Legal
Privacy policy
To complete before launch: controller details. Template text, to be reviewed by legal counsel.
1. Data controller
[COMPANY NAME S.R.L.], registered office [ADDRESS], processes the personal data collected through this site in accordance with Regulation (EU) 2016/679 (GDPR).
2. What data we collect
- Orders: name, email, phone, delivery address, ordered products.
- Contact form: name, email, subject, message.
- Technical data: IP address and server logs, strictly for security and site operation.
3. Purpose and legal basis
Order data is processed to perform the contract (delivery, invoicing, order communications) and to comply with legal obligations (accounting). Contact form data is processed on the basis of our legitimate interest in answering requests.
4. Who we share data with
Delivery data is passed to the courier company. Emails are sent through an email service provider (Resend). The site is hosted on servers in the European Union. We do not sell or share data with third parties for marketing.
5. Retention
Order data is kept as required by tax law (generally 10 years). Contact messages are kept for at most 2 years.
6. Cookies and local storage
The site only uses browser local storage for the shopping cart and a strictly necessary session cookie for the admin area. We do not use tracking or advertising cookies.
7. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection, and the right to lodge a complaint with the Romanian supervisory authority (ANSPDCP, dataprotection.ro). To exercise your rights write to salut@paharulluitoni.ro.
