Last updated: May 2026
Who We Are
21MXM SRL is a digital art studio registered in Romania, dedicated to creating and selling premium digital wall art as instant downloads. We operate exclusively online through our website at 21mxm.com.
Data Controller:
21MXM SRL
CUI: 49738800 | VIES: RO52251862
Str. GRINลขIEลULUI, Nr. 1, Romania
Email: contact@21mxm.com | support@21mxm.com
We are committed to protecting your personal data and complying fully with the General Data Protection Regulation (GDPR) and Romanian Law 190/2018.
What Data We Collect
When you interact with our website or place an order, we may collect the following categories of personal data:
Data you provide directly:
- Full name and email address
- Billing address (required for VAT/invoicing purposes)
- Payment information (processed securely by third-party processors โ we do not store card numbers)
- Any messages or information you send us via contact forms or email
Data collected automatically:
- IP address and approximate geographic location
- Device type, operating system, and browser version
- Pages visited, time on site, and click behaviour (via analytics tools)
- Cookie identifiers (see Cookies section below)
We collect only the minimum data necessary to fulfil your order and improve your experience.
Why We Use Your Data (Legal Basis)
|
Purpose |
Legal Basis |
|
Processing your order and delivering digital files |
Contract performance (Art. 6(1)(b) GDPR) |
|
Issuing invoices and maintaining financial records |
Legal obligation (Art. 6(1)(c) GDPR) |
|
Responding to your support requests |
Legitimate interest / Contract performance |
|
Fraud prevention and site security |
Legitimate interest (Art. 6(1)(f) GDPR) |
|
Improving website performance and user experience |
Legitimate interest (Art. 6(1)(f) GDPR) |
|
Sending marketing emails or promotions |
Your explicit consent (Art. 6(1)(a) GDPR) |
You may withdraw your consent for marketing communications at any time by clicking “Unsubscribe” in any email or by contacting us directly.
Who We Share Your Data With
We do not sell, rent, or trade your personal data. We share data only with trusted service providers who assist us in running our business:
- Payment processors (e.g., PayPal, Revolut, card networks) โ to process your payment securely
- Email delivery services โ to send order confirmations, download links, and support replies
- Cloud storage / digital delivery platforms โ to host and deliver your digital files
- Analytics providers (e.g., Google Analytics) โ to understand website usage in aggregated form
- Accounting and invoicing software โ to generate and store legal financial records
All third-party processors are contractually bound to handle your data in accordance with GDPR.
International Data Transfers
Some of our service providers (such as cloud infrastructure or analytics tools) may process data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your data to the same standard as within the EU.
How Long We Keep Your Data
- Order and invoice records: Retained for 10 years as required by Romanian accounting and tax law.
- Customer account and support data: Retained for as long as your account is active or as needed to resolve disputes.
- Marketing consent records: Retained until you withdraw consent, then deleted within 30 days.
- Analytics data: Retained in aggregated/anonymised form; individual session data deleted per the analytics provider’s policy.
After the applicable retention period, personal data is securely deleted or anonymised.
Your Rights Under GDPR
As a data subject, you have the following rights at any time:
- Right of access โ Request a copy of the personal data we hold about you
- Right to rectification โ Ask us to correct inaccurate or incomplete data
- Right to erasure (“right to be forgotten”) โ Request deletion of your data where it is no longer necessary for the original purpose (subject to legal retention obligations)
- Right to restriction โ Ask us to limit how we process your data in certain circumstances
- Right to data portability โ Receive your data in a structured, machine-readable format
- Right to object โ Object to processing based on legitimate interests, including direct marketing
- Right to withdraw consent โ Withdraw consent for marketing at any time without affecting prior processing
To exercise any of these rights, email us at contact@21mxm.com. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) at www.dataprotection.ro.
Cookies & Tracking
Our website uses cookies to ensure core functionality and improve your experience. Cookies are small text files stored on your device. We use:
- Strictly necessary cookies โ Required for the site to function (e.g., shopping cart, session management). These cannot be disabled.
- Analytics cookies โ Used to understand how visitors interact with our site (e.g., Google Analytics). These are only set with your consent.
- Marketing/preference cookies โ Used to remember your preferences or show relevant promotions. Only set with your consent.
You can manage your cookie preferences via our consent banner when you first visit the site, or at any time through your browser settings. Note that disabling certain cookies may affect site functionality.
Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Payment data is handled exclusively by PCI-DSS-compliant processors and is never stored on our servers.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will update the “Last updated” date at the top of this page. We encourage you to review this page periodically.
Contact
For any questions, concerns, or data requests related to this Privacy Policy:
21MXM SRL
Email: contact@21mxm.com
Support: support@21mxm.com