Privacy policy BSX

I. General information

The privacy of your personal data is one of the main concerns of MUAMMER SELFSERVICE SRL

This document is intended to inform you about the processing of your personal data, in the context of using the website www.barbatulsuperior.ro.

This Privacy Policy (including the sections regarding cookies) complies with the provisions of the General Data Protection Regulation (GDPR) 679/2016, the ePrivacy Directive (2002/58/EC) and applicable Romanian legislation (Law no. 506/2004). If we publish a separate cookie policy, it will further detail the use of cookies and similar technologies.

In this policy, by “Site” we mean both the main domain www.barbatulsuperior.ro, as well as to the subdomains and online platforms associated with the Bărbatul Superior brand (for example, the course platform and membership areas), as well as the official mobile application, to the extent that they do not have dedicated privacy policies.

Our website and services are not directed at anyone under the age of 16. We do not knowingly collect personal information from children under this age. If we become aware that such information has been provided without the consent of a parent or legal guardian, we will take steps to delete it after reasonable verification.

I.1. Operator and contact details

I.2. Managing cookie consent

You can change or withdraw your cookie consent at any time from Cookie settings (permanent link and in the footer of the site). We keep proof of consent and expressed preferences for no longer than 12 months, after which we will ask you for the option again.

II. Categories of personal data processed

II.1. If you are a customer of the Site

MUAMMER SELFSERVICE SRL will process your personal data, such as name and surname, telephone number, e-mail address, billing address, delivery address, data regarding how you use the Site, for example your behavior/preferences/habits within MUAMMER SELFSERVICE SRL, as well as any other categories of data that you provide directly in the context of creating a user account, in the context of placing an order through the site or in any other way resulting from the use of the Site.

II.2. If you are a visitor to the Site

MUAMMER SELFSERVICE SRL will process your personal data that you provide directly in the context of using the Site, such as the data you provide in the contact / questions / complaints section, to the extent that you contact us in this way.

II.3. If you participate in coaching sessions, courses or events

Within coaching programs, online courses or events (webinars, workshops, retreats), MUAMMER SELFSERVICE SRL may process, in addition to the above, the following data:

• identification and contact data (name, surname, email, telephone, username on the platform);
• data regarding participation in the program (the group you are part of, progress in courses, responses to questionnaires, feedback provided);
• information that you choose to voluntarily communicate to us in coaching contexts (e.g. personal goals, life situations, preferences, professional or relationship context).

II.4. If you use the mobile app, Maria AI, challenges, leaderboards or Security Core

In the "Bărbatul Superior" mobile application and related features, we may process the following categories of data, depending on your choices and use:

• Account and login details: User ID, email, username, encrypted/hash password, session token, push token, device, language, settings, available authentication methods.
• Educational and progress data: courses accessed, modules completed, quizzes, challenges, assignments, files voluntarily uploaded, score, level, badges, consistency, streaks, participation in the ranking.
• Maria AI data: technical metadata about interactions, number of messages, timestamp, request categories, feedback, errors and, only if you explicitly choose, content saved in a personal journal or learning history.
• Core Security Data: IP, user agent, authentication logs, failed attempts, anti-fraud events, rate limiting, spam/abuse signals, ranking integrity indicators, and security logs.
• Mobile technical data: device model, operating system, application version, pseudonymous identifiers, crash logs, performance, screens/features used, connection, errors and aggregated analytics events, where enabled.
• Notifications: push notification token, notification preferences, delivery confirmations, unsubscribes or frequency settings.

III. Purposes and grounds of processing

III.1. If you are a customer of the Site

• For the development of the contractual relationship (receiving, validating, shipping and invoicing the order placed on the Site, informing about the status of the order, etc.).
  Basis: execution of the contract. Refusal to provide data may result in the impossibility of carrying out contractual relations.
• To fulfill legal obligations (including tax and archiving).
  Basis: legal obligation. Refusal to provide may prevent the provision of services.
• For marketing activities (commercial communications via e-mail/SMS) regarding the products and services offered by MUAMMER SELFSERVICE SRL, through the Site.
  Basis: your consent, if you choose to provide it.

