GDPR
Privacy policy
How we collect, use and protect your personal data.
The data controller
Livada Digital S.R.L., Str. Polonă nr. 68, et. 2, Sector 1, București 010506, contact@livada.ro.
What data we process and why
- Account and order data (name, email, phone, addresses) — to perform the contract (Art. 6(1)(b) GDPR).
- Billing data — a legal tax obligation (Art. 6(1)(c)), kept for 10 years.
- Email marketing — only with your consent (Art. 6(1)(a)), which you can withdraw at any time.
- Technical data (IP address, browser) — our legitimate interest in security and fraud prevention.
Who we share your data with
Couriers (FAN Courier, Sameday, Cargus, DPD, GLS, Poșta Română, Packeta) strictly for delivery, the payment processor, our accountants and the authorities, where required by law. We do not sell your data.
Your rights
Access, rectification, erasure, restriction of processing, data portability and objection. You can exercise them by writing to contact@livada.ro or directly from your account (JSON export). You have the right to lodge a complaint with ANSPDCP, the Romanian data protection authority (dataprotection.ro).
Security
Passwords are stored as scrypt hashes, the connection is TLS-encrypted, and card details never reach our servers.