The bases we rely on are:
- Consent. For non-essential cookies and analytics, and for optional marketing communications. You can withdraw consent at any time.
- Contract. To respond to enquiries, deliver our services, and manage our engagement with clients.
- Legitimate interests. To operate, secure, and improve our website and services, where those interests are not overridden by your rights and freedoms.
- Legal obligation. To comply with accounting, tax, and other legal requirements.
Processors and third parties
We use carefully selected third-party providers ("processors") who process personal data on our behalf and under contract. They may only use your data on our instructions and must keep it secure. These include:
- Payment processing. Payment and subscription providers process billing details to take payments. We do not store full card details ourselves.
- Analytics and advertising. Analytics and tag-management providers help us understand site usage and measure campaign performance. These run only where you have given consent — see our Cookie Policy for details and controls.
- Hosting and infrastructure. Hosting and email providers store and transmit data needed to run the website and respond to your requests.
Where a processor is located outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses to protect your data during international transfers.
Your right to complain
If you believe we have not handled your personal data properly, we would like the chance to put it right — please contact us first. You also have the right to lodge a complaint with the data protection authority in the EEA member state where you live, work, or where the alleged infringement occurred.