Privacy Policy

Privacy Policy

Effective Date: 4 July 2026

Privacy Policy for ULEI DE GABUD ULEI NATURAL DIN PLANTE OLEAGINOASE SRL

ULEI DE GABUD ULEI NATURAL DIN PLANTE OLEAGINOASE SRL (“Company”, “we”, “our”, or “us”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, store, and protect your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), applicable Romanian data protection laws, and other relevant European privacy legislation.

By using our website, purchasing our products, contacting us, or otherwise interacting with us, you acknowledge that you have read and understood this Privacy Policy.

1. Data Controller

Data Controller:

ULEI DE GABUD ULEI NATURAL DIN PLANTE OLEAGINOASE SRL

Registered in Romania

Email: sales@uleidegabuduleinatural.com

Telephone: +40 00000000

Registered Office: Main Street, No. 6, Gabud, Alba County-Romania

VAT Number: 45956119

Trade Register Number: J1/447/2022


2. Personal Data We Collect

Depending on your interaction with us, we may collect the following categories of personal data:

Identity Data

  • Name

  • Surname

  • Company name (where applicable)

Contact Data

  • Email address

  • Telephone number

  • Postal address

  • Billing address

  • Shipping address

Financial Data

  • Bank account details (where required)

  • Payment information processed by payment service providers

We do not store full payment card details.

Transaction Data

  • Orders

  • Purchased products

  • Delivery information

  • Invoices

  • Payment status

Technical Data

  • IP address

  • Browser type

  • Device information

  • Operating system

  • Language settings

  • Cookies

  • Website usage information

Communication Data

  • Emails

  • Contact form messages

  • Customer support communications

Marketing Preferences

  • Newsletter subscription

  • Marketing consent

  • Communication preferences

3. How We Collect Your Data

We collect personal data:

  • Directly from you

  • Through our website

  • When you contact us

  • When you place an order

  • Through cookies and similar technologies

  • Through business partners involved in order fulfillment

  • From publicly available business registers where applicable

4. Legal Basis for Processing

We process personal data only where we have a lawful basis under Article 6 GDPR.

These legal bases include:

Contract Performance

Processing necessary to:

  • Process orders

  • Deliver products

  • Provide customer support

  • Issue invoices

Legal Obligations

Processing necessary for:

  • Accounting

  • Tax compliance

  • Consumer protection obligations

  • Product traceability where applicable

Legitimate Interests

Processing based on legitimate business interests, including:

  • Website security

  • Fraud prevention

  • Business administration

  • Customer service improvement

  • Responding to inquiries

Consent

Where legally required, we rely on your consent for:

  • Marketing communications

  • Optional cookies

  • Newsletter subscriptions

You may withdraw your consent at any time.

5. Purposes of Processing

We process your personal data to:

  • Provide our products and services

  • Manage customer accounts

  • Process payments

  • Deliver orders

  • Respond to inquiries

  • Comply with legal obligations

  • Improve our website

  • Protect against fraud

  • Send newsletters where consent has been provided

  • Maintain business records

  • Resolve complaints

6. Cookies

Our website uses cookies and similar technologies.

Cookies help us:

  • Ensure website functionality

  • Remember preferences

  • Improve website performance

  • Analyze visitor behavior

  • Provide security

Where required by law, we request your consent before placing non-essential cookies.

You may manage cookie preferences through your browser or our cookie banner.

7. Sharing Your Personal Data

We may share personal data with:

  • Delivery companies

  • Payment processors

  • IT service providers

  • Website hosting providers

  • Accountants

  • Legal advisors

  • Government authorities where legally required

  • Regulatory authorities

  • Auditors

We require all third parties to process personal data securely and in accordance with GDPR.

We do not sell your personal data.

8. International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including:

  • European Commission Adequacy Decisions

  • Standard Contractual Clauses (SCCs)

  • Other safeguards permitted under GDPR

9. Data Retention

We retain personal data only for as long as necessary.

Typical retention periods include:

  • Accounting records: 10 years (or as required by Romanian law)

  • Customer contracts: duration of the contractual relationship plus applicable limitation periods

  • Marketing data: until consent is withdrawn

  • Customer service records: as necessary to resolve issues and comply with legal obligations

After the retention period expires, data is securely deleted or anonymized.

10. Your Rights

Under GDPR, you have the following rights:

  • Right to be informed

  • Right of access

  • Right to rectification

  • Right to erasure (“Right to be Forgotten”)

  • Right to restrict processing

  • Right to data portability

  • Right to object

  • Rights relating to automated decision-making and profiling

  • Right to withdraw consent

  • Right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)

You may exercise these rights by contacting us using the contact details provided above.

11. Security Measures

We implement appropriate technical and organizational measures to protect personal data, including:

  • Secure servers

  • Encryption where appropriate

  • Access controls

  • Password protection

  • Regular software updates

  • Backup procedures

  • Employee confidentiality obligations

Although we strive to protect your data, no internet transmission can be guaranteed to be completely secure.

12. Children’s Privacy

Our products and services are not intended for children under the age of 16.

We do not knowingly collect personal data from children.

If we become aware that personal data has been collected from a child without appropriate consent, we will delete it promptly.

13. Automated Decision-Making

We do not make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.

14. Third-Party Websites

Our website may contain links to third-party websites.

We are not responsible for the privacy practices of those websites.

Users should review the privacy policies of each external website they visit.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

Any changes will be published on our website together with the updated effective date.

Where required by law, we will notify users of significant changes.

16. Contact Us

If you have questions regarding this Privacy Policy or the processing of your personal data, please contact:

ULEI DE GABUD ULEI NATURAL DIN PLANTE OLEAGINOASE SRL

Email: sales@uleidegabuduleinatural.com

Telephone: +40

Registered Address:  Main Street, No. 6, Gabud, Alba County,Romania

17. Supervisory Authority

If you believe your personal data has been processed unlawfully, you have the right to lodge a complaint with:

Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)

Website: https://www.dataprotection.ro

You also have the right to seek judicial remedies under applicable Romanian and European Union law.