Privacy policy

The controller of your personal data is SC Exemplu Cânepă SRL, tax ID (CUI) RO00000000, registered office at Str. Exemplu 1, București. For any question about your data, write to us at contact@exemplu.ro or call +40 700 000 000.

We have not appointed a data protection officer (DPO), because our processing does not require one (GDPR, art. 37). Your questions come straight to us at the contact details above.

We use only the data we need for each purpose below. The table shows the legal basis (GDPR, art. 6) and how long we keep them; after that, the data are deleted or anonymised.

Almost all your data come from you, when you order, create an account or write to us. When you choose to sign in with Google or Facebook, we receive basic profile data from them: your name, e-mail address, an account identifier and, if there is one, your profile picture. We never receive your password there (GDPR, art. 14).

For an order we need your name, phone, e-mail and delivery address, and for the invoice your billing details. Without them we cannot conclude the contract or deliver the order.

Subscribing to the newsletter and writing a review are voluntary. If you don't use them, you can still buy just the same.

We share data only as far as each purpose requires, with partners who work with us under a contract. We do not sell your data to anyone.

• Courier companies, for delivery.
• The site's hosting provider.
• The payment processor, when you pay online by card.
• Our accountant or accounting firm.
• Public authorities, only when the law requires it.
• The e-mail service that sends order confirmations and the newsletter.
• Google or Meta (Facebook), only if you choose to sign in with them.

We transfer data outside the European Union and the European Economic Area only to a country with a European Commission adequacy decision or under standard contractual clauses approved by the Commission (GDPR, art. 45 and 46). On request, we tell you which safeguard applies and how to get a copy of it.

You can exercise the rights below free of charge by e-mailing contact@exemplu.ro. We reply within one month at the latest (GDPR, art. 12).

• Access: find out what data we hold about you and get a copy (art. 15).
• Rectification: we correct wrong or incomplete data (art. 16).
• Erasure: we delete data when we no longer have grounds to keep them (art. 17).
• Restriction: we temporarily stop using the data (art. 18).
• Portability: you receive your data in a structured format that another provider can easily take over (art. 20).
• Objection: you object to processing, including for marketing (art. 21).
• Withdrawing consent: at any time, for example via the newsletter's unsubscribe link, without affecting earlier processing (art. 7(3)).

If you believe we process your data in breach of the law, you can lodge a complaint with the Romanian data protection authority, Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Bucharest, www.dataprotection.ro (GDPR, art. 77).

You can also write to us first; we can often solve the problem faster.

We do not make decisions based solely on automated processing of your data, and we do not profile you (GDPR, art. 22).

The shop sells only to people aged 18 or over and does not knowingly collect data about minors. If we learn that we have received data from someone under 18, we delete them.

The site uses an encrypted connection (HTTPS). Only the people and partners who need the data for their work have access to them, and only as long as needed.

If a security breach puts your rights at risk, we notify you and ANSPDCP, as the law requires (GDPR, art. 33 and 34).

The site uses only strictly necessary cookies and local storage, with no traffic analytics and no advertising. The full list, with the purpose and lifetime of each item, is in the Cookie policy.

When we change this policy, we publish the new version on this page and update the date at the top.