GDPR & Cookie Policy

Data Controller

V.VASP TECH is the data controller responsible for your personal data processed through this website, in accordance with Regulation (EU) 2016/679 (GDPR) and Romanian Law no. 190/2018.

What Data We Collect

We may collect the following personal data: name, email address, shipping address, phone number, and payment information (processed securely via Shopify Payments). We also collect browsing data via cookies.

Purpose of Processing

Your data is used to: process and fulfill orders, send order confirmations and updates, provide customer support, comply with legal obligations, and improve our website experience.

Legal Basis

Processing is based on: contract performance (order fulfillment), legal obligation (tax/accounting records), and legitimate interest or consent (marketing communications).

Cookie Policy

We use the following types of cookies:

Essential cookies – required for the website to function (e.g., shopping cart, session).
Analytics cookies – help us understand how visitors use our site (e.g., Google Analytics).
Marketing cookies – used to deliver relevant ads and track campaign performance.

You can manage or withdraw your cookie consent at any time via your browser settings.

Data Retention

We retain personal data for as long as necessary to fulfill the purposes described above, or as required by Romanian and EU law (e.g., 10 years for financial records).

Your Rights

Under GDPR, you have the right to: access, rectify, or erase your personal data; restrict or object to processing; data portability; and lodge a complaint with the Romanian supervisory authority (ANSPDCP) at www.dataprotection.ro.