Privacy policy

1. Who we are

The data controller is Cuburi Mici, registered at Str. Gheorghe Doja 64, Târgu Mureș (“we”). You can contact us about your data at email: comenzi@cuburimici.ro, phone: 0365 410 228.

This policy explains what personal data we process when you use cuburi-mici.webooster.ai, why, on what legal basis and what rights you have under Regulation (EU) 2016/679 (GDPR).

2. What data we process

When you write to us through the contact form: your name, email address, phone number (if given) and your message.

When you place an order: name, delivery and billing address, phone, email, ordered products and order history. Card details are handled directly by the payment processor; we never see or store them.

When you create an account: account details (name, email, encrypted password) and account activity.

Technical data: IP address, browser type and pages visited, in server logs, for the site to work securely.

3. Why and on what basis

To answer your messages: our legitimate interest in replying to people who contact us (Art. 6(1)(f) GDPR).

To process and deliver orders, issue invoices and handle returns: performance of a contract (Art. 6(1)(b)) and our legal tax and accounting obligations (Art. 6(1)(c)).

To manage your account: performance of a contract (Art. 6(1)(b)).

For site security and abuse prevention: our legitimate interest.

4. Who we share data with

Our hosting provider and other technical providers that help us operate, only as needed and under contract.

The payment processor (e.g. Stripe), courier companies for delivery and our invoicing software.

Public authorities, when required by law. We never sell your data.

Some providers may process data outside the European Economic Area; in that case we rely on GDPR safeguards (adequacy decisions or standard contractual clauses).

5. How long we keep data

Messages: as long as needed to reply and at most 2 years.

Order data and invoices: as long as accounting law requires (generally 10 years).

Account data: while the account is active, then deleted or anonymised.

Technical logs: at most 12 months.

6. Your rights

You have the right of access, rectification, erasure, restriction, data portability, objection and the right to withdraw your consent at any time, without affecting earlier processing.

To exercise your rights, write to comenzi@cuburimici.ro; we reply within one month.