You can express your consent to the processing of your data for this purpose by checking the appropriate box or clicking on the confirmation link. To unsubscribe, you can use the option at the bottom of each e-mail/SMS. Providing data for this purpose is voluntary; refusal has no negative consequences.

• For the purpose of analysis and improvement of the experience on the Site (reports, preference profiles, without automated decisions with legal effects).
  Basis: the legitimate interest of MUAMMER SELFSERVICE SRL

III.2. If you are a visitor to the Site

• Marketing (newsletter/commercial communications).
  Basis: consent.

You can express your consent by completing and checking the box in the subscription form or by clicking on the subscription confirmation link. Unsubscribe at any time from the link in each message. Provision is voluntary and refusal has no negative consequences.

• Resolving complaints, claims, monitoring traffic and improving the experience on the Site.
  Basis: legitimate interest; we do not use automated decisions with legal effects.

III.3. For the application, Maria AI, challenges, ranking and Security Core

• Providing the application and account: authentication, synchronization, access to courses, saving progress, functioning of challenges and settings.
  Basis: execution of the contract or pre-contractual steps.
• Maria AI and educational feedback: generating educational responses, conversational simulations, exercises and feedback.
  Basis: execution of the contract; consent to save the log, where applicable.
• Ranking, scoring, challenges and prizes: progress calculation, display of nickname/level/score, validation of eligibility and fraud prevention.
  Basis: performance of the contract, consent for public display, legitimate interest in integrity.
• Security Core: account protection, abuse prevention, request limitation, incident investigation, auditing and rights defense.
  Basis: legitimate interest and/or legal obligation.
• Crash reporting and aggregated analytics: identifying bugs, optimizing application performance and stability.
  Basis: legitimate interest for strictly technical data; consent, if the tool used falls into the optional cookie/SDK category.
• Push notifications: reminders, progress, challenges, updates and announcements.
  Basis: consent or setting enabled by the user; can be withdrawn from the application or device settings.

IV. The duration for which we process your data

As a principle, MUAMMER SELFSERVICE SRL will process personal data as long as necessary to achieve the aforementioned purposes.

In the case of customers, data is processed for the duration of the contractual relationship and subsequently, according to legal obligations (e.g., financial and accounting documents: 10 years from the end of the financial year).

If you delete your user account (if any), the action will be interpreted as unsubscribing from commercial communications; deleting the account does not automatically delete all personal data.

If you want the processing to stop or the data to be deleted, you can exercise your rights under Section VIIFor an explicit request to delete all personal data, please send a clear request to contact@barbatulsuperior.ro.

Following the deletion request, MUAMMER SELFSERVICE SRL may anonymize the data and continue processing strictly for statistical purposes, if permitted by law.

The request to delete an account with at least one active order can only be registered after the products have been delivered and the last order has been completed.

V. Disclosure of personal data

To achieve the goals, MUAMMER SELFSERVICE SRL may disclose data to partners/agents (e.g. IT service providers) or to public authorities, in cases such as:

• Site administration;
• awarding prizes/facilities in promotional campaigns carried out through the Site;
• maintaining, personalizing and improving the Site and services;
• data analysis, testing and research, trend monitoring and development of security/authentication features;
• sending commercial communications, under the terms of the law;
• when disclosure is required by law or necessary to defend property/rights.

V.1. Third-party providers (if applicable)

The following providers may place cookies through the site, if you have consented: Google (Analytics/Ads), Meta (Facebook Pixel), Stripe (payments and fraud prevention), LiteSpeed/QUIC.cloud (performance/CDN), YouTube (integrated content), Mailchimp/Sendinblue (email marketing). We update the list when the integration changes.

V.1.1. Application, AI, security and infrastructure providers

Depending on the active functionalities, we may use providers/processors for hosting, databases, email, payments, authentication, push notifications, distribution through app stores, crash reporting, analytics, security, AI processing or customer support. The data transmitted is limited to the necessary technical/contractual purpose and is governed by processing contracts, privacy policies or appropriate transfer mechanisms, where applicable.

• Payment: processors like Stripe or the issuing bank; we do not store the full card number.
• Mobile application: Google Play, Apple App Store, push notification services, crash reporting and analytics.
• AI / Maria: AI infrastructure or technical services necessary to generate responses, with data minimization and no use for marketing, in the absence of consent.
• Security: firewall, CDN, anti-spam, rate limiting, audit, backup and monitoring.

