PRIVACY POLICY

Star Products SRL (trading as Starmaster Marketing)

Last Updated: February 14, 2026

1. INTRODUCTION

Star Products SRL, trading as Starmaster Marketing (“we,” “us,” or “our”), is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website (www.starmastermarketing.com) and services.

Data Controller: - Company Name: Star Products SRL - Trading Name: Starmaster Marketing - Website: www.starmastermarketing.com - Contact: starproducts.office@gmail.com - Address: Str. Bratislava 18 Ap. B10, Constanta, Romania

This policy complies with the EU General Data Protection Regulation (GDPR) and applicable Romanian data protection laws.

2. LEGAL BASIS FOR PROCESSING

We process your personal data under the following legal grounds:

Consent: When you provide explicit consent (e.g., newsletter signup, cookie preferences)
Contract Performance: To deliver services you’ve requested or purchased
Legal Obligation: To comply with accounting, tax, and other legal requirements
Legitimate Interests: For business operations, fraud prevention, and service improvement (where not overridden by your rights)

3. WHAT PERSONAL DATA WE COLLECT

3.1 Information You Provide Directly

When you use our services or contact us, we may collect:

Contact Information: - Full name - Email address - Phone number - Company name - Country and city - Postal/business address (if applicable)

Service Request Information: - Project descriptions - Service preferences - Budget information - Business requirements - Any information you provide in forms or communications

Payment Information: - Billing address - Payment method details (processed through secure third-party payment processors) - Invoice and transaction history

Account Information (if applicable): - Username and password (encrypted) - Account preferences - Communication preferences

3.2 Information Collected Automatically

Technical Data: - IP address - Browser type and version - Device type and operating system - Time zone setting and location - Browser plug-in types and versions - Referring/exit pages - Date and time stamps

Usage Data: - Pages visited - Time spent on pages - Links clicked - Search terms used - Services viewed - Navigation patterns

Cookies and Tracking: - See our separate Cookie Policy for detailed information about cookies we use

3.3 Information from Third Parties

We may receive information from: - Social media platforms (if you interact with us there) - Public databases and business directories - Analytics providers - Payment processors - Marketing partners (with appropriate consent)

4. HOW WE USE YOUR PERSONAL DATA

We use your information for the following purposes:

4.1 Service Delivery

Processing and fulfilling service orders
Providing customer support
Communicating about your projects
Delivering purchased services (web design, SEO, PR, etc.)
Managing client accounts and relationships

4.2 Business Operations

Processing payments and preventing fraud
Maintaining business records and accounts
Improving our services and website
Conducting market research and analysis
Training our staff

4.3 Marketing and Communications

Sending promotional emails (with consent)
Sharing company updates and newsletters
Conducting customer surveys
Personalizing your experience on our website
Retargeting advertising (with cookie consent)

4.4 Legal and Security

Complying with legal obligations
Protecting against fraud and security threats
Enforcing our terms and conditions
Resolving disputes
Responding to legal requests from authorities

5. DATA SHARING AND DISCLOSURE

We do not sell your personal data. We may share your information with:

5.1 Service Providers

We work with trusted third-party service providers who process data on our behalf:

Hosting Providers: To store website and data
Payment Processors: To process transactions (e.g., Stripe, PayPal)
Email Service Providers: For communication and newsletters
Analytics Providers: To understand website usage (e.g., Google Analytics)
Cloud Storage: For secure data backup and storage
Marketing Tools: For email campaigns and advertising
Customer Support Tools: For managing client communications

All processors are bound by Data Processing Agreements (DPAs) and contractually obligated to protect your data.

5.2 Legal Requirements

We may disclose your information when required by law: - In response to court orders or legal processes - To comply with regulatory requirements - To protect our rights, property, or safety - To prevent fraud or criminal activity - With your explicit consent

5.3 Business Transfers

If our company is sold, merged, or restructured, your data may be transferred to the new owners, who will be required to use it in accordance with this Privacy Policy.

6. INTERNATIONAL DATA TRANSFERS

Your data may be transferred and processed in countries outside the European Economic Area (EEA), including:

United States (for services like Google Analytics, payment processors)
Other countries where our service providers operate

When we transfer data internationally, we ensure appropriate safeguards are in place: - Standard Contractual Clauses (SCCs) approved by the European Commission - Adequacy Decisions for countries deemed to have adequate data protection - Binding Corporate Rules for transfers within multinational organizations - Your explicit consent where required

7. DATA RETENTION

We retain your personal data only as long as necessary for the purposes outlined in this policy:

Data TypeRetention Period

Client project data7 years (legal/accounting requirement)

Marketing communicationsUntil consent is withdrawn

Website analytics26 months (Google Analytics default)

Contact form submissions3 years unless converted to client

Payment records7 years (accounting requirement)

Account dataUntil account deletion requested

Cookie dataSee Cookie Policy

After the retention period, we securely delete or anonymize your data. You may request earlier deletion subject to our legal obligations.

8. YOUR RIGHTS UNDER GDPR

As a data subject in the EU, you have the following rights:

8.1 Right to Access

You can request a copy of the personal data we hold about you.

8.2 Right to Rectification

You can request correction of inaccurate or incomplete data.

