Privacy Policy

Last updated: November 6, 2025

1. Introduction

This Privacy Policy describes how S.C. MASAT DIGITAL S.R.L. (“the Company,” “We,” or “MASAT”), through the website www.masat.ro and the application https://app.masat.ro, collects, uses, and protects users’ personal data (“You” or “the User”).

The Company complies with Regulation (EU) 2016/679 (GDPR) and national data protection legislation.
 Our goal is to ensure complete transparency regarding how we process your information.

2. Data Controller

Name: S.C. MASAT DIGITAL S.R.L.
 Trade Registry No.: J20/25066544008
 Tax ID (CUI): 52437661
 Registered Office: Ilfov County, Bragadiru City, Ghidiceni Street, No. 59
 E-mail: office@masat.ro
 Website: www.masat.ro / Application: https://app.masat.ro

MASAT — Marketplace Seller Assistant is a registered trademark with OSIM, owned by MASAT Digital SRL.

3. What Personal Data We Collect and Why

We collect only the data strictly necessary for the correct functioning of the platform and its associated services. These include:

  1. a) Identification data: name, surname, e-mail address, password — required for creating and managing your MASAT account.
     b) Company data: company name, tax ID (CUI), billing address — used for invoicing and generating fiscal documents.
     c) Payment data: managed exclusively by Stripe (our secure payment processor), in compliance with PCI-DSS
     d) eMAG API data: if you choose to connect your eMAG seller account, we will retrieve information regarding sales, products, orders, and performance. This data is used solely to display relevant information within your MASAT account.
     e) Traffic and technical data: IP address, browser type, cookies, and other identifiers for security, performance, and analytics purposes.

4. Legal Basis for Processing

  • Contract performance: for account creation, billing, subscription access, and platform functionality.
     • Consent: for marketing, newsletters, or optional communications.
     • Legitimate interest: for fraud prevention, account security, and service improvement.

5. How We Use Your Data

We use personal data to:

  • provide access to the MASAT platform services;

  • process payments and issue invoices;

  • enable connection to the eMAG API and retrieve sales data;

  • provide technical support and assistance;

  • send administrative or marketing communications (only with your explicit consent);

  • improve user experience and platform functionality.

6. Sharing Data with Third Parties

Your data is not sold or transferred without authorization.
 We may share it only with trusted partners who contribute to the delivery of our services:

  • Stripe (payment processor) — for transaction management;

  • Hosting and storage providers within the EU — for application functionality;

  • Email and customer support services — for communication with you;

  • Public authorities, only when required by law.

7. Data Storage and Deletion

Personal data is stored as long as you have an active account on the platform or as necessary for the purposes described.
 After your account is deactivated, your data will be automatically deleted within 30 days.
 eMAG API data and associated reports are owned solely by you and can be deleted manually at any time.

8. Your Rights under GDPR

As a data subject, you have the following rights:

  • Right of access — to request information about the data we hold;

  • Right to rectification — to correct inaccurate data;

  • Right to erasure (“right to be forgotten”);

  • Right to restriction of processing;

  • Right to data portability;

  • Right to object to direct marketing.

To exercise these rights, you can contact us at office@masat.ro.

9. Data Security

We implement appropriate technical and organizational measures to protect data against unauthorized access, loss, or destruction.
 The platform uses secure HTTPS connections, encryption of sensitive data, and servers hosted within the European Union.

10. Data Transfers Outside the EU

Currently, all data is stored and processed within the European Union.
 If in the future we collaborate with partners outside the EU, we will ensure they comply with GDPR standards, including through Standard Contractual Clauses approved by the European Commission.

11. Cookie Policy

The website www.masat.ro uses essential technical cookies for operation, as well as analytical cookies (e.g., Google Analytics) to improve user experience.
 Upon your first visit, you will be informed and asked for consent to use non-essential cookies.
 Full details are available in the separate Cookie Policy.

12. Contact and Complaints

For any questions or requests regarding data protection, you can contact us at:
 E-mail: office@masat.ro
 Address: Ilfov County, Bragadiru City, Ghidiceni Street, No. 59

If you believe your rights have been violated, you can file a complaint with the National Authority for the Supervision of Personal Data Processing (ANSPDCP) — www.dataprotection.ro.

13. Changes to the Privacy Policy

We reserve the right to periodically update this Privacy Policy.
 The updated version will be published on our website, and the date of the last modification will appear at the top of the document.