Privacy policy

The website maststudio.ro is operated by MAST Consult S.R.L., with its registered office at Str. Victor Valcovici 19, cod 300503, Timișoara, județul Timiș, CUI RO49626121, trade register number J2024000723352, referred to below as “MAST Studio”.

For questions about your data, you can contact us at contact@maststudio.ro.

There are no user accounts on this website. We process the data you choose to send us: through the quote request form (the type of project, the address of your current website if you fill it in, and your phone number or email address), by email or by WhatsApp (for example your name, contact details, company and information about the project).

If you send an application on the Careers page, we receive your name, email, phone (optional), the field you are interested in, your links and message, plus the attached CV.

If you enter the “A free website every month” contest, we receive your name, email, phone (optional), the business details (name, legal form, field, city), the link to your post and your answers to the consents in the form. To limit abusive entries we keep an encrypted fingerprint (hash) of the IP address, not the address itself.

When you submit the quote form, the IP address is used temporarily to limit abusive submissions, and together with the request we also receive the campaign parameters (UTM) of the page you came from, if any.

Vercel may process technical data needed to deliver and secure the website, such as the IP address, device type, browser, pages visited and times of access. Vercel Analytics and Speed Insights provide aggregate measurements of use and performance.

We also use Google Tag (Google Analytics 4) to measure visits and conversions, such as submitting a form, opening WhatsApp or calls. Google Tag loads only after you accept the consent banner; until then we send nothing to Google. Vercel Analytics and Speed Insights do not use cookies and run for all visitors. Details are in the Cookie policy.

We process data in order to reply to requests, to prepare and perform contracts, to communicate about projects, to protect the service and to understand the aggregate performance of the website. The legal bases may be pre-contractual steps, performance of a contract, a legal obligation and legitimate interest.

We use CVs only for recruitment, on the basis of your consent. We use contest data to organise the contest, to contact participants and the winner, and for tax obligations, under the rules you accept when you enter. We send the monthly newsletter only if you tick the separate consent; you can unsubscribe at any time from the link in each email.

Data may be accessed, strictly when necessary, by our infrastructure, measurement and communication providers: Vercel (hosting and aggregate statistics), Resend (delivery of emails: form requests, applications, contest messages and the newsletter), the contest database provider (Neon, through Vercel), Google (Google Tag and Google Analytics, according to your choice in the banner) and WhatsApp/Meta when you choose the WhatsApp link. Contest posts are public on Instagram or Facebook, according to your settings. These providers operate under their own policies and may process data outside the European Economic Area using applicable legal mechanisms.

We keep conversations and commercial documents only for as long as needed for the request, the contractual relationship, the defence of rights and accounting or legal obligations. Aggregate technical data follows the periods configured by the providers we use.

We keep CVs for at most 12 months from receipt. For the contest, unconfirmed entries are deleted after 7 days, participants’ data 12 months after the last round they entered, and winners’ data for as long as tax and accounting obligations require. The email address stays on the newsletter list until you unsubscribe.

You may request access, rectification, erasure, restriction, portability or objection, as applicable. You may lodge a complaint with the National Supervisory Authority for Personal Data Processing (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal). To exercise your rights, write to us at the contact address.

We apply reasonable technical and organisational measures, but transmission over the internet cannot be guaranteed as absolutely secure. We may update the policy for legal or technical changes; the current version and its date will remain published here.