GDPR / Privacy Policy

www.locandadelvino.ro

INTRODUCTION

On your first visit to www.locandadelvino.ro you may see a cookie information banner asking for your consent to the use of non-essential cookies (analytics, marketing etc.). Cookies that are strictly necessary for the functioning of the website are used on the basis of the legitimate interest of LDV Genesis SRL, while analytics and marketing cookies are used only if you give your consent.

This Privacy Policy provides details on how we collect and process personal data when you use our website www.locandadelvino.ro, including any information you may provide through contact or order forms.

LDV Genesis SRL is the data controller and is responsible for your personal data (referred to in this Privacy Policy as “we”, “us” or “our”).

⸻

CONTACT DETAILS

Our full details are:

Full name of the company:
LDV GENESIS S.R.L.

Registered office:
Str. Știrbei Vodă, nr. 164, bl. 21A, sc. A, et. 1, ap. 15,
sector 1, Bucharest, Romania

Contact

If you are not satisfied with the way we collect and use your data, you have the right to lodge a complaint with the Romanian Data Protection Authority – ANSPDCP (www.dataprotection.ro).
Before contacting ANSPDCP, we encourage you to reach out to us via Contact so that we can try to resolve your request together.

It is very important that the information we hold about you is accurate and up to date. Please let us know of any changes to your personal data at any time by sending us an e-mail using Contact.

⸻

WHAT DATA WE COLLECT ABOUT YOU

“Personal data” means any information that can identify an individual. It does not include anonymous or aggregated data.

Depending on how you interact with the website and with us, we may process the following categories of data:

• Identity data: first name, last name.
• Contact data: e-mail address, phone number, delivery address (where applicable).
• Billing and, where appropriate, financial data: billing address, data required for issuing an invoice (for legal entities – name, tax identification number etc.); as a rule, we do NOT collect card details via the website. If you pay by bank transfer, we may process information such as the IBAN and the account holder’s name.
• Transaction data: details regarding orders, products requested, estimated order value, history of commercial interactions with us.
• Technical data: IP address, browser type and version, types and versions of browser plug-ins, operating system and platform, time zone setting and other technologies on the devices you use to access the website.
• Usage data: information on how you use our website, pages visited, session duration, actions carried out on the site.
• Marketing and communications data: your preferences in receiving marketing communications from us (for example, newsletters) and your communication preferences.

The personal data we process through the website www.locandadelvino.ro mainly includes:

• identification data: first name, last name;
• contact data: e-mail, phone, delivery address (where applicable);
• other data that you voluntarily provide through the forms on the website or in correspondence with us (e.g. comments related to the order).

In certain specific cases, we may also process, after informing you in advance, other information necessary to carry out our activity safely or to protect our legitimate interest (e.g. data required for the defence of a right in court).

⸻

HOW WE COLLECT YOUR PERSONAL DATA

We collect data about you in a variety of ways, including:
1. Direct interactions
You may provide data by filling in forms on our website or by communicating with us via e-mail, phone or other means, including when you:

• send us an order request via the form on the website;
• contact us through the contact form;
• request information about our products;
• ask to receive offers or commercial communications;
• send us feedback or complaints.
2. Automated technologies or interactions
As you use our website, we may automatically collect technical data about your equipment, browsing actions and usage patterns. We collect this data by using cookies, server logs and similar technologies. For more details, please see the “Cookies” section and/or the site’s cookie policy.
3. Third-party or publicly available sources
We may receive personal data about you from various third-party and/or public sources, for example:

• analytics providers (such as Google Analytics) or social media platforms (e.g. Facebook), which may sometimes be located outside the EU/EEA;
• identification or contact data from public sources (e.g. the Trade Register in the case of representatives of legal entities, or other publicly available databases).

⸻

HOW WE USE YOUR PERSONAL DATA (LEGAL BASES AND PURPOSES)

We will use your personal data only when the law allows us to do so. In general, we rely on the following legal bases:

• performance of a contract (or taking steps at your request prior to entering into a contract);
• our legitimate interest (or that of a third party), provided that your fundamental rights and freedoms do not override those interests (e.g. for running the website, analysing its use etc.);
• compliance with a legal obligation (e.g. tax and accounting obligations);
• in certain cases, consent (e.g. for marketing communications by e-mail, where no other legal basis applies).

Examples of purposes for which we process your data:

• Receiving and managing order requests
– data type: identity, contact, delivery data, transaction data;
– legal basis: performance of a contract or steps at your request prior to entering into a contract.

• Communicating with you about products, availability, delivery and other order-related details
– data type: identity, contact, transaction data;
– legal basis: performance of a contract, legitimate interest (for the proper conduct of the business relationship).

• Issuing tax and accounting documents (invoices etc.) and fulfilling legal obligations
– data type: identity, contact, billing and transaction data;
– legal basis: compliance with legal obligations.

• Administering and protecting our website and business
(including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting)
– data type: identity (where necessary), contact, technical data, usage data;
– legal basis: legitimate interest (for the proper and secure operation of the website and IT systems), legal obligations relating to data security.

• Analysing website usage and improving our services and content
– data type: technical data, usage data;
– legal basis: legitimate interest (to understand how the website is used and to improve it).

• Sending marketing communications, offers and information about products (newsletter, campaigns)
– data type: identity, contact, marketing and communications data;
– legal basis: consent (where required by law) or legitimate interest (where you are an existing customer and we offer similar products, within the limits of the law).

We do not process special categories of data via the website (such as health data, political opinions etc.), and the website does not collect or process card details.

⸻

MARKETING COMMUNICATIONS

You will receive marketing communications from us (for example, newsletters or offers by e-mail) only if:

• you have explicitly requested this (you subscribed or ticked a consent box); or
• you are already a customer and the law allows us to contact you about similar products, based on our legitimate interest, while respecting your right to object.

