Legal, but readable

Privacy Policy

What we collect, why we use it, who receives it, and the choices you control.

This policy applies to visitors of mediabuyingmaxxing.com and people who contact FRACTAL ADVERTISING SRL about its services. It is intended to provide the information required by the GDPR and Romanian privacy and electronic-communications rules.

1. Who is responsible for your data

FRACTAL ADVERTISING SRL is the controller of personal data processed through this website and in connection with enquiries about Media Buying Maxxing.

Privacy contact
hello@mediabuyingmaxxing.com

2. Data we process

  • Enquiries and business communications: your name, business contact details, company, role, message, meeting details and subsequent correspondence when you email us or arrange a call.
  • Website and device data: page paths, referrer, approximate location, browser and device information, interaction events, session identifiers and cookie or local-storage identifiers, but only where the relevant consent is required and granted.
  • Advertising and attribution data: campaign, conversion and interaction events shared with enabled advertising providers after marketing consent.
  • Business-visitor and outreach context: a company slug or domain, contact ID and campaign/send ID may be attached to an outreach link. The link is designed not to contain your name, email address or phone number. With marketing consent, Leadsy/RB2B may also infer or identify the visiting company or professional contact using its own data sources and available advertising identifiers.
  • Consent records: your necessary, measurement and marketing choices and the technical information needed to remember them.
  • Technical records: security, error and server logs that may contain IP address, request time, requested page and browser information.

3. Why we use it and our legal bases

To answer enquiries and prepare or perform a contract: steps requested before entering a contract and performance of a contract.

To operate, secure and troubleshoot the website: our legitimate interests in providing a reliable and secure business website and, where applicable, compliance with legal obligations.

To measure website use and improve our communication: your consent. Measurement technology does not start until measurement consent is granted.

To attribute campaigns, personalise business outreach and use advertising pixels: your consent where information is stored on or read from your device. Any subsequent direct marketing is undertaken only where permitted by applicable electronic-communications and marketing law. You may object to direct marketing at any time.

To manage claims, accounting and legal compliance: legal obligations and our legitimate interests in establishing, exercising or defending legal claims.

4. Cookies and similar technologies

The site separates technologies into three categories. Optional technologies stay off until you choose them.

Necessary

Remember consent choices and support the site's essential operation. These cannot be switched off through the consent tool.

Measurement

PostHog and our on-site journey measurement record page views, clicks, visibility and section progress to help us understand how the site is used.

Marketing

Leadsy/RB2B and any configured Meta, TikTok or Google Ads tags support business-visitor identification, advertising attribution and campaign measurement.

You can accept, refuse or change optional categories at any time. Withdrawal does not affect processing that took place before withdrawal. Removing consent cannot retract data already sent to a provider, but it stops the site from loading the optional tools on future page loads.

5. Who receives data

Depending on your choices and how you contact us, recipients may include:

  • website hosting, content delivery, security and technical-support providers;
  • email, calendar and business-communication providers used to handle your enquiry;
  • PostHog for consented measurement (configured with its EU service and a first-party collection domain);
  • Leadsy/Instantly and its RB2B technology for consented business-visitor identification;
  • Meta, TikTok and Google where their advertising tags are configured and you grant marketing consent;
  • professional advisers, accountants, auditors, public authorities or courts when required by law or necessary for legal claims.

We do not sell personal data. Some providers may act as independent controllers for their own purposes under their published terms.

6. International transfers

Some providers or their group companies may process data outside Romania or the European Economic Area. Where that happens, we rely on a lawful transfer mechanism, such as an adequacy decision or European Commission Standard Contractual Clauses, together with supplementary safeguards where required. You may contact us for information about the safeguards relevant to your data.

7. How long we keep data

We retain data only for as long as needed for the purpose described above. Enquiry and client correspondence is generally kept for the duration of the relationship and afterwards for the applicable limitation and accounting periods. Consent records are kept while needed to demonstrate and respect your choice. Analytics, advertising and business-visitor records follow the configured retention period and the relevant provider's retention controls. Security logs are kept for a limited period unless needed to investigate an incident or legal claim. We delete or anonymise data when it is no longer required.

8. Your rights

Subject to the conditions in the GDPR, you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You have an unconditional right to object to direct marketing. Where processing relies on consent, you can withdraw it at any time without affecting earlier lawful processing. You also have the right not to be subject to a solely automated decision that produces legal or similarly significant effects; this website does not make such decisions.

Send requests to hello@mediabuyingmaxxing.com. We may ask for reasonable information to confirm your identity.

9. Security, third-party links and changes

We use proportionate organisational and technical measures intended to protect personal data. No internet transmission or storage system can be guaranteed completely secure.

The site may link to third-party websites. Their operators control their own processing, and their privacy notices apply when you visit them.

We may update this policy when our services, providers or legal obligations change. Material changes will be highlighted where appropriate.