V.2. Social media plugins and external links

The Site may integrate social buttons or plugins (e.g., Facebook, Instagram, YouTube, TikTok, etc. sharing buttons) or links to our social media pages. Interaction with these elements may allow the respective providers to collect certain data (such as IP address, browser or device information), based on their own privacy policies.

MUAMMER SELFSERVICE SRL does not control and is not responsible for how these third-party providers process data. We recommend that you consult the privacy policies of each platform before interacting with those plugins or pages.

Links to other third-party sites are provided strictly for informational purposes; accessing them is at your own risk, and data processing is governed by the policies of the respective operators.

VI. Transfer of personal data

Personal data may be transferred to countries within the European Union. If, in the future, there are transfers outside the EU/EEA, we apply appropriate safeguards (e.g., Standard Contractual Clauses approved by the European Commission and/or certified suppliers within the EU–US Data Privacy Framework), along with technical and organizational measures to protect the data.

ARE YOU COMING. Your rights

Under the conditions provided by applicable legislation, as a data subject you benefit from:

• Dreptul la informare regarding the processing activities carried out;
• Right of access to the data and details regarding the processing (purpose, recipients, etc.);
• Right to rectification of inaccurate/incomplete data, with informing the recipients where possible;
• The right to delete ("right to be forgotten") in cases provided for by law (unnecessary data; withdrawn consent; opposition; unlawful processing; legal obligation; information society services for minors); data may be anonymized for statistical purposes;
• The right to restriction in the cases provided for (challenge of accuracy; unlawful processing; necessary for the defense of a right; opposition under verification);
• The right to portability (structured, common, easy-to-read format; transmission to another operator where applicable);
• The right to opposition to processing based on legitimate interest/public interest and, at any time, to direct marketing;
• The right not to be subject to automated individual decision-making (including profiling) with significant legal or similar effects;
• The right to address you ANSPDCP or the competent courts.

You can also file a complaint directly with the Romanian supervisory authority – National Supervisory Authority for Personal Data Processing (ANSPDCP), headquartered at Bd. General Gheorghe Magheru no. 28–30, sector 1, Bucharest, postal code 010336, Romania, or online, through the official website www.dataprotection.ro.

Before filing a complaint with ANSPDCP, you can contact us for an amicable resolution at contact@barbatulsuperior.ro or through the contact form.

VIII. Security measures regarding the protection of personal data

MUAMMER SELFSERVICE SRL applies appropriate technical and organizational measures to protect data against unauthorized access, loss, destruction or damage, including:

• database encryption and security;
• controlled and restricted access of authorized personnel;
• periodic audits and checks of security systems;
• regular training of staff on GDPR requirements and data security.

Any request regarding the above rights will be resolved within one month of receipt; in exceptional situations (complex requests) the deadline may be extended up to two months, with prior notification to the applicant.

Questions and requests: contact@barbatulsuperior.ro.

VIII.1. Security Core, in-app privacy and user control

Security Core is the set of measures used to protect accounts, the application, the platform, payments, rankings, challenges and AI features. This may involve technical logs, automated rules, integrity checks and human review in disputed cases.

• The user may request access, rectification, deletion, restriction, portability or opposition, in accordance with the GDPR.
• For data used strictly for security purposes, we may refuse immediate deletion if retention is necessary to defend rights, prevent fraud, or fulfill a legal obligation.
• In case of suspected abuse, ranking fraud, or rule violation, we may keep minimal records for investigation and documentation.
• If a score, restriction, or security measure significantly affects your access, you can request explanations and human review at contact@barbatulsuperior.ro.

IX. Cookies used

Below is a non-exhaustive list of cookies used (the list is updated as integrations change). Strictly necessary cookies work without consent; analytical/marketing cookies only run if you accept them.

X. Cookie management

You can manage your preferences directly from Cookie settingsYou can also control cookies in your browser settings (Chrome, Firefox, Safari, Edge). Blocking strictly necessary cookies may affect the functioning of the site.

XI. Version and updates

We periodically review this policy and publish the current version on the website. Last actualizare: 14.06.2026.