Privacy Policy

1. Data Controller

The data controller for this website is V Trade Enterprise S.R.L., CUI 43845432, registered at J40/1388/2021, with registered office at Str. Posada 22, Sector 5, București 051412, România. Contact: [email protected].

2. Data We Collect

We collect only the data necessary to operate our store and fulfil your orders:

• Account data: name, email address, delivery address
• Order data: products purchased, order history, delivery details
• Payment data: processed securely by Stripe; we do not store card details
• Communication data: emails and support requests
• Technical data: IP address, browser type, pages visited (server logs)

3. How We Use Your Data

• Processing and fulfilling your orders (contract performance)
• Sending order confirmations and shipping updates (contract performance)
• Providing customer support (legitimate interest)
• Sending marketing emails via Postal (only with your explicit consent)
• Ensuring website security and preventing fraud (legitimate interest)

4. Legal Basis for Processing

We process your personal data on the following legal bases under GDPR Art. 6(1): (a) your consent — for marketing communications; (b) contract performance — to process orders, deliver products, and handle returns; (f) legitimate interest — for fraud prevention, website security, and customer support improvements.

5. Data Processors & Sharing

We share your data only with the following processors, under appropriate data processing agreements:

• Stripe, Inc. (USA) — payment processing. Stripe operates under Standard Contractual Clauses (SCCs) for EU-US data transfers.
• Postal (self-hosted) — transactional and marketing email delivery
• Shipping carriers — name and delivery address for order fulfilment

We never sell, rent, or trade your personal data to third parties.

6. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of access — obtain a copy of your data
• Right to rectification — correct inaccurate data
• Right to erasure — request deletion of your data
• Right to restrict processing
• Right to data portability — receive your data in a structured format
• Right to object — object to processing based on legitimate interest
• Right to withdraw consent at any time without affecting prior processing

To exercise any of these rights, contact us at [email protected].

7. Data Retention

We retain order and invoice data for 10 years as required by Romanian fiscal legislation. Account data is retained as long as your account is active. Marketing consent records are kept for the duration of consent. Server logs are retained for a maximum of 90 days. You may request deletion of your account at any time, subject to legal retention obligations.

8. Cookies

We use essential cookies for website functionality. For full details, see our Cookie Policy.

9. Supervisory Authority & Contact

You have the right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP): Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal, B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, București 010336, www.dataprotection.ro. For privacy-related inquiries, contact us at: [email protected]