Privacy Policy Regarding the Processing of Personal Data

We consider ensuring the right to personal data protection as a fundamental commitment of Petrodesign. Therefore, we will devote all the necessary resources to process your data in full compliance with Regulation (EU) 2016/679 (GDPR), as well as all applicable Romanian legislation. Transparency is one of the core principles of this legal framework, and this document aims to inform you how we collect, use, transfer, and protect your personal data when interacting with us, including through our website.

We reserve the right to periodically update this Privacy Policy to reflect changes in the way we process data or in the legal requirements. When updated, the new version will be posted on our website — therefore, please check this page regularly.

Who we are and how you can contact us
Petrodesign is the commercial name of SC PETRODESIGN SA, headquartered in Bucharest, Strada Caderea Bastiliei 56-58, Sector 1, registered at the Trade Registry under no. J40/4079/1992, with VAT code RO2786649. For data protection legislation purposes, we are the data controller.

For any information regarding the processing of your data, you may contact our Data Protection Officer at: office@petrodesign.ro or by post at Strada Caderea Bastiliei 56-58, Sector 1, Bucharest, mentioning “Attention: Petrodesign Data Protection Officer”.

What categories of personal data we process
In general, we collect your personal data directly from you. We may also process information regarding your browsing behavior on our website, to personalize your experience and offer relevant content.

We may use cookies and similar technologies, according to our Cookies Policy.

We do not intentionally collect special categories of personal data, nor data from minors under 16 years old.

What are the purposes and legal grounds for processing
We use your personal data for the following purposes:

1. To provide Petrodesign services
This includes creating and managing your account, processing orders, handling cancellations, returns, reimbursements, and providing customer support. Most of these operations are necessary for fulfilling a contract between Petrodesign and you, or for fulfilling legal obligations.

2. To improve our services
We may collect information about your behavior when visiting our website, conduct surveys, or perform market research. These activities rely on our legitimate interest to improve our services.

3. For marketing purposes
We can send you marketing communications (email, SMS, push notifications, etc.) about our products and services, based on your consent or on our legitimate interest. You may withdraw your consent at any time using the unsubscribe link or by contacting us.

Cookies
Our website uses cookies to enhance usability, analyze traffic, and personalize content. You may configure or withdraw consent for non-essential cookies at any time.

Defending our legitimate interests
We may process or share certain information to protect our rights and activity, such as preventing cyber attacks or fraud. These actions rely on our legitimate interest or on legal obligations.

How long we keep your personal data
As a general rule, we store your data as long as you have an account with Petrodesign. You may request deletion at any time, except for data we must keep under legal or justified grounds.

Who we may share your data with
Depending on the situation, we may share your data with: courier companies, payment processors, marketing partners, IT providers, insurers, or public authorities when required by law. All partners are bound by confidentiality and data protection obligations.

International data transfers
We primarily store and process data in Romania. In some cases, data may be transferred outside the EU, but only under strict safeguards such as EU Standard Contractual Clauses or certified third-party frameworks.

How we protect your personal data
We implement technical and organizational measures to secure your data, including encryption and secure servers. However, the transmission of information over the internet is not completely secure, and external risks may exist.

Your rights under GDPR
You have the right to access, rectify, delete, restrict, or object to the processing of your data. You may also request data portability or lodge a complaint with the supervisory authority.

Identity verification
To protect personal data, we may verify your identity when you submit a rights request.

Response time
We aim to respond to your requests within one month. For complex or multiple requests, this period may be extended to two months.

Right to lodge a complaint
You may contact the Romanian data protection authority (ANSPDCP): B-dul Gheorghe Magheru 28-30, Sector 1, Bucharest Email: anspdcp@dataprotection.ro Tel: +40.318.059.211 / +40.318.059.212

However, we encourage you to contact us first, and we will do our best to resolve your concern amicably.