Privacy Policy
Last updated: 25 October 2026
1. Introduction
MesterBun SRL ("we", "our" or the "Company") respects the privacy of your personal data and is committed to protecting it in accordance with the General Data Protection Regulation (GDPR) - Regulation (EU) 2016/679 and applicable Romanian law.
This policy describes what data we collect, how we use it and the rights you have as a user of the MesterBun platform.
2. Personal data we collect
2.1 Data you provide directly:
- Identification data: first name, last name, email address, phone number
- Location data: city, county, address (to make it easier to find craftsmen in your area)
- Professional data (for craftsmen): specialisations, experience, work portfolio
- Generated content: job requests, messages, reviews, uploaded photos
2.2 Data collected automatically:
- Technical data: IP address, browser type, operating system
- Usage data: pages visited, time spent on the platform
- Cookies: for platform functionality and preferences (see the Cookie Policy)
3. Purpose and legal basis of processing
| Purpose | Legal basis |
|---|---|
| Creating and managing your account | Performance of a contract |
| Connecting clients with craftsmen | Performance of a contract |
| Processing payments | Performance of a contract |
| Sending notifications | Legitimate interest / Consent |
| Improving our services | Legitimate interest |
| Marketing and communications | Consent |
4. Your rights (under the GDPR)
Right of access
You can request a copy of the personal data we hold about you.
Right to rectification
You can correct inaccurate or incomplete data in your account.
Right to erasure
You can request the deletion of your personal data (the "right to be forgotten").
Right to data portability
You can receive your data in a structured, commonly used format.
Right to object
You can object to the processing of your data for direct marketing.
Right to restriction
You can request that processing be restricted in certain situations.
How to exercise your rights: Send an email to contact@mesterbun.com or use the Settings → Privacy section of your account.
5. Data retention period
- Account data: For as long as the account exists + 30 days after deletion
- Financial data: 10 years (as required by tax law)
- Messages and communications: 2 years from the last interaction
- Marketing data: Until consent is withdrawn
- Technical logs: Maximum 12 months
6. Data security
We implement technical and organisational measures to protect your data:
- SSL/TLS encryption for all communications
- Passwords stored using secure hashing algorithms (bcrypt)
- Role-based restricted access to data
- Regular, encrypted backups
- Continuous monitoring to detect threats
7. Contact
For any questions about this policy or your personal data:
MesterBun SRL
Data Protection Officer (DPO)
Email: contact@mesterbun.com
Address: Ploiești, Prahova County, Romania
You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) - www.dataprotection.ro