1. Who We Are The
Address of our website is: https://cupofoz.com
The website is owned and operated by CRAIG Engineering S.R.L.
CUI / CIF (Tax ID): RO39156847
Trade Register No.: J32/475/2018
Contact E-mail: contact@cupofoz.com
Our Data Protection Officer (DPO) can be contacted at the e-mail address mentioned above for any inquiries regarding personal data.
2. What Personal Data We Collect and Why We Collect It
A. Order Placement and Processing
When you place an order on our website (via the order form or kiosk), we collect the data necessary for product delivery and the issuance of fiscal documents:
For Individuals: First name, last name, e-mail address, phone number, complete delivery and billing address (street, number, building, staircase, floor, apartment, county, locality, postal code).
For Legal Entities (Companies): Company name, Tax ID (CUI/CIF), Trade Register Number (J), registered office address (county, locality, street, number, etc.), and contact details of the liaison person (name, e-mail, phone).
Purpose and Legal Basis:
Performance of a Contract: Processing, confirmation, preparation, and delivery of the ordered coffee.
Legal Obligation: Issuing fiscal invoices in accordance with the Romanian Fiscal Code and keeping accounting records.
B. Comments and Contact Forms
When visitors leave comments on the site or contact us via forms, we collect the data shown in the forms, along with the visitor’s IP address and browser user-agent string to help detect spam.
An anonymized string created from your e-mail address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After your comment is approved, your profile picture is visible to the public in the context of your comment.
C. Media Files
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS). Website visitors can download and extract any location data from images on the website.
D. Cookies
Session/Order Cookies: Used for the proper functioning of the shop and for retaining product selections in the form.
Comments: If you leave a comment on our site, you may opt-in to saving your name, e-mail address, and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies last for one year.
Login: If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser. When you log in, we will set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for one year.
E. Embedded Content from Other Websites
Articles or pages on this site may include embedded content (e.g., videos, images, maps, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content.
3. Who We Share Your Data With
We do not sell, rent, or lease your personal data to third parties for marketing purposes. Data is shared exclusively with our operational partners, strictly for the execution of your order:
- Courier Partner Companies: Transmission of name, delivery address, county, locality, and phone number to carry out the delivery of the package.
- Billing and Accounting Services: Billing data is processed in our accounting software and transmitted to fiscal authorities (ANAF – e-Factura) in compliance with legal obligations.
- Banking Institutions: For payments made via bank transfer (OP), transactions are processed through authorized banks.
- Security & Anti-Spam Services: Comments and forms may be checked through automated spam detection services.
4. How Long We Retain Your Data
Invoices and Financial-Accounting Documents: In accordance with Romanian accounting laws, data associated with orders and issued invoices is kept for 10 years.
User Account: Account data is kept as long as the account is active. You can modify or delete your account at any time.
Comments: Comments and their metadata are retained indefinitely so we can recognize and approve any follow-up comments automatically.
5. What Rights You Have Over Your Data
In accordance with the General Data Protection Regulation (GDPR – EU 2016/679), you benefit from the following rights:
Right of Access: You can request an extract of all personal data we hold about you.
Right to Rectification: You can ask for the correction of incorrect data or the completion of incomplete data.
Right to Erasure (“Right to be Forgotten”): You can request the deletion of your personal data (except for data we are legally required to keep for fiscal/accounting purposes).
Right to Restriction and Objection: You can object to the processing of data or request the restriction of data under certain conditions.
To exercise any of these rights, you can send us a written request at the e-mail address: contact@cupofoz.com.
6. Where Your Data is Sent and Stored
All data collected through the cupofoz.com website is stored on secure servers located within the European Union. Visitor comments may be checked through an automated spam detection service.
7. Additional Information and Supervisory Authorities
If you consider that the processing of your personal data violates applicable legal regulations, you have the right to lodge a complaint with the national supervisory authority: The National Supervisory Authority for Personal Data Processing (ANSPDCP) B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, postal code 010336, Bucharest, Romania