We will obtain your express consent before disclosing your data to any third party for marketing purposes.

You may withdraw your consent to marketing or object to commercial communications at any time by:

• using the unsubscribe link included in marketing messages (where available); and/or
• sending us an e-mail via Contact clearly stating that you no longer wish to receive marketing communications.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

⸻

DISCLOSURE OF YOUR PERSONAL DATA

We may disclose your personal data to the following categories of recipients, where necessary:

• providers of IT and hosting services, maintenance and technical support;
• providers of courier/delivery services (to deliver ordered products, where applicable);
• providers of accounting, legal, tax or audit services;
• public authorities (e.g. tax authorities, law enforcement bodies, courts) where we are legally required to provide data;
• other entities, only where we have your consent or a clear legal basis for such disclosure.

We require all third parties to respect the security of your personal data and to process it in accordance with the law. They may only process your data in accordance with our instructions and for the purposes communicated.

⸻

INTERNATIONAL TRANSFERS

As a rule, we do not transfer your personal data outside the European Economic Area (EEA).

However, some third-party services we use (e.g. web analytics tools, social media platforms) may have servers or entities outside the EEA. In such cases, we ensure that the transfer is carried out with appropriate safeguards in accordance with the GDPR (e.g. standard contractual clauses approved by the European Commission).

⸻

DATA SECURITY

We have implemented appropriate technical and organisational measures to prevent your personal data from being accidentally lost, used, accessed, altered or disclosed in an unauthorised way.

We limit access to your personal data to those employees, collaborators and service providers who have a genuine business need to know such data. They will only process your data according to our instructions and are subject to legal and/or contractual confidentiality obligations.

We have procedures in place to deal with any suspected personal data breach and, where legally required, we will notify you and the supervisory authority.

⸻

DATA RETENTION

We will keep your personal data only for as long as necessary to fulfil the purposes for which we collected it, including for the fulfilment of legal, accounting or reporting obligations.

To determine the appropriate retention period, we consider:

• the amount, nature and sensitivity of the data;
• the potential risk of harm from unauthorised use or disclosure of your data;
• the purposes for which we process the data and whether we can achieve those purposes by other means;
• applicable legal requirements (e.g. tax archiving periods).

As a rule, data related to the business relationship (invoices, accounting documents etc.) is kept at least for the period required by law (for example, 5–10 years, depending on the tax and accounting regulations in force at the relevant time).

In some situations, we may anonymise your data (so that it can no longer be associated with you) and use it thereafter for statistical or analytical purposes, in which case it is no longer considered personal data.

⸻

YOUR LEGAL RIGHTS

Under data protection law, you have the following rights in relation to your personal data:

• Right of access – you can request a copy of the personal data we hold about you.
• Right to rectification – you can ask us to correct or complete data that is inaccurate or incomplete.
• Right to erasure (“right to be forgotten”) – you can request the deletion of your data in certain situations (e.g. where the data is no longer needed for the purposes for which it was collected, you have withdrawn your consent and no other legal basis exists etc.).
• Right to restriction of processing – you can request that we limit processing in certain cases (e.g. you contest the accuracy of the data).
• Right to data portability – you can request that your personal data be transferred, in a structured format, to you or to another controller, where processing is based on consent or on a contract and is carried out by automated means.
• Right to object – you can object to the processing of your data where the legal basis is our legitimate interest or where the data is processed for direct marketing purposes.
• Right to withdraw consent – where processing is based on consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before the withdrawal.

You will not have to pay a fee to exercise these rights, unless your request is clearly unfounded, repetitive or excessive; in such cases, we may charge a reasonable fee or refuse to comply with the request.

We may need to request specific information from you to help us confirm your identity before we respond to such a request – this is a security measure to ensure that personal data is not disclosed to unauthorised persons.

We try to respond to all legitimate requests within one month. In complex cases or where we have many requests, this period may be extended; in such cases we will inform you accordingly.

⸻

LINKS TO THIRD-PARTY WEBSITES

The website www.locandadelvino.ro may contain links to third-party websites, plug-ins or applications (for example, social media pages or partners’ websites). By accessing these links, third parties may collect or process data about you.

We do not control these third-party websites and are not responsible for their privacy policies. We recommend that you read the privacy notices of each third-party website you visit.

⸻

COOKIES

You can set your browser to refuse all or some cookies or to alert you when websites set or access cookies. If you disable or refuse cookies, some parts of our website may become inaccessible or may not function properly.

In general, we use the following types of cookies:

• strictly necessary cookies – essential for the operation of the website (e.g. navigation, security features);
• performance/analytics cookies – help us understand how the website is used (e.g. Google Analytics);
• functionality cookies – allow us to remember certain choices made by the user (language, preferences etc.);
• marketing cookies (where used) – used to deliver relevant advertising and to track the effectiveness of campaigns.

For more information about the cookies used on the website, please refer to our cookie policy (if available on a separate page) or the dedicated section on the site.

⸻

UPDATING THIS PRIVACY POLICY

We reserve the right to update or amend this Privacy Policy whenever necessary (for example, to reflect legislative changes or changes in how we use data).

Any changes will be published on the website in the dedicated section (GDPR/Privacy Policy). Continued use of the website after such changes are published constitutes your acceptance of the updated version of the Policy.

We recommend that you check this page periodically to stay informed about any updates.

⸻

CONTACT

If you have any questions or concerns about how we process your personal data, or if you wish to exercise any of the rights described above, you can contact us via: Contact

Postal address:
LDV GENESIS S.R.L.
Str. Știrbei Vodă, nr. 164, bl. 21A, sc. A, et. 1, ap. 15,
sector 1, Bucharest, Romania