GDPR

Privacy Policy

How BunaMia collects, uses, and protects your personal data.

Last updated: 10 May 2026
1

Data Controller

BunaMia ("we", "us", "our") is the data controller responsible for your personal data.

2

Data We Collect

We collect the following personal data when you register or use our platform:

  • Full name
  • Email address
  • Phone number
  • Organisation name (optional)
  • Content of listings and messages you post
  • Technical data: IP address, browser, device
3

Purposes and Legal Basis

PurposeLegal basis (GDPR Art. 6)
Creating and managing your accountPerformance of a contract (Art. 6(1)(b))
Publishing and displaying listingsPerformance of a contract (Art. 6(1)(b))
Sending service notificationsLegitimate interest (Art. 6(1)(f))
Improving platform security and performanceLegitimate interest (Art. 6(1)(f))
Compliance with legal obligationsLegal obligation (Art. 6(1)(c))
4

Data Retention

We retain your personal data for as long as your account is active. If you delete your account, your personal data is deleted within 30 days, unless we are required by law to retain it longer.

5

Data Sharing

We do not sell your personal data. We may share it with trusted service providers (e.g. hosting, email delivery) who are bound by data processing agreements and process data only on our instructions. We do not transfer personal data outside the EEA without appropriate safeguards.

6

Your Rights

Under the GDPR you have the following rights:

Right of access
Request a copy of your personal data.
Right to rectification
Correct inaccurate or incomplete data.
Right to erasure
Request deletion of your data ("right to be forgotten").
Right to restriction
Request that we limit how we process your data.
Right to data portability
Receive your data in a structured, machine-readable format.
Right to object
Object to processing based on legitimate interest.
Right to withdraw consent
Withdraw consent at any time without affecting prior processing.

To exercise any of these rights, contact us at info@bunamia.ro. We will respond within 30 days.

7

Right to Lodge a Complaint

If you believe we are processing your personal data unlawfully, you have the right to lodge a complaint with the supervisory authority in your country of residence. A list of EU data protection authorities is available at edpb.europa.eu.

8

Cookies

We use only technically necessary cookies required for authentication and session management. We do not use tracking or advertising cookies.

9

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via a notice on the platform. The date of the latest revision is shown at the top of this page.