Privacy

The data controller is VECHI CA NOU S.R.L., CUI 55374657, registered at Strada Nerva Traian 27–33, staircase B, floor 1, apartment 6, Sector 3, Bucharest. For questions or requests about your data, email [email protected].

We receive the information you enter in your account, at checkout or in messages to us. The website also records technical data, such as your IP address and access information.

The information required for an order allows us to process it and contact you. Without the necessary details, we cannot complete the order. We don't store your full card number or security code; Stripe processes the payment.

• Your name, email, phone number, billing details and order: to handle purchases, collection, returns and contract-related requests.
• Invoice details and order documents: to meet legal accounting and invoicing obligations.
• Messages and technical data: to answer questions, protect the website and prevent misuse, based on our legitimate interests.
• If we introduce consent-based marketing communications or optional cookies, we'll ask for your permission separately. You can withdraw it.

We use DigitalOcean for hosting, Cloudflare to distribute and protect the website, Google Workspace for email and Stripe for payments. Google Maps loads only after you consent to Google Maps in the banner or Cookie settings. Enabling it sends technical data, including your IP address, to Google. You can turn the map off using the disable button.

Information needed for invoicing may be shared with our accounting services provider. We disclose it to authorities when required by law.

Some services may involve transfers outside the European Economic Area. These transfers require the safeguards provided by the GDPR. You can request details about providers and applicable safeguards at the contact address above.

We keep account data while the account is active. Messages and order data are kept as long as needed to handle requests, fulfil orders and address possible complaints. For accounting records and supporting documents, the general retention period is five years, calculated from 1 July of the year following the financial year in which they were created, subject to any applicable special periods.

Deleting your account does not delete documents we are legally required to keep. For data used on the basis of consent, withdrawing permission stops its use for that purpose; we may retain evidence of your choice.

You may request access, correction, erasure, restriction of processing or portability, subject to the law. You may object to processing based on legitimate interests and, at any time, to direct marketing. Withdrawing consent does not affect earlier processing.

Send your request to [email protected]. To protect your data, we may ask for information needed to verify your identity.

You have the right to lodge a complaint with Romania's National Supervisory Authority for Personal Data Processing (ANSPDCP).