Zásady ochrany osobných údajov

1. Scope and data controller

Partenio is currently operated directly by its founder rather than through a separately registered company. Formal company registration details (legal name, registration number, registered address) will be added here once that incorporation is complete.

This Privacy Policy describes what data we collect through the Partenio platform, how we use it, and what rights you have over it, in accordance with Regulation (EU) 2016/679 ("GDPR").

2. What data we collect

We collect the following categories of data, strictly for operating the platform:

• Account data: name, email address, password (stored only as a cryptographic hash, never in plain text).
• Company data: name, industry, categories, country, description, logo, and any contact details you choose to publish.
• Published content: requests, offers, messages sent to other companies or to the support team.
• Billing data: processed entirely by Stripe — Partenio only receives payment confirmation and subscription identifiers, never your full card number.
• Technical data: IP address, browser type, activity logs needed for security and fraud prevention.
• Cookies: a session (login) cookie and a language-preference cookie — see section 5.

3. How we use this data

We use the data we collect to:

• Provide the platform's features — your account, company profile, the matching engine, messaging;
• Process payments for subscriptions and promotions, via Stripe;
• Send transactional emails — account confirmation, password reset, notifications relevant to your account;
• Prevent fraud and abuse, and keep the platform secure;
• Meet applicable legal obligations (for example, accounting records for payments).

4. Legal basis for processing (GDPR)

We process your data on the basis of: contractual necessity (providing the service you requested by creating an account), legitimate interest (security, fraud prevention, improving the platform), and applicable legal obligations (tax records for payments).

5. Cookies

The platform uses one technical session cookie, strictly necessary for login, and one cookie to remember your language preference. Neither is used for advertising tracking or cross-site profiling, and we do not install third-party marketing cookies.

6. Who we share data with

We do not sell your data to any third party. We only share it with the technical providers strictly necessary to run the platform ("processors", in GDPR terms):

• Stripe, Inc. — payment processing and billing;
• Google Cloud Platform (Google Ireland Limited) — application hosting, database, and image storage;
• Our email delivery provider (SendGrid/Twilio) — sending transactional emails (password reset, welcome email).

7. International data transfers

Some of the providers above may process data outside the European Economic Area. In those cases, we rely on the GDPR-recognized transfer mechanisms those providers offer (for example, Standard Contractual Clauses).

8. How long we keep data

We retain your account data for as long as your account is active. If you delete your account, your personal data is deleted or anonymized within a reasonable period, except for information we are legally required to retain longer (for example, financial records for payments, under applicable tax law).

9. Data security

Passwords are stored only as a hash, never in plain text. All communication with the platform is encrypted via HTTPS/TLS. Internal access to data is limited to what is necessary to operate the platform. Company profile fields you mark as private are never exposed through public pages or public APIs.

10. Your rights (under GDPR)

You have the right, at any time, to:

• Request access to your personal data and a copy of it;
• Request correction of incomplete or inaccurate data;
• Request deletion of your data ("the right to be forgotten"), subject to legal exceptions;
• Restrict or object to certain processing;
• Request portability of your data to another provider;
• Lodge a complaint with your national data protection authority (in Romania, ANSPDCP) if you believe your rights have been violated.

11. Children's privacy

Partenio is a platform intended exclusively for businesses and their authorized representatives (B2B) and is not directed at individuals under 18. We do not knowingly collect data from minors.

12. Changes to this Policy

We may update this Policy to reflect legal or functional changes. Material changes will be communicated through the platform or by email at least 14 days before taking effect.

13. Contact

To exercise any of the rights above, or with questions about this Policy, you can reach us at the contact address shown on the platform's Contact page.