Privacy Policy

WEBSITE PRIVACY POLICY EFFECTIVE DATE: NOVEMBER 1, 2023

1. General information. 

1.1. This privacy policy (“Privacy Policy” or “Policy”) sets forth the privacy practices of BIGMAMA SRL, a limited liability company registered and functioning under Romanian Law (hereinafter called “BigMama” or “Company”) and applies to all its users (“user(s)” or “you”), either Free Users or Commercial Users, of the products or services (collectively “Products or Services”) available through the company's Websites, as described in our Terms and Conditions. 

1.2. This Privacy Policy must be read and construed in relation to the Terms and Conditions. Together, they form a legally binding agreement between you and BigMama, so please read them carefully.  

1.3. Your privacy is one of our fundamental concerns. Therefore, we take outmost care to process your personal data in accordance with the principles set forth in the General Data Protection Regulation (the “GDPR”) and the Romanian data protection legislation, mainly the Law no. 363/2018 on the protection of individuals on the processing of personal data and the free movement of such data (the “Data Protection Law”), collectively referred to as the “Data Protection Legislation”.  

1.4. Pursuant to the Data Protection Legislation, personal data means any information relating to an identified or identifiable natural person, and an identifiable person is that person which may be identified directly or indirectly, particularly by reference to an identification number or one or more factors specific to his physical, psychological, mental, economic, cultural or social identity. 

1.5. Please acknowledge this Privacy Policy before using our Products or Services, accessing or interacting with our Websites. 

1.6. This Policy applies to all Products or Services that we offer via our Websites. This Policy does not apply to any website, product or service of any third-party company even if the website links to (or from) our Websites. Please always review the privacy practices of any third-party company before deciding whether to provide any information. By using our Products, Services or Websites, you are accepting the practices described in this Policy. If you do NOT agree with this Policy, please do not visit or use our Products, Services or Websites. Your continued use of our Products, Services or Websites will certify your acceptance of this Policy. 

2. What data do we collect? 

2.1. Information related to your account ("Personal Data").

2.1.1. When using our Websites by registering and/or creating a new account, purchasing our Products or Services, submitting and/or posting content, or sending feedback you may be requested to provide your name, address, e-mail address, username and payment information, personal identification number and other identifying information which you submit to us voluntarily when you order or subscribe for our Product or Services, as well as when you fill out any of the contact forms on the Websites.  

2.1.2. Please be aware that when you voluntarily disclose your Personal Data (such as name, age, date-of-birth, personal identification number, mailing/email address) in discussion forums or other public areas on the Websites, that information along with any information disclosed in your communication can be collected and used by third parties and may result in unsolicited messages (e.g., spam) from third parties. These activities are beyond our control and this Privacy Policy does not apply to such information.  

2.2. Aggregate Information ("Non-personal Data"). 

2.1.3. Additionally, we collect and/or receive and store certain non-personal information ("Non-personal Data") whenever you interact with us. This information may include a website’s Uniform Resource Locator (“URL”) that points to the website you came from, what browser you are using, and your Internet Protocol (“IP”) address. The scope of this process is mainly to ensure Websites’ support and security. This information is essential for fighting DDoS attacks, scanning, and similar hacking attempts. We also use this information to help us to better design our site, help diagnose problems with our server, and administer our Websites. You may request to have your data deleted by sending a valid deletion request (please see Section 7 for further information). Please note that if you request the deletion of your Personal Data, you will as a result no longer be able to use our Products, Services or Websites. 

2.1.4. Non-personal Data is not associated with or linked to your Personal Information. Thus, Non-personal Data does not permit the identification of individual persons.  

3. How do we collect personal data?

3.1. Our Websites contain registration forms (e.g. during payment process by submitting your credit card or other payment information when ordering and purchasing Products or Services or during customer support and review) that will ask users at their discretion to provide us with certain information such as their email address and other as detailed above. For instance, we use this information to create an account, provide the service, send you news and updates and promotional material about our products or from some of our partners, and also when you enter a sweepstakes or contest sponsored by us or one of our partners, sign up for special offers from selected third parties, send us an email message/ transmit information by telephone or letter.

3.2. We do not share this information with third parties, except as detailed below and other than with the people/or associate working with our Products, Services or Websites.  

