Last updated: 2026
1. Data controller
The controller of personal data is:
AF NOVA FOOD S.R.L.
Tax ID (CUI): 42781756
Registered office: Sat Cărpiniș, Comuna Copalnic-Mănăștur, No. 24, Maramureș County, Romania
Email: hello@silviuatanasie.com
2. What data we collect
We may collect the following categories of personal data:
- first and last name
- delivery address
- billing address
- email address
- phone number
- data required for invoicing (personal identification number only if requested for an individual’s invoice, company tax ID for businesses)
- IP address and technical usage data
- information about orders placed
We do not collect sensitive data (medical condition, religious beliefs, etc.).
3. How data is collected
Data is collected:
- through WooCommerce order forms
- through the contact form
- through newsletter sign-up (only with explicit consent)
- automatically, through cookies and similar technologies
4. Purposes of processing
Data is processed for:
- processing orders
- issuing invoices
- delivering products
- communicating with customers
- handling requests
- meeting tax and accounting obligations
- sending commercial communications (only with consent)
5. Legal basis
Processing is based on:
- performance of a contract (Art. 6(1)(b) GDPR)
- legal obligations (Art. 6(1)(c) GDPR)
- consent (for marketing – Art. 6(1)(a) GDPR)
- legitimate interest (website security, fraud prevention – Art. 6(1)(f) GDPR)
6. Retention period
Data is kept:
- 10 years for tax documents, in line with accounting legislation
- until consent is withdrawn, for marketing
- a maximum of 3 years for inactive accounts
7. Recipients of data
Data may be shared with:
- IT service providers (hosting, maintenance)
- payment processors (Stripe, banking processors, etc.)
- courier companies
- accounting services
- public authorities, where required by law
We do not sell or transfer data to third parties for commercial purposes.
8. International transfers
Where external platforms are used (e.g. payment processors or cloud services), data may be transferred outside the EU only if the provider offers adequate safeguards under the GDPR.
9. Data security
We implement appropriate technical and organisational measures to protect data:
- SSL connection
- restricted access
- secure passwords
- regular backups
10. Rights of the data subject
You have the following rights:
- the right of access
- the right to rectification
- the right to erasure
- the right to restriction of processing
- the right to data portability
- the right to object
- the right to withdraw consent
- the right to lodge a complaint with the Romanian data protection authority (ANSPDCP)
Requests can be sent to: hello@silviuatanasie.com.
11. Cookies
Information about the use of cookies is available in the Cookie Policy.
