Midas Studios Est 2022, operating under the brand Virtual Partener, is the data controller for the personal data described in this policy.
Midas Studios Est 2022
Tax identification number: RO45724542
Strada Unirii 12E, Etaj 3, Apartament 11, Buzău, Romania
Email: contact@virtualpartener.com
We are a digital marketing agency. We build websites, run advertising campaigns on Meta and Google platforms and set up marketing automation for our clients.
This policy explains how we collect, use, store and share personal data when you:
Virtual Partner OS is an application used by the Virtual Partener team and by clients who authorise us to manage advertising on their behalf. It is not a consumer product and it does not publish anything to your Facebook or Instagram profile without your instruction.
When you send us a message through the contact form or the clinic programme form, we collect the data you type in: name, email address, phone number (optional), company or clinic name, website, country or market, what you need from us and your message. We also record the page the form was sent from and the time it was sent.
Our hosting provider records standard server logs: IP address, browser type, pages requested, referring page and time of the request. We use these logs for security and to keep the website running.
Where enabled, we use analytics tools (such as Google Analytics) and advertising tags (such as the Meta Pixel) to understand how the website is used and to measure our own advertising. These are set only after you give consent in the cookie banner. See the Cookies section.
When you sign in to Virtual Partner OS with your Facebook account, or authorise the application on a Meta business asset, we receive data from Meta according to the permissions you approve. Depending on those permissions, this can include:
We also keep application logs (who did what, and when) for security and troubleshooting.
We do not sell personal data. We do not use data obtained through Meta platforms for advertising unrelated to the service, and we do not build profiles of individuals for any purpose other than the service you asked for.
Under the General Data Protection Regulation (GDPR) we rely on:
For lead data collected through your advertising forms, you (the client) are the controller and we act as your processor under our agreement.
Virtual Partner OS uses Meta APIs and is subject to the Meta Platform Terms and Developer Policies. In line with those terms:
You can review or remove the application’s access at any time from your Facebook settings under Settings & Privacy > Settings > Apps and Websites.
Some of the providers above are established outside the European Economic Area, including in the United States. Where that is the case, transfers are protected by an adequacy decision of the European Commission, by the EU-US Data Privacy Framework where the provider is certified, or by Standard Contractual Clauses.
| Data | Retention |
|---|---|
| Enquiries through the website | Up to 24 months after our last exchange, unless it becomes a client relationship |
| Client and contract records | For the duration of the contract and as long as required by accounting law (typically 10 years in Romania for accounting documents) |
| Virtual Partner OS account data and access tokens | Until you disconnect the application, delete your account or ask us to delete the data; tokens expire according to Meta’s rules |
| Campaign and performance data | For the duration of our service to the client, then deleted or anonymised within 90 days |
| Uploaded creatives | Until you delete them in the application or the service ends |
| Lead data processed for clients | According to the client’s instructions; by default deleted from our systems within 90 days after the service ends |
| Server and application logs | Up to 12 months |
We use encrypted connections (HTTPS), encrypted storage of access tokens, role-based access for our team, two-factor authentication on the tools we use and regular backups. No system is perfectly secure; if a breach affects your personal data, we will notify you and the supervisory authority as required by law.
You have the right to access the personal data we hold about you, to correct it, to have it deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent where processing is based on consent. Write to contact@virtualpartener.com and we will reply within one month.
You also have the right to lodge a complaint with a supervisory authority. In Romania this is the National Supervisory Authority for Personal Data Processing (ANSPDCP), dataprotection.ro. If you live elsewhere in the EU or in the UK, you can contact your local authority.
You can ask us to delete the data we hold about you, including data received through Meta platforms, at any time. The steps are described on our Data Deletion page. Removing Virtual Partner OS from your Facebook settings revokes its access immediately.
Our website and application are intended for businesses and professionals. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.
We may update this policy when our services or the law change. The date at the top shows the latest version. For significant changes affecting Virtual Partner OS users we will also notify you by email or inside the application.
Questions about this policy or about your data: contact@virtualpartener.com, or by post to Midas Studios Est 2022, Strada Unirii 12E, Etaj 3, Apartament 11, Buzău, Romania.