3.3. In order to maintain a high-quality degree for our service and also an excellent customer support experience, BigMama is using certain 3rd parties, i.e. advertising partners (“Advertising Partners”) to collect and process certain aggregate data. For example, we may use your IP address to diagnose problems with our servers, software or hardware, and/or to gather demographic information. Our Advertising Partners may also provide us with aggregate but not individual reports that will tell us how many advertisements were presented and clicked on our Websites. 

4. Why do we collect Your Personal Data? The scope of processing personal data.

4.1. Personal data processing by BigMama is always carried out in a legal and fair manner. We will only process personal data for particular, pre-determined purposes that are legitimate with regard to applicable law, and that are relevant to our business. 

4.2. We collect the Personal Data for the purpose of: 

• fulfilling our contractual obligations, including: providing users with the Products or Services they have requested, managing subscriptions and processing payments in connection with our Products, Services or Websites; 

• the improvement of user experience and our products and services, including features, functionalities, and interfaces; 

• providing technical support of products and services for customers and to improve the quality of products and services; 

• the proper administration of our Products, Services or Websites; 

• the performance of the contract between you and us and/or taking steps, at you request, to enter into such a contract; 

• scientific research, fraud detection/prevention and improvement of the Products, Services or Websites; 

• to notify you of our new services or changes to our existing Products, Services or Websites; 

• to communicate with you about your requests; 

• to send you technical or service-related communications; 

• to enforce the Terms and Conditions. 

5. Sharing Your Personal Data. 

5.1.We do NOT share, sell, rent or trade your Personal Data with third parties other than as disclosed within this Privacy Policy, ensuring at all times the same standards of protection and only insofar as reasonably necessary for the purposes set out in this Policy. 

5.2. We provide some of our Products or Services through contractual arrangements made with affiliates, service providers, partners, and other third parties (“Service Partners”). We and the Advertising Partners or Service Partners may need to use some personal information in order to perform tasks between our respective websites or to deliver Products or Services to you. For example, we must release your credit card information to the card-issuing bank to confirm payment for Products or Services purchased on the Websites; release your address information to the delivery service to send products that you ordered; and provide order information to third parties that help us provide customer service. We will encourage our Service Partners to adopt and promote strong privacy policies.  

5.3. Thus, the Websites may contain links to external websites, mobile software applications, products, or services that are not owned or controlled by BigMama and may be subject to specific terms and conditions. Please be aware that such third parties may collect personal information from you. BigMama is not responsible for the privacy practices or the content of such external websites. We encourage you to read the terms and conditions and privacy policies of each third-party service provider you engage in connection with the Products, Services or Websites. 

5.4. We may further collect and possibly share your Personal Data to enforce the Terms and Conditions. This may be done to prevent a crime or violation of our Terms and Conditions or to help solve a transgression that has been committed. 

5.5. We also reserve the right to disclose your Personal Data as required by law and when we believe that disclosure is necessary to protect our rights and/or comply with a judicial proceeding, court order, or legal process served on Products, Services or Websites. We fully cooperate with law enforcement agencies in identifying those who use our Products, Services or Websites for illegal activities.  We reserve the right to report to law enforcement agencies any activities that we, in good faith, believe to be unlawful. 

5.6. Lastly, we may share Non-Personal data associated with the use of our Products, Services or Websites with 3rd part suppliers for the purposes of optimization, customer analytics and fraud prevention, evaluating your use of the Websites, compiling reports on Websites activity and provide other Websites activities and internet related services, all in accordance with their applicable privacy policy.  

6.Security of Your Personal Data. 

6.1. We follow generally accepted industry standards to protect the Personal Data submitted to us, both during transmission and once we receive it. We have implemented best-in-class physical, procedural, and technical security measures with respect to our offices and information storage facilities so as to prevent any loss, misuse, or unauthorized access, disclosure, or modification of your Personal Data, such as: 

• We work hard to ensure that the data we collect is reliable, accurate, complete and current. We encrypt all Personal Data, in order to prevent unauthorized parties from viewing such information when it is transmitted to us. We use it only for the purposes for which it was collected or to comply with any applicable legal or ethical reporting or document retention requirements. 

• We limit access to Personal Data only to specific employees, contractors and agents who have a reasonable need to come into contact with your information.  For example, we may provide members of our technical support team with limited access to your account in order to allow them to troubleshoot problems you may be having with the Website. These individuals are bound by confidentiality obligations and may be subject to discipline, including, but not necessarily limited to, termination and criminal prosecution, if they fail to meet these obligations. 

