Privacy Policy

This policy explains how personal data is processed on the puianunt.ro classified ads platform. The data controller is puianunt.ro, and the contact point for any personal data matter is contact@puianunt.ro.

We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Romanian law. This English version is provided for convenience; the Romanian version is the authoritative text.

Data received from TikTok Login. If you sign in with TikTok we request a single scope, user.info.basic, and we receive only the following fields: open_id (a unique identifier for your account within our application), display_name, username and avatar_url. TikTok does not provide us with your email address, which is why we separately ask you for a contact email on your profile page so that you can confirm and manage your listings. We do not access your videos, follower list, direct messages or any other content in your TikTok account, and we never post to TikTok on your behalf. We also store the access token and refresh token issued by TikTok, solely to maintain your authenticated session.

Data received from Google. The scopes openid email profile, from which we receive your account identifier, name, email address and profile picture.

Data received from Facebook. Basic public profile: account identifier, name, profile picture and, if you make it available, your email address.

Data you provide. Your contact email, seller profile description, and the content of your listings: title, description, price, category, photos, location and any contact details you choose to display.

Technical data. IP address, browser and device type, pages visited and time of visit, collected automatically through server logs and cookies.

• Creating and managing your account, publishing and managing your listings, and sending related transactional emails — performance of the contract between you and us (Art. 6(1)(b) GDPR).
• Platform safety: fraud, spam and abuse prevention, and content moderation — our legitimate interest in maintaining a safe service (Art. 6(1)(f) GDPR).
• Usage statistics on traffic and site performance — your consent for non-essential cookies (Art. 6(1)(a) GDPR).
• Complying with legal obligations and responding to lawful requests from authorities (Art. 6(1)(c) GDPR).

We do not use your data for behavioural advertising and we do not carry out automated decision-making producing legal effects concerning you.

The content of a published listing — title, description, price, photos, location, any contact details you include, as well as the name and profile picture shown on your seller page — is publicly visible to anyone visiting the site and may be indexed by search engines. Do not include information in a listing that you do not want to be public. Your email address is not displayed publicly.

We use essential cookies required for your session and authentication, without which the site does not work, and analytics cookies for aggregated traffic statistics. You can block or delete cookies in your browser settings, although essential cookies are required for signing in.

We do not sell your personal data and we do not share it with third parties for advertising purposes. In particular, data received from TikTok is not shared with any third party and is not used for any purpose other than authenticating you and displaying your profile on the platform.

We use the following providers, which process data on our behalf:

• Vercel — application hosting and server logs.
• MongoDB Atlas — the accounts and listings database.
• Amazon Web Services (S3 and CloudFront) — storage and delivery of listing photos.
• Our email provider — sending transactional emails.

The authentication providers (Google, Facebook, TikTok) process your data as independent controllers under their own privacy policies. We may disclose data to authorities where the law requires it.

Some of the providers listed above may process data on servers located outside the EEA. In those cases the transfer relies on the Standard Contractual Clauses adopted by the European Commission or on an adequacy decision, together with supplementary technical safeguards.

• Account data — for as long as your account exists.
• Listings — active for 90 days, after which they become inactive and can be deleted by you at any time.
• Technical logs — no longer than 12 months.
• Authentication tokens — deleted when you sign out or delete your account.

After account deletion we erase the data within 30 days, except for data we must retain under a legal obligation or to establish and defend legal claims.

Send a request from the email address associated with your account to contact@puianunt.ro with the subject “Delete account”. We will verify your identity and delete your account, listings and associated data within 30 days, free of charge.

You may also revoke the application’s access from your TikTok, Google or Facebook account settings. Note that revoking access stops any future transfer of data to us but does not automatically delete data we already store — for that, send us the deletion request described above.

Under the GDPR you have the right to access your data, to rectification, to erasure, to restriction of processing, to object, to data portability, and to withdraw your consent at any time without affecting the lawfulness of processing carried out beforehand.

To exercise these rights, write to contact@puianunt.ro. We respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Romanian supervisory authority (ANSPDCP), dataprotection.ro.

The platform is not directed to persons under 16 years of age and we do not knowingly collect their data. If we learn that we have collected data from a person under 16, we delete the account and associated data. If you are a parent or guardian and believe a minor has provided us with data, write to contact@puianunt.ro.

Traffic to the site is encrypted with HTTPS, database access is restricted and authenticated, and we store no passwords because authentication is handled exclusively by external providers. We apply data minimisation and request only the permissions strictly necessary. No system is completely secure, so we cannot guarantee absolute security.

We may update this policy. The version in force is the one published on this page, with the last updated date shown at the top. We will notify you on the site or by email of any substantial change.

For any question about this policy or your data, write to contact@puianunt.ro. See also our Terms of Service.