Privacy Policy

Last updated: February 2026

Vinum Capidava S.R.L. (Crama Darie) respects and protects the confidentiality of your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Romanian data protection legislation.

This Privacy Policy describes what personal data we collect, how we use it, with whom we share it and how we protect it when you use our websites www.cramadarie.ro and shop.cramadarie.ro.

1. Identity of the Data Controller

The personal data controller is:

We have not appointed a Data Protection Officer (DPO) as we do not fall within the categories provided by Art. 37 GDPR. For any data protection enquiries, please contact us at the email address indicated above.

2. Categories of Personal Data Collected

2.1. Data provided directly by you

  • Identification data: name, surname, email address, phone number, delivery address, billing address.
  • Account data: email address and encrypted password (if you create an account).
  • Order data: ordered products, quantities, delivery preferences, payment method selected.
  • Communications: content of messages sent through the contact form, email or telephone.

2.2. Data collected automatically

  • Technical data: IP address, browser type, operating system, screen resolution, pages visited, visit duration.
  • Cookies and similar technologies: as detailed in the Cookie Policy.

2.3. Data regarding minors

We do not knowingly collect or process personal data of persons under 18 years of age. Our website exclusively sells alcoholic beverages and is intended for adults.

3. Purposes and Legal Bases for Processing

We process your personal data for the following purposes:

  • Processing orders and delivering products - legal basis: performance of the contract (Art. 6(1)(b) GDPR).
  • Issuing invoices and tax compliance - legal basis: legal obligation (Art. 6(1)(c) GDPR).
  • Communication regarding orders (confirmations, delivery notifications, status updates) - legal basis: performance of the contract.
  • Creating and managing your user account - legal basis: performance of the contract.
  • Sending commercial communications and newsletters - legal basis: your consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time.
  • Improving services and statistical analysis - legal basis: our legitimate interest (Art. 6(1)(f) GDPR) to improve the way our Website interacts with users.
  • Fraud prevention and Website security - legal basis: our legitimate interest.
  • Compliance with legal obligations - legal basis: legal obligation (Art. 6(1)(c) GDPR).

4. Recipients of Personal Data

Your personal data may be transmitted to the following categories of recipients, strictly to the extent necessary to fulfil the purposes mentioned:

  • Courier service providers - for product delivery.
  • Payment service providers - for transaction processing.
  • IT and hosting providers - for Website operation and maintenance.
  • Email and communication service providers - for sending notifications and newsletters.
  • Public authorities - when there is a legal obligation (tax authorities, regulatory bodies).

We ensure that all third-party suppliers we work with maintain adequate standards of personal data protection and process data exclusively in accordance with our instructions.

5. International Data Transfers

Some of our service providers may be based or process data outside the European Economic Area (EEA). In such cases, we ensure that adequate safeguards exist for the protection of your data, in accordance with Art. 46 GDPR requirements.

6. Data Retention Period

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Data associated with orders and invoices - in accordance with legal obligations regarding the retention of accounting and fiscal documents (10 years, in accordance with applicable fiscal legislation).
  • Account data - for the duration of the existing account and for a reasonable period thereafter.
  • Newsletter data - until you withdraw your consent.
  • Data collected through cookies - in accordance with the durations specified in the Cookie Policy.
  • Other categories of data - in accordance with applicable legal obligations.

7. Your Rights

In accordance with GDPR (Art. 15-22), you have the following rights regarding your personal data:

  • Right of access (Art. 15) - to request confirmation of processing and a copy of your personal data.
  • Right to rectification (Art. 16) - to request correction of inaccurate or incomplete data.
  • Right to erasure (Art. 17) - to request deletion of data, with respect to legal exceptions.
  • Right to restriction of processing (Art. 18) - to request limitation of processing in certain situations.
  • Right to data portability (Art. 20) - to receive data in a structured, commonly used, machine-readable format.
  • Right to object (Art. 21) - to object to processing of data based on legitimate interest or direct marketing.
  • Right not to be subject to automated individual decision-making (Art. 22) - including profiling.

To exercise any of these rights, please contact us at Office@CramaDarie.Ro. We will respond to your request within a maximum of 30 days from receipt, in accordance with Art. 12 GDPR.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. These measures are periodically reviewed and updated according to evolving risks.

9. Right to Lodge a Complaint

If you believe that the processing of your personal data infringes GDPR provisions, you have the right to lodge a complaint with the supervisory authority:

  • National Supervisory Authority for Personal Data Processing (ANSPDCP)
  • Address: B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, postal code 010336, Bucharest, Romania
  • Website: www.dataprotection.ro

10. Changes to the Privacy Policy

We reserve the right to periodically update this Privacy Policy. Changes will be published on this page with the date of the last update. We recommend that you periodically consult this page to stay informed of any changes.

11. Contact

For any questions regarding the processing of your personal data:

  • Vinum Capidava S.R.L. (Crama Darie)
  • Tax ID: RO18585579 | Trade Reg.: J13/1132/13.04.2006
  • Address: Sat Topalu, comuna Topalu, str. Dunarii nr. 494 B, jud. Constanta, postal code 907280, Romania
  • Email: Office@CramaDarie.Ro
  • Phone: +40 723 046 002
  • Hours: Monday-Friday 9:00-18:00