• Additionally, we also employ a number of physical, electronic, and procedural safeguards to protect Personal data. Our servers and datacenters are protected by industry-standard encryption, and our servers employ high-level password protection. 

• Finally, access by you to your Personal Data is available through a password and unique customer ID selected by you. This password is encrypted. We recommend that you do not divulge your password to anyone. 

• In order to most effectively serve you, credit card transactions and order fulfillment are handled by established third-party banking institutions and processing agents (e.g., PayPal, Venmo, Zelle). They receive the information needed to verify and authorize your credit card or other payment information and to process and ship your order. 

6.2. However, please be aware that no method of transmission over the Internet, or method of electronic storage, is 100% secure. Although we strive to use commercially acceptable means to protect your Personal Data, it is important to understand that no data security measures in the world can offer completely infallible protection. For this reason, our guiding principle is to collect minimal data. If you have reason to believe that your interaction with the Products, Services or Websites is no longer secure (for example, if you feel that the security of your account has been compromised), please contact us immediately.  

6.3. If you feel that your privacy was treated not in accordance with our Policy, or if any person attempted to abuse our Products, Services or Websites or acted in an inappropriate manner, please contact us directly at support@bigma.org. Further, in the event of a data breach, in which we discover your Personal Data is at risk, we will notify you immediately through your account or the Websites or, if technically possible, by sending you an email. 

7. Your Privacy Rights. 

7.1. In your capacity as data subjects, the Data Protection Legislation provides you with a series of rights including: 

• You have the right to access personal data held about you. 

• You have the right to request that we rectify any personal data we hold that is inaccurate or incomplete. 

• You have the right to request the deletion of your personal data. Please note that such deletion may result in us no longer being able to provide you with our Products or Services. 

• You have the right to request restriction of or object to the processing of your personal data. 

• You have the right to request and receive your personal data in a commonly used format (data portability). 

• You have the right to withdraw your consent on which processing is based at any time. 

• You have a right to complain to your local data protection supervisory authority. 

• You may have a third party submit a request on your behalf as an authorized agent. To confirm that the authorized agent is entitled to submit a request on your behalf, they must have written authorization signed by you, and you must provide us with a copy of the signed authorization. To ensure your privacy and security, we may take further steps to verify your identity. 

7.2. We are ready to ensure the exercise of all your relevant rights in this respect. We provide you with the ability to exercise certain choices and controls in connection with our treatment of your Personal Data. Depending on your relationship with us, these choices and controls may include, access to the Personal Data collected about you that we hold; correcting, updating or deleting the information associated with you that we hold; and in the event, you wish to opt out from the data collection or you are not able to exercise your rights through your account please contact us at: support@bigma.org or support@bigmama.network. 

7.3. In the event you make such a request, note that we may require certain information from you in order to verify your identity and locate your data and that the process of locating and deleting the data may take reasonable time and effort. Data privacy and related laws in your jurisdiction may provide you with different or additional rights related to the data we collect from you, which may also apply

8. Policy Updates.

8.1.We may change our Privacy Policy from time to time, with or without notice to you, consistent with applicable privacy laws and principles. If we decide to make changes to our Privacy Policy, at our sole discretion, such changes and updates will be effective immediately upon the display of the revised Privacy Policy. Thus, we encourage you to check this Privacy Policy regularly for updates, so that you are fully informed on how your data is collected and used by the Company and your related rights.  

8.2. Your continued use of the Products, Services or Websites following the display of such amendments constitutes your acknowledgement and consent to such amendments to the Privacy Policy and your agreement to be bound by the terms of such amended policy.  

9. How to contact us? 

9.1. If you have any questions, concerns, or complaints regarding our Privacy Policy, our compliance with the applicable laws, or how we handle your information or if you wish to exercise your privacy rights, please feel free to contact us: 

• -by email: to the attention of Customer Service at support@bigma.org (for the Free Users), 

• -by email: to the attention of Customer Service at support@bigmama.network (for the Commercial Users), 

9.2. You may also reach our Privacy Compliance Officer by sending conventional mail, for all Users, to our address at BIGMAMA SRL, located at 27-33 Nerva Traian Street, Building B, 1st Floor, Office no. 6, District 3, Bucharest, Romania.