Privacy Policy

1. Who We Are

Data Controller: Vinum Capidava S.R.L. (Crama Darie)

Tax ID (C.U.Î.): RO18585579

Trade Register: J13/1132/13.04.2006

Address: Topalu village, Topalu commune, Dunării street no. 494 B, Constanța county, postal code 907280, Romania

Website: https://www.cramadarie.ro

Email: Office@CramaDarie.Ro

Phone: +40 723 046 002

2. What Data We Collect

Data provided directly by you:

• First and last name • Email address • Phone number • Delivery and/or billing address • Marketing communication preferences • Payment information (processed securely through third-party providers)

Data collected automatically:

• IP address • Browser and device type • Pages visited and time spent on site • Aggregated traffic and conversion information • Cookie preferences

Data of minors

The cramadarie.ro website and our offers are intended exclusively for persons aged 18 years or older. We do not intentionally process personal data of minors. If we discover that we have collected such data, we will delete it without undue delay.

3. Why We Collect Data

• Order processing – To deliver your ordered products and issue tax documents • Communication – To answer your questions and inform you about order status • Marketing – With your explicit consent, to send you offers, news, and event invitations • Service improvement – To analyze and optimize the browsing experience • Security – To prevent fraud and ensure system integrity • Legal obligations – To comply with tax and accounting requirements

4. Legal Basis for Processing

• Contract performance – For processing and delivering orders • Consent – For newsletter, marketing communications, and optional cookies • Legitimate interest – For improving services and website security • Legal obligation – For accounting archiving and reporting to authorities

5. Who We Share Data With

We may share your data with the following categories of recipients:

• Delivery service providers (couriers) • Payment processors • IT and hosting service providers • Web analytics services (e.g., Google Analytics) • Public authorities (when required by law)

We do not sell or rent your personal data to third parties.

6. Your Rights

Under GDPR, you have the following rights:

• Right of access – You can request confirmation that we process your data • Right to rectification – You can request correction of inaccurate data • Right to erasure – You can request deletion of your data • Right to restriction – You can request limitation of processing • Right to portability – You can receive your data in a structured format • Right to object – You can object to processing • Right to withdraw consent • Right to lodge a complaint with the supervisory authority

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data: • Use of SSL/TLS encryption for all data transfers • Restricted data access on a "need to know" basis • Regular system updates • Internal procedures and staff training

8. Storage Period

• Order and billing data: 10 years (legal obligations) • Marketing data: until consent is withdrawn • Cookies: according to Cookie Policy • Correspondence: up to 2 years from last interaction

9. International Transfers

In certain situations, our partners may process data outside the EEA. We ensure appropriate safeguards are in place: standard contractual clauses, European Commission adequacy decisions, and additional security measures.