The protection of your personal data is important to us. This policy describes what data we collect, why, how we use it and what rights you have under the GDPR (EU Regulation 2016/679) and Romanian law.
Who we are
The data controller is Pasticceria Edeea, based at Strada Victor Babeș 5, Bacău 600311, Romania. You can reach us at info@pasticceriaedeea.com or by phone at +40 772 879 419.
What data we collect
We collect only the data necessary to answer your questions or orders:
- Data you provide via the contact form: name, email, phone, subject, message
- Automatic technical data: IP address, browser type, pages visited
- Browsing preferences: chosen language, cookie consent
Purpose of processing
We use this data to:
- Respond to your messages and requests
- Prepare a personalised offer
- Improve the site and our services
- Comply with legal obligations (invoicing, accounting)
Legal basis
We process your data based on: your consent (art. 6(1)(a) GDPR), legitimate interest (art. 6(1)(f) GDPR) or performance of a contract/pre-contractual request (art. 6(1)(b) GDPR).
Who we share data with
Data is never sold or shared with third parties for marketing purposes. We only share it with: the hosting provider (Hostinger), competent authorities if required by law.
Data retention
Contact messages are kept for a maximum of 24 months. Invoicing/accounting data as per Romanian law (10 years).
Your rights
Under the GDPR, you have the following rights:
- Right of access to your data
- Right to rectification
- Right to erasure ("right to be forgotten")
- Right to restriction of processing
- Right to data portability
- Right to object to processing
- Right to lodge a complaint with ANSPDCP (www.dataprotection.ro)
Security
We take reasonable technical and organisational measures to protect your data against unauthorised access, loss or disclosure.
Changes
We may update this policy. The current version is the one published on this page.
For any question regarding your personal data, write to us at info@pasticceriaedeea.com.