1. Parties and roles
The MesajHub client is the controller for data it uploads or connects to the service, and JCA WEB DESIGN S.R.L. is the processor to the extent it processes those data solely to provide MesajHub.
2. Subject matter and duration
Processing covers hosting, organisation, transmission and management of contacts and communications required for the subscribed functionality for the subscription term and reasonable/legal closure, export and deletion periods.
3. Data and data subjects
Data may include identity and contact details, preferences, consent records, message content, communications metadata and other fields uploaded by the client. Data subjects may include the client’s customers, prospects, employees, suppliers or other legitimate contacts.
4. Instructions and confidentiality
We process data only on the client’s documented instructions, including actions by authorised platform users, unless the law requires otherwise. Authorised personnel are subject to appropriate confidentiality obligations.
5. Security
We apply measures appropriate to the risk, including access control, HTTPS, separation of secrets/sensitive credentials, audit and continuity measures proportionate to the service.
6. Subprocessors
The client authorises use of providers necessary for hosting, communications, security, support and subscribed functionality, including channel providers connected by the client. MesajHub remains responsible for its GDPR obligations regarding selection and contracting of subprocessors. For material changes, we will use a reasonable notification method where required.
7. GDPR assistance and incidents
To a reasonable extent and taking into account the nature of processing, we assist the client with data-subject requests, required assessments and notification of relevant security incidents without undue delay after confirmation.
8. Deletion and return
On termination, data processed on the client’s behalf is deleted or returned according to available functionality, the client’s request, technical backup periods and legal obligations.
9. Audit and information
We provide reasonable information to demonstrate compliance with processor obligations and cooperate with justified audits while protecting security, confidentiality and other clients’ data.