Privacy policy

This policy explains the processing of personal data on imisu.ro, the iMisu platform for professional B2B customers. The controller is Celo Individual Trade SRL. It applies to visitors and people representing customer companies, including users of their accounts.

Controller: Celo Individual Trade SRL · Tax ID 29229470 · Trade Register J07/360/2011
Registered office: Botoșani, Str. Bucovina nr. 25, România
Operating address: București, Drumul Între Vii nr. 12, Sector 3, România
Personal data enquiries: suport@imisu.ro · 0748118038

1. Data we process

We process information supplied when registering and managing a B2B account, placing orders, requesting returns or contacting us: name, email, telephone, company identification and contact details, billing and delivery addresses, ordered products and quantities, messages and request history. Company information may include personal data about its representatives.

You apply for an iMisu account through the registration form and can place orders after company approval. Sign-in uses an email address and password. This flow does not automatically create accounts when orders are abandoned and does not offer Facebook or Google sign-in. Information in an already registered account is not automatically deleted if you do not complete an order.

Session identifiers, IP addresses, browser/device information and technical logs may be processed for operation and security. Selecting “Stay signed in for 30 days” uses a secure persistent authentication identifier; you can revoke it by signing out. This option is not marketing consent.

2. Purposes and legal grounds

Accounts and B2B operations: identifying the representative, checking the company, receiving and fulfilling orders, delivery and handling requests. The grounds are contract performance or steps before entering a contract, where applicable; for company representatives’ data, our legitimate interest in managing the business relationship.
Legal duties: invoicing, financial/accounting records and responses to authorities under applicable obligations.
Security and support: protecting accounts, preventing abuse and handling enquiries or complaints, based on legitimate interests and respecting individuals’ rights.
Commercial messages and optional measurement: subject to the consent given for the relevant channel or category. Registering an account or placing an order does not automatically subscribe you. Withdraw consent through a message’s unsubscribe link, cookie settings or suport@imisu.ro. Withdrawal does not affect processing lawfully carried out beforehand.

Account and order information is needed to provide the service; without it we may be unable to approve the account or fulfil an order. Marketing choices are separate from B2B access.

3. Data retention

We retain account information and correspondence for as long as needed to manage the business relationship and handle requests. Orders, invoices and supporting records are kept for the periods required by applicable law. Information necessary to establish, exercise or defend a claim may be retained for that purpose. The period depends on the record type, legal requirements and processing needs; there is no single retention period for all data.

Withdrawing consent stops use for the relevant commercial communications. Erasure requests are assessed separately from duties to retain records; we do not promise automatic deletion of orders or invoices.

4. Recipients

Access is limited to authorised staff and, as necessary, providers involved in hosting and IT services, communications, delivery, payments and accounting. Data may be supplied to authorities where required by law. We do not sell or rent personal data. Providers process information according to their role and applicable obligations.

5. International transfers

Some external services, including Google services, may involve processing outside the European Economic Area. Where such a transfer occurs, mechanisms required by data protection law apply, such as an adequacy decision or appropriate contractual safeguards. Ask about applicable recipients and safeguards at suport@imisu.ro.

6. Rights and contact

Subject to GDPR conditions, you may request information and access, correction, erasure or restrictions on processing, and portability where applicable. You may object to legitimate-interest processing and direct marketing and withdraw consent. You also have the applicable rights concerning decisions based solely on automated processing, including profiling, that have legal or similarly significant effects.

For questions or rights requests, write to suport@imisu.ro. Describe your request and provide the information needed to identify you; do not send passwords or identity-document copies without a justified request. We verify identity proportionately and respond within statutory time limits. You may complain to the Romanian data protection authority, ANSPDCP, or seek a remedy from the competent courts.

7. Minors

The B2B platform is not intended for minors. If you believe a minor’s information has been supplied to us, notify suport@imisu.ro so that we can investigate and take appropriate action.

8. Updates and cookies

We may update this policy to reflect service changes or applicable requirements. Significant changes are announced on the site or through appropriate channels. See also our Cookie policy and iMisu Terms and conditions.

9. Google services

Depending on service configuration and your cookie-banner choices, Google Analytics and Google Ads may process online identifiers, device information and interactions with the site or advertisements for measurement and advertising. Read the provider’s information at Google — data protection. Analytics and marketing choices are managed in the site’s cookie settings.

Last updated: 9 October 2026.