Privacy policy

1. Data controller

For requests regarding personal data write to contact@odorizanteprofesionale.ro (subject: “GDPR”).

2. Principles

We process data lawfully, fairly and transparently; we collect only what is necessary for the purpose; we maintain accuracy; we limit retention; we ensure integrity and confidentiality; we demonstrate accountability.

3. Categories of data

• Identification and contact — name, e-mail, phone;
• Billing — address, company details (CUI, Trade Register, name) for B2B;
• Delivery — address, contact person, delivery instructions;
• Transactional — order history, subscriptions, quote requests, support correspondence;
• Technical — reasonable technical logging, device/browser type, IP (security);
• Preferences — VAT display, cookie consent, guest cart contents.

4. Source

Data come directly from you (forms, account, checkout, quote request, e-mail/phone) or are generated by the system (cart identifiers, security logs).

5. Purposes and legal bases

• Performance of the contract — order processing, delivery, invoicing, subscriptions, responding to quotes;
• Legal obligations — tax and accounting archiving, warranties, responses to authorities;
• Legitimate interest — Site security, fraud prevention, service improvement, aggregated statistics;
• Consent — non-essential cookies / analytics; electronic marketing only if you have explicitly opted in.

6. Orders, quotes and subscriptions

Without contact and billing data we cannot fulfil an order or issue tax documents. For subscriptions we keep recurring delivery preferences until cancellation or account deletion, subject to legal retention obligations.

7. Contact and B2B forms

Messages and quote requests are used to reply to you and, where applicable, to prepare a commercial proposal. We do not sell contact lists to third parties.

8. Cookies

Details on essential and optional cookies, duration and how to manage preferences are in the Cookie policy.

9. Recipients

We may share data, strictly on a need-to-know basis, with:

• hosting and IT maintenance providers;
• couriers and logistics operators;
• payment processors (if online payment is active);
• transactional e-mail / SMS services;
• accounting / consultants, under a confidentiality obligation;
• public authorities, when the law requires it.

10. Transfers outside the EEA

In principle we process data within the European Economic Area. If a provider processes data outside the EEA, we use appropriate safeguards (e.g. standard contractual clauses) in line with the GDPR.

11. Retention period

• order / billing data — according to legal tax deadlines (typically a minimum of 5–10 years, depending on document type);
• account and preferences — for the life of the account, plus a reasonable period after closure;
• quote requests / correspondence — for the commercial relationship and a reasonable interval afterwards;
• security logs — short periods, proportionate to the purpose;
• cookie consent — until withdrawal or expiry of the stored preference.

12. Security and minors

We apply reasonable technical and organisational measures (HTTPS, access control, backup). The Site is not directed at children under 16; we do not intentionally collect minors’ data.

13. Your rights

You have the right of access, rectification, erasure, restriction, objection, portability (where applicable) and to withdraw consent without affecting the lawfulness of prior processing. You may lodge a complaint with ANSPDCP.

To exercise your rights: contact@odorizanteprofesionale.ro. We respond within the time limits set by the GDPR.

14. Updates

We may update this policy. The date in the header indicates the version in force. Material changes will be signalled on the Site where appropriate.