Privacy policy (GDPR)

1. Data controller

The controller of your data is AKRAM CONFORT SRL, tax ID (CIF) RO34886891, trade register no. J34/318/2016, with its registered office at Sos. Alexandrie Nr. 147, Bragadiru, Jud. Ilfov. For any request about your personal data, write to akramconfort@gmail.com or call 0728198886.

2. What data we collect

We collect only the data needed for the purposes below:

• identification and contact data: name, email address, phone number;
• delivery and billing addresses (and, if you pick it on the map, the location you indicate);
• order data: the products ordered, the amount, the payment method and your order history;
• account data, if you create an account;
• technical data (IP address, browser and device type) and browsing data, collected through cookies only if you agree;
• the content of the messages you send us (email, phone, WhatsApp).

3. Purposes and legal bases

We process your data for the following purposes, on the following legal bases (Article 6 GDPR):

• processing and delivering orders, invoicing, returns and guarantee — performance of a contract (Art. 6(1)(b));
• complying with legal obligations, for example accounting and tax — legal obligation (Art. 6(1)(c));
• site security, fraud prevention and defending our rights — legitimate interest (Art. 6(1)(f));
• usage statistics and personalised ads through analytics and marketing cookies — your consent (Art. 6(1)(a)), which you can withdraw at any time.

4. Who we share data with

We do not sell your data. We may share it, strictly as needed, with:

• courier companies, to deliver orders;
• payment service providers, if you choose an online payment method;
• hosting and IT providers who help us run the site;
• accountants, advisers and lawyers, who are bound by confidentiality;
• Google (Analytics, Ads) and Meta (Pixel), only if you gave consent to the relevant cookies;
• public authorities, when the law requires it.

5. Transfers outside the European Economic Area

Some providers (for example Google and Meta) may process data outside the EEA, including in the United States. Such transfers rely on the mechanisms provided by the GDPR, such as an adequacy decision or standard contractual clauses.

6. How long we keep data

We keep data only as long as needed for the purpose it was collected for and, where relevant, as long as the law requires. Financial and accounting documents (for example invoices) are archived under the accounting legislation in force. Account data is kept while you have an account, and we delete it on request, within the limits allowed by law. Your cookie choice stays in your browser until you change it.

7. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw your consent at any time, without affecting earlier processing. We do not make decisions based solely on automated processing that significantly affect you.

To exercise your rights, write to akramconfort@gmail.com; we reply within one month at most. You also have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro.

8. Cookies

We use necessary cookies and, only with your consent, analytics and marketing cookies. The details, including how to change your choice, are in the Cookie policy.

9. Security

We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or destruction, and access is limited to people who need it.

10. Minors

The site is not directed at people under 16 and we do not knowingly collect data from minors.

11. Changes

We may update this policy. The date of the last update is shown above.