Privacy policy
Our Data Protection Principles
The following principles govern all activities related to the collection and processing of your personal data by Zenbuy S.R.L.:
- Your data belongs to you — not to us.
- You remain in control of your personal data — not us.
- We act transparently — you are never left uninformed.
- Personal data is valuable — but never treated as a tradable commodity.
Information Regarding the Collection, Storage, and Processing of Personal Data
This section provides details on how personal data of users visiting or interacting with our website https://zenbuysrl.org/ is collected, processed, and stored.
1. Data Controller
The entity responsible for processing your personal data within the meaning of the EU General Data Protection Regulation (GDPR) is:
Zenbuy S.R.L.
Sos. Mihai Bravu, No. 136, Bl. D20, Sc. 2, Et. 3, Ap. 39, Sector 2, Bucharest, Romania
Email: connect@zenbuysrl.org
Website: https://zenbuysrl.org/
2. Categories of Personal Data Processed
Depending on how you use our online store and related services, we may process the following categories of personal data:
- Technical and online identifiers: IP address, browser details, device information, and data profile regarding your activity and preferences on our website or blog.
- Contact information: including your name, email address, postal address, and phone number.
- Biographical information: such as your age, gender, and date of birth.
- Commercial and transactional data: including records of purchased, obtained, or considered products and related consumption or purchase history.
- Online activity information: including browsing or search history and interactions with our website, advertisements, or applications.
- Any other personal information voluntarily provided by you in communications or forms submitted via our website.
3. Cookies
We use cookies and similar tracking technologies to collect information about your interaction with our website.
Cookies help us tailor and improve your browsing experience, compile statistical information such as pages visited, referring domains, and traffic sources, and analyze overall site usage patterns.
Anonymous visitor identifiers generated by cookies may be linked with user IDs stored in our database solely for analytical and performance purposes.
You may disable cookies through your browser settings; however, certain website functionalities may be limited or unavailable as a result.
4. Legal Basis and Purpose of Processing
Your personal data is processed for the following purposes and under the legal bases provided in Article 6 GDPR:
a) Consent (Art. 6(1)(a) GDPR):
Where you have granted explicit consent, for example, for marketing communications or participation in surveys.
b) Performance of a Contract (Art. 6(1)(b) GDPR):
To conclude, perform, or fulfill a contract between you and Zenbuy S.R.L., including order management, billing, and delivery.
c) Legal Obligations (Art. 6(1)(c) GDPR):
To comply with applicable laws, such as tax or commercial record-keeping requirements.
d) Legitimate Interests (Art. 6(1)(f) GDPR):
To pursue our legitimate business interests, provided these do not override your rights and freedoms. These purposes include, among others:
- developing new products or services;
- improving the quality and efficiency of existing services;
- compiling anonymized statistical reports to evaluate service performance.
Personal data used for analytical purposes is anonymized wherever possible. We do not engage in direct advertising unless you have expressly consented to it.
5. Methods of Data Collection
Your personal data is typically collected directly from you — for example, when you:
- place an order through our online store,
- submit an inquiry or registration form, or
- use any of our services requiring identification.
We generally do not collect personal data from third parties and never request disclosure of personal data concerning other individuals through our services.
6. Purposes of Use and Disclosure
Your personal data may be used or disclosed strictly for the following legitimate purposes:
- To provide and perform services reasonably expected by an average consumer.
- To detect, prevent, and investigate potential security incidents.
- To prevent, identify, or prosecute fraudulent, deceptive, or unlawful activities.
- To protect the safety and security of individuals.
- To perform data processing activities on behalf of Zenbuy S.R.L. in compliance with contractual or statutory requirements.
- To collect or process sensitive personal information solely where permitted and in a manner that does not infer consumer characteristics.
7. Data Retention
Personal data is stored only for as long as necessary to achieve the purposes for which it was collected, or until you request its deletion.
Certain data may be retained beyond this period where required by law (e.g., accounting or tax obligations) or for legitimate business reasons.
You may delete your personal data at any time by deleting your user account or exercising your right of erasure.
Some obligations toward other users, if applicable, may arise from our Terms of Use and must be fulfilled before full account deletion.
8. Your Rights Under the GDPR
Under the provisions of the EU General Data Protection Regulation, you are entitled to the following rights regarding your personal data processed by us:
a) Right to Withdraw Consent (Art. 7(3) GDPR):
You may revoke any consent previously given at any time without affecting the lawfulness of prior processing.
b) Right of Access (Art. 15 GDPR):
To obtain information regarding your stored personal data and related processing activities.
c) Right to Rectification (Art. 16 GDPR):
To request correction or completion of inaccurate or incomplete personal data.
d) Right to Erasure (Art. 17 GDPR):
To request deletion of your personal data when its storage is no longer necessary, or if processing is unlawful, or consent has been withdrawn.
e) Right to Restrict Processing (Art. 18 GDPR):
To restrict processing where one of the conditions in Art. 18(1)(a–d) GDPR applies.
f) Right to Notification (Art. 19 GDPR):
To be informed when your data is rectified, erased, or its processing restricted.
g) Right to Data Portability (Art. 20 GDPR):
To receive your personal data in a structured, commonly used, machine-readable format, and to transmit it to another controller.
h) Right to Object (Art. 21 GDPR):
To object, on grounds relating to your particular situation, to processing carried out under Art. 6(1)(e) or (f) GDPR, including profiling.
i) Right Not to Be Subject to Automated Decision-Making (Art. 22 GDPR):
To ensure no decision producing legal or similarly significant effects is based solely on automated processing, including profiling.
j) Right to Lodge a Complaint (Art. 77 GDPR):
To file a complaint with a competent supervisory authority if you believe your data protection rights have been infringed.
9. Contact and Feedback
If you have any questions, concerns, or comments regarding this Privacy Policy or the processing of your personal data, please contact us at:
Zenbuy S.R.L.
Sos. Mihai Bravu, No. 136, Bl. D20, Sc. 2, Et. 3, Ap. 39, Sector 2, Bucharest, Romania
Email: connect@zenbuysrl.org