Your privacy matters to us. This policy explains what data we process, for what purposes, and what your rights are under Regulation (EU) 2016/679 (GDPR).

1. Data controller

GLOBAL BRANDS S.R.L. · VAT RO36357617 · Trade Register No. J40/10044/2016
Registered office: Str. Barajul Argeș no. 8A, Sector 1, Bucharest
Lounge & shop: Intrarea Gliei no. 18, Herăstrău, Bucharest
Phone: +40 720 748 322 · Email: [email protected]

2. What data we process

Identification and contact data (first name, last name, email, phone, delivery/billing address), billing data for individuals and companies (including VAT / Trade Register No. on request), order data and history, technical data (IP address, device type, cookies — see the Cookie Policy).

3. Purposes and legal basis

• Processing and delivering orders — performance of the contract (art. 6(1)(b) GDPR);
• Invoicing and accounting/tax obligations — legal obligation (art. 6(1)(c));
• Marketing communications (if you request them) — consent (art. 6(1)(a)), withdrawable at any time;
• Site improvement, security and fraud prevention — legitimate interest (art. 6(1)(f));
• Verifying the age of 18 for tobacco and alcohol products — legal obligation / legitimate interest.

4. Recipients

We may share data, strictly for the purposes above, with: courier companies (e.g. FAN Courier), IT, hosting and email providers, accounting, and public authorities where the law requires. We do not sell your data.

5. Storage period

Order data and financial documents are kept for the period required by accounting and tax law. Data processed on the basis of consent is kept until consent is withdrawn. Afterwards, data is deleted or anonymised.

6. Your rights

You have the right of access, rectification, erasure, restriction, portability, objection and to withdraw consent at any time. To exercise them: via the Contact page, email [email protected] or phone +40 720 748 322. You may lodge a complaint with the Romanian DPA, ANSPDCP — dataprotection.ro.

7. Data security

We apply appropriate technical and organisational measures (HTTPS, access control, security updates) to protect data against unauthorised access, loss or disclosure.

8. Minors

The Site is intended exclusively for persons over 18. We do not knowingly process minors’ data.