Privacy Policy

This policy explains what personal data we collect when you use this shop, why, how long we keep it, who we share it with and what your rights are under the General Data Protection Regulation (EU) 2016/679 (GDPR).

The controller

The controller of your personal data is:

For anything about your data, write to us at the e-mail address above or through the contact form.

What we collect and why

DataPurposeLegal basisHow long we keep it
Account: name, e-mail address, phone number, addresses, company name and VAT number (if you give them), password or sign-in codesTo give you an account, so you can follow your orders and order again fasterThe contract (art. 6(1)(b))Until you ask us to delete the account
Orders: the products, prices, billing and delivery addresses, contact details, payment status and invoicesTo take, pay, ship and invoice the order, handle returns and guarantee claimsThe contract (art. 6(1)(b)) and our legal obligations (art. 6(1)(c))As long as accounting and tax law requires us to keep the supporting documents (in Romania up to 10 years)
Contact form and e-mails: name, e-mail address, the messageTo answer youOur legitimate interest in answering (art. 6(1)(f)), or steps before a contract (art. 6(1)(b))Up to 2 years after the conversation ends
"Notify me" requests: e-mail address and the productTo tell you when a product becomes availableYour consent (art. 6(1)(a))Until we sent the notification, or you unsubscribe
Analytics: the pages you visit, how you use them, your device and browser, an approximate location, recordings of how the pages are usedTo understand which pages work and improve the shopYour consent (art. 6(1)(a)), given in the cookie bannerUp to 14 months in Google Analytics, up to 13 months in Microsoft Clarity
Technical logs: IP address, the requests made to the site, errorsTo keep the site secure and workingOur legitimate interest (art. 6(1)(f))For a limited time, as long as needed for security

You don't have to give us your data, but without the details an order needs we can't take or deliver it.

Who we share it with

We only share your data with the service providers that help us run the shop, under contracts that oblige them to protect it, and with authorities when the law requires it:

  • Stripe – card payments. Stripe receives your card details directly; we never see them.
  • Oblio – issuing the invoices, which are also reported to the Romanian tax authority (ANAF) as the law requires.
  • The courier delivering your order – your name, delivery address and phone number.
  • Google (Google Analytics) and Microsoft (Clarity) – analytics, only if you accept the analytical cookies.
  • Our hosting and e-mail providers – they store the site's data and send our e-mails.

Some of these providers process data outside the European Economic Area (for example in the United States). In that case the transfer is covered by an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework) or by the Standard Contractual Clauses.

We don't sell your data and don't use it for automated decisions that affect you.

Your rights

You have the right to access your data, to have it corrected or deleted, to restrict its processing, to object to processing based on our legitimate interest, and to receive the data you gave us in a portable format. Where the processing is based on your consent, you can withdraw it at any time, without affecting the processing done before. To use any of these rights, contact us; we answer within one month.

You also have the right to complain to the Romanian data protection authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), dataprotection.ro, or to the authority of the EU country where you live.

Cookies

How we use cookies is explained in the Cookie Policy.

Changes

We update this policy when the way we process data changes. The current version is always on this page.