Privacy policy

Last updated: 21 September 2026

This document explains what personal data we process through this website, for what purpose, on what legal basis, how long we keep it and what rights you have. Processing is carried out in accordance with Regulation (EU) 2016/679 (GDPR).

1. What data we process

SituationData
Orderfirst and last name, phone, email, delivery address, company name and VAT/company ID (if you request a company invoice), order contents
Contact formname, email, phone (optional), message content
Browsingbasic technical data: IP address, browser type, pages visited — only to the extent that you accept analytics cookies

We do not request or process special categories of data (health data, biometric data). Please do not include information about your clients' health in your messages.

2. Purposes and legal bases

  • Processing and delivering your order — basis: performance of a contract (Art. 6(1)(b) GDPR).
  • Issuing invoices and keeping accounting records — basis: legal obligation (Art. 6(1)(c) GDPR).
  • Replying to messages sent through the contact form — basis: your consent (Art. 6(1)(a) GDPR).
  • Traffic analytics and marketing — basis: your consent, given through the cookie banner, which you may withdraw at any time.
  • Defending our rights in the event of a dispute — basis: legitimate interest (Art. 6(1)(f) GDPR).

3. Who we share data with

We share data only with those who help us deliver your order and meet our legal obligations: the courier company, the hosting provider, the payment processor, our accountants and, on express request, public authorities. We do not sell or rent personal data.

4. How long we keep data

  • Billing data and accounting documents: 10 years, as required by tax law.
  • Contact data and correspondence: 3 years from the last exchange of messages.
  • Analytics data: at most 14 months, or until you withdraw consent.
  • Your cookie preference: 12 months.

5. Your rights

You have the right of access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability and objection, and the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

You can exercise your rights through the contact form. We reply within one month of receiving your request.

You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) — dataprotection.ro — or with the supervisory authority in your country of residence.

6. Security

The website is served exclusively over an encrypted connection (HTTPS). Access to order data is limited to the people who need it to process your order.

7. Transfers outside the EU

Data is hosted in the European Union. If a provider were to involve a transfer outside the European Economic Area, it would take place only on the basis of the safeguards provided by the GDPR (an adequacy decision or standard contractual clauses).

8. Changes

If we change this policy, we publish the new version on this page and update the date at the top of the document.