Privacy Policy

1. Introduction

1.1 This Privacy Policy ("Policy") is established by Midoweb, a company registered under the laws of Romania, with its principal office at Dimitrie Pompeiu Blvd. 5-7, Bucharest, 020335, Romania, and registered with National Trade Register Office under number 31320404. We can be contacted via our Contact Form.

1.2 Midoweb is dedicated to protecting your privacy. This Policy outlines how we handle your personal data, which includes any information that identifies or can identify you ("Personal Data"), through the Midoweb websites ("Websites"). The Websites are intended for users aged 16 and over. We do not knowingly collect data from children under 16.

1.3 If you are under 16 (or 13 in the US), please refrain from using our Websites. If we discover that we have collected personal data from a child without parental consent, we will delete that data. If you believe we have any information from or about a child under the specified age, please contact us via our Contact Form.

1.4 This Privacy Policy is provided in English, with translations available upon request.

1.5 This Policy is structured as follows:
  • Introduction
  • Processing of Personal Data
  • Purposes of Processing
  • Legal Basis of Processing
  • Recipients of Personal Data
  • Retention of Personal Data
  • Safeguarding Personal Data
  • Your Rights
  • Amendments and Questions

2. Processing of Personal Data

2.1 As a data controller under the General Data Protection Regulation (GDPR), Midoweb determines the purposes and methods for processing your personal data. We do not engage in automated decision-making.

2.2 When you access our Websites, we may automatically collect:
  • Anonymized IP address
  • Device identifier
  • Browser and operating system information
  • Query strings
  • Website preferences
  • Location and time zone

2.3 Generally, you can use our Websites without submitting personal data, except for the automatically collected information. If you contact us via our Contact Form, we may process:
  • Name
  • Company name
  • Email address
  • Any other data you provide

2.4 We use Google reCAPTCHA to protect our contact form from spam. It collects data such as:
  • Google cookies from the past 6 months
  • Mouse clicks and movements
  • Scrolling behavior
  • Browser and system information
  • IP address

This data is analyzed by Google for security purposes and not for personalized advertising. Further details are available in the Google reCAPTCHA Privacy Policy.

2.5 We advise limiting the personal data you provide and discourage sharing sensitive data.

2.6 Third-party services on our Websites may collect data using cookies, ad tags, or beacons. Advertisements from partners (Google) are not personalized but are based on your query, location, or the website topic. We are not responsible for third-party tracking cookies.

More information is available in the Google Privacy Policy.

2.7 Third-party service providers may also collect data to provide analytics and advertising services. Necessary cookies are used for basic website functionality and security. More details are in our Cookie Policy.

3. Purposes of Processing

3.1 We process your personal data to:
  • Provide and improve our services
  • Enhance user experience and add new features
  • Ensure security and protect against threats
  • Communicate with you regarding inquiries
  • Exercise legal rights and manage partner compensation
  • Comply with legal obligations

4. Legal Basis for Processing

4.1 We process your personal data based on:
  • Contract execution: To fulfill our service agreements
  • Legitimate interests: For service improvement, security, and communication
  • Legal obligations: To comply with laws

5. Recipients of Your Personal Data

5.1 Your personal data may be shared with:
  • Service providers: To help us deliver and improve our services
  • Legal authorities: When required by law or to protect our rights
  • Advertising partners: To manage and deliver advertisements without tracking individual behavior

5.1 The third parties receiving or accessing your Personal Data may be located outside the European Economic Area (EEA). When transferring data to countries outside the EEA ("third countries"), we ensure appropriate safeguards are in place. Specifically, we contractually bind recipients of Personal Data using the Standard Contractual Clauses (SCCs) approved by the European Commission. We assess in advance—possibly with the help of recipients in third countries—whether the law or practice of the third country undermines the effectiveness of the SCCs. If necessary, we implement supplementary measures to ensure protection meets EU legal standards

6. Data Retention

6.1 We retain your personal data only as long as necessary for the purposes outlined or as required by law. Data is deleted or anonymized when no longer needed.

7. Safeguarding Your Personal Data

7.1 We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction.

8. Your Rights

8.1 You have the following rights regarding your personal data:

Access
You have the right to request a copy of the personal data we hold about you. This allows you to be aware of and verify the lawfulness of the data processing.

Rectification
You have the right to request the correction of any inaccuracies in your personal data. This includes completing any incomplete data.

Erasure
You have the right to request the deletion of your personal data when:
  • The data is no longer necessary for the purposes for which it was collected.
  • You withdraw your consent (where the processing was based on consent).
  • You object to the processing, and there are no overriding legitimate grounds for processing.
  • The data has been unlawfully processed.
  • The data must be erased to comply with a legal obligation.


Restriction of Processing
You have the right to request the restriction of processing your personal data when:
  • You contest the accuracy of the data.
  • The processing is unlawful, but you oppose erasure.
  • We no longer need the data, but you require it for legal claims.
  • You have objected to the processing, pending verification of legitimate grounds.


Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format. You also have the right to request that we transfer this data to another controller, where technically feasible.

Objection
You have the right to object to the processing of your personal data based on legitimate interests or direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds for processing or for legal claims.

Withdraw Consent
Where processing is based on your consent, you have the right to withdraw your consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

Complaint
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority, particularly in the EU member state of your habitual residence, place of work, or where the alleged infringement occurred.

To exercise any of these rights, please contact us via our Contact Form.

9. Amendments and Questions

9.1 We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this Policy periodically.

9.2 If you have any questions or concerns about this Privacy Policy or our data practices, please contact us via our Contact Form.