1. Who is responsible for Personal Data processing?

The entity responsible for processing for Personal Data through the Website is Conacel Elena-Cristina PFA, an entity registered and functioning according to Romanian laws, with its headquarters in Cândești Village, Cândești commune, Buzău county, Romania, registered with the Trade Registry under no. F10/617/2017, fiscal identification code 38568939.

You can submit any questions regarding the processing of your Personal Data and/or this Privacy Policy at contact@bootstrapbay.com.

2. What Personal Data is being processed and how is it being used?

We process Personal Data from both Website visitors (individuals that use the Website to understand the service offer provided), Users (individuals that create an account to download themes from the Website) and Creators (individuals or companies that create an account on the Website to sell their themes according to the Terms and Conditions).

2.1. In case of Website visitors, the following Personal Data is being processed through the Website:

• Cookies; this data is processed by Bootstrapbay while you are using the Website, after being accessed from the processors mentioned in Section 3.3, and is used by Bootstrapbay to understand how the Website behaves in various situations as well as to improve sections of the Website which are not functioning as designed. This information may include (but is not limited to) the URL that you just came from (whether this URL is on our site or not), browser information (language, browser name, viewport, screen resolution), and your IP address.

2.2. In case of Users, apart from the information mentioned in point 2.1. above, the following Personal Data is being processed through the Website:

• username and contact e-mail address are processed by Bootstrapbay when you create an account on the Website, after being provided by you directly, and is used by Bootstrapbay to be able to provide you with access to the themes available on the Website;
• display name, location, any other information in the About section, links to your Social Media profiles and the contents thereof, and profile pictures, are processed by Bootstrapbay if you decide to add them to your account, Other than being used to be shown in your profile to boost your sales through the Website, Bootstrapbay does not use such information for any purpose.

2.3. In case of Creators, apart from the information mentioned in point 2.2. above, the following Personal Data is being processed through the Website:

• FastSpring identifier is processed by Bootstrapbay, after being provided by you directly, and is used by Bootstrapbay to set up your themes on FastSpring. FastSpring will then transfer the sums resulting from Users downloading your themes, using the information in the account associated with the identifier; without this information, you may not receive such sums.

3. Who has access to your Personal Data?

3.1. Bootstrapbay does not transfer or sell your Personal Data to third parties, such data being processed only for the purposes mentioned in this Privacy Policy, and only in this context such data may be processed with the help of and/or by third parties.

3.2. As Bootstrapbay developes, the Website may be sold along with all its components, including your Personal Data. Any acquiror will be able to use your Personal Data according to this Privacy Policy.

3.3. We use certain third-party products in developing and maintaining the Website, which may use your Personal Data for the provision of access to said products. At the moment, the following third-parties have access to pieces of your Personal Data, in their capacity of processors:

• Bright Market, LLC d/b/a FastSpring, for the Payment product, which we use to process purchases for users and payouts for creators;
• Google LLC, for the Google Analytics product, which we use to analyse the activity of all Website visitors;
• Facebook Inc., for the Facebook Ads product, which we use to create ads for Website visitors;

3.4. Bootstrapbay may be legally binded to divulge your Personal Data if this is necessary to assert, exercise or defend our rights before competent authorities.