Privacy policy

Who processes your data

myiasi.online is an editorial information portal about Iași. The operator can be reached at contact@myiasi.online or through the contact page.

We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Romanian law.

What we collect

We collect as little as possible. Specifically:

• **Data you send us** — when you fill in the contact form or the business listing form: your name, email address, optionally a phone number, and your message. These reach us via the Web3Forms service and land in our mailbox.
• **Reviews** — if you leave a review for a venue, we store the text, the rating and the display name you choose.
• **Technical and usage data** — IP address (processed by our providers), browser and device type, pages visited. These reach us only in aggregate, through Google Analytics, and only if you accepted cookies.
• **Your preferences** — your chosen language and your cookie decision, stored locally in your browser.

Our legal basis

Every processing activity has a clear basis:

• **Your consent** (Art. 6(1)(a) GDPR) — for analytics and advertising cookies, including Google Analytics and the Meta Pixel. You can withdraw it at any time, as described in our cookie policy.
• **Performance of your request** (Art. 6(1)(b) GDPR) — when you write to us, we use your data solely to reply.
• **Legitimate interest** (Art. 6(1)(f) GDPR) — for site security, abuse prevention and review moderation.

Who we share it with

We do not sell your data to anyone. We share it only with the providers that make the site work, each acting as a processor or independent controller:

• **Supabase** — hosts the database holding site content and reviews.
• **Web3Forms** — delivers contact form messages to our email.
• **Hostinger** — hosts the web application.
• **Google (Analytics, AdSense)** — aggregate statistics and advertising, only with your consent.
• **Meta Platforms** — the Meta Pixel, for campaign measurement, only with your consent.
• **Stay22 and GetYourGuide** — the accommodation and tours widgets embedded in our pages.
• Some of these providers may process data outside the European Union. Where that happens, the transfer relies on the mechanisms provided by the GDPR, such as standard contractual clauses.

How long we keep it

We keep messages received through our forms for as long as needed to resolve your request, and afterwards for a reasonable period for internal records. Reviews stay published for as long as the venue is listed, or until you ask us to remove them.

Aggregate analytics data is retained according to Google Analytics policies. Preferences stored in your browser remain until you clear them.

Your rights

Under the GDPR you have the following rights, which you can exercise by writing to contact@myiasi.online:

• **Access** — to find out what data we hold about you.
• **Rectification** — to have inaccurate data corrected.
• **Erasure** — to have your data deleted, where we have no legal obligation to keep it.
• **Restriction and objection** — to limit or object to certain processing.
• **Portability** — to receive your data in a structured format.
• **Withdrawal of consent** — at any time, without affecting the lawfulness of processing before withdrawal.
• If our response does not satisfy you, you may lodge a complaint with the Romanian data protection authority (ANSPDCP), dataprotection.ro.

Children

The site is aimed at a general audience and does not knowingly collect data from children under 16. If you notice such a case, write to us and we will delete the data.