Privacy policy

Last updated: 2026-04-25

We protect personal data under Regulation (EU) 2016/679 (GDPR) and Romanian Law 190/2018. Below, we explain what we collect, why and how you can exercise your rights.

1. Data controller

Dulce Hrănitor s.r.l.
VAT ID: RO37921977 · Trade Register: J2017004576129
str. Mehedinți, nr. 96 (la casă), et. 1, Cluj-Napoca 400529
Email: contact@deliciisanatoase.ro

2. What we collect

Identification and contact — first and last name, email, phone.
Address — delivery and/or billing address.
Orders — products, values, dates, payment method (without full card data — that stays with Stripe).
Browsing — IP, browser type, pages visited, interaction timings.
Marketing preferences — only if you explicitly subscribe.

We do not collect sensitive data (health, ethnicity, political views, religion) and we do not process data of minors under 16.

3. Purposes and legal basis

Order processing and delivery — performance of a contract (art. 6(1)(b) GDPR).
Invoicing and tax obligations — legal obligation (art. 6(1)(c) GDPR).
Marketing communications — explicit consent (art. 6(1)(a) GDPR); you can unsubscribe any time.
Service analysis and improvement — legitimate interest (art. 6(1)(f) GDPR).
Fraud prevention and security — legitimate interest.

4. Who we share data with

Stripe — card payment processing.
Couriers — order delivery.
Hosting provider — for site hosting.
Cloudinary — image storage and delivery.
Transactional email provider — order confirmations.
Tax authorities — when required by law.

Some providers are located outside the EU (e.g. USA). Transfers rely on the Standard Contractual Clauses approved by the European Commission, providing an adequate level of protection.

5. How long we keep data

Customer account — as long as the account remains active.
Orders and invoices — 10 years (accounting requirement under Law 82/1991).
Marketing — until unsubscribe or withdrawal of consent.
Browsing data — up to 13 months.

6. Your rights (GDPR)

Right of access (art. 15).
Right to rectification (art. 16).
Right to erasure — “the right to be forgotten” (art. 17).
Right to restriction (art. 18).
Right to data portability (art. 20).
Right to object (art. 21).
Right to withdraw consent (art. 7(3)).
Right not to be subject to automated decisions (art. 22) — we do not use such processes.

To exercise your rights, write to us at contact@deliciisanatoase.ro. We reply within 30 days.

7. Cookies

We use strictly necessary cookies for site functioning (authentication, cart, session) and, optionally, analytical cookies via Google Tag Manager / Facebook Pixel to improve the service. You can disable non-essential cookies from your browser settings.

8. Security

The site uses HTTPS. Passwords are hashed. Access to data is restricted to authorised personnel who need it to perform their tasks.

9. Complaints

If you're unhappy with how we process your data, you can lodge a complaint with:

National Supervisory Authority for Personal Data Processing (ANSPDCP)
B-dul G-ral Gheorghe Magheru 28-30, Sector 1, Bucharest
Tel: +40.318.059.211
Email: anspdcp@dataprotection.ro
Web: dataprotection.ro

10. Changes

We update this policy when the way we process data changes or when required by law. The date of the last update is shown at the top of the page.