Privacy policy

Controller

The data controller is Vadalex Exim SRL. Contact details are on the Contact page.

What we process and why

• Orders: name, email, phone, delivery address, company invoicing details (if provided), products ordered — to perform the contract (Art. 6(1)(b) GDPR).
• Accounting: order documents — to meet legal obligations (Art. 6(1)(c)), for the period required by accounting law.
• Email offers: only if you tick the consent box at checkout (Art. 6(1)(a)); you can withdraw it at any time.
• Wholesale requests: contact details of the company representative — to answer the request (legitimate interest, Art. 6(1)(f)).

Who receives the data

The courier (delivery), the payment processor (card payments; we do not receive card details), hosting and email providers, our accountant and authorities where required by law. We do not sell personal data.

Your rights

Access, rectification, erasure, restriction, portability, objection and withdrawal of consent. Write to us using the details on the Contact page. You may also complain to the Romanian supervisory authority (ANSPDCP).