8.3 Right to Erasure (“Right to be Forgotten”)

You can request deletion of your data in certain circumstances: - Data no longer needed for its original purpose - You withdraw consent - You object to processing and we have no overriding legitimate grounds - Data was unlawfully processed - Deletion is required by law

8.4 Right to Restrict Processing

You can request we limit how we use your data in certain situations.

8.5 Right to Data Portability

You can request your data in a structured, machine-readable format to transfer to another service.

8.6 Right to Object

You can object to: - Processing based on legitimate interests - Direct marketing (including profiling) - Processing for research or statistical purposes

8.7 Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that significantly affects you.

8.8 Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time.

8.9 Right to Lodge a Complaint

You can file a complaint with: - Romanian Supervisory Authority: ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal) - Website: www.dataprotection.ro - Address: B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, București - Email: anspdcp@dataprotection.ro - Or your local EU supervisory authority

To Exercise Your Rights: Contact us at: starproducts.office@gmail.com We will respond within 30 days (extendable by 60 days for complex requests).

9. DATA SECURITY

We implement appropriate technical and organizational measures to protect your data:

9.1 Technical Measures

SSL/TLS encryption for data transmission
Encrypted data storage
Regular security updates and patches
Firewall protection
Intrusion detection systems
Secure password policies (hashing and salting)
Regular security audits

9.2 Organizational Measures

Limited employee access on a need-to-know basis
Staff training on data protection
Confidentiality agreements with employees and contractors
Data Protection Impact Assessments (DPIAs) for high-risk processing
Incident response procedures
Regular backups with encryption

9.3 Data Breach Response

In the event of a data breach affecting your rights and freedoms: - We will notify the Romanian supervisory authority within 72 hours - We will notify affected individuals without undue delay - We will document the breach and our response

10. CHILDREN’S PRIVACY

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately so we can delete it.

11. COOKIES AND TRACKING

We use cookies and similar technologies. For detailed information, please see our Cookie Policy (separate document).

Summary: - Essential cookies: Required for website functionality - Analytics cookies: Help us understand how you use our site - Marketing cookies: Used for advertising and personalization - Third-party cookies: Set by external services we use

You can manage your cookie preferences through our cookie consent banner or your browser settings.

12. THIRD-PARTY LINKS

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to read their privacy policies before providing any personal data.

13. MARKETING COMMUNICATIONS

13.1 Email Marketing

If you consent to receive marketing emails: - We will send newsletters, promotions, and service updates - You can unsubscribe at any time via the link in every email - We use double opt-in for newsletter subscriptions

13.2 Social Media

We may use your data to show targeted ads on social media platforms (with your consent via cookies).

14. AUTOMATED DECISION-MAKING AND PROFILING

We do not use automated decision-making or profiling that produces legal effects or significantly affects you without human intervention.

We may use basic analytics for: - Website personalization - Service recommendations - Marketing segmentation

You have the right to object to such processing.

15. UPDATES TO THIS POLICY

We may update this Privacy Policy periodically to reflect: - Changes in our practices - Legal or regulatory requirements - New services or features

How we notify you: - Updated “Last Updated” date at the top - Prominent notice on our website for significant changes - Email notification for material changes (if you’re a client or subscriber)

Continued use of our services after changes constitutes acceptance of the updated policy.

16. CONTACT US

For questions, concerns, or to exercise your rights:

Data Controller: Star Products SRL (Starmaster Marketing)

Contact Information: - Email: starproducts.office@gmail.com - Website: www.starmastermarketing.com - Address: Str. Bratislava 18 Ap. B10, Constanta, Romania - Phone: +40723828517

Data Protection Officer (if applicable): - Email: starproducts.office@gmail.com

Response Time: We aim to respond to all inquiries within 5 business days and fulfill requests within 30 days.

17. SPECIFIC SERVICES DATA HANDLING

17.1 Web Design Services

We collect website content, images, and brand materials you provide
We may access your hosting and domain accounts (with authorization)
Project files are retained for 7 years

17.2 SEO Services

We access your website analytics and search console data
We collect competitor and keyword research data
Performance reports are retained for the service period plus 3 years

17.3 PR Services

We collect media contact information and press releases
Published articles remain public but your involvement data is protected
Media lists are kept confidential

17.4 Reputation Control

We monitor public online mentions of your business
We collect review data from public platforms
Reputation reports are confidential and retained per contract

17.5 Revival Services (Photo Animation)

We collect personal photos and audio recordings you provide
Sensitive personal data requires explicit consent
Source materials are stored securely and deleted upon request after project completion

17.6 GDPR Consulting Services

We conduct audits that may involve sensitive business and personal data
All data is covered by confidentiality agreements
Audit data is retained for 7 years as evidence of compliance assistance

APPENDIX: DEFINITIONS

Personal Data: Any information relating to an identified or identifiable natural person.

Processing: Any operation performed on personal data (collection, storage, use, disclosure, deletion, etc.).

Data Controller: Entity that determines purposes and means of processing (Star Products SRL).

Data Processor: Entity that processes data on behalf of the controller (our service providers).

Data Subject: The individual whose personal data is being processed (you).

Consent: Freely given, specific, informed, and unambiguous indication of agreement.

GDPR: General Data Protection Regulation (EU) 2016/679.