Privacy Policy

This Privacy Policy explains how we collect, use, and protect your personal data when you use our website and services.

The data controller responsible for processing your personal data is:

SC Flavours Of Transylvania S.R.L.
Buntesti, Bihor, Romania
Registered in Romania
J05/808/2018, CUI 39151785
Email: hello@carmenvranau.com

We are committed to ensuring that your personal data is processed securely and in compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR).

We may send you information or offers regarding our products or services if you have consented to receive such communications. You may withdraw your consent at any time.

We may collect and process the following personal data:

- First and last name

- Email address

- Phone number

- Shipping address

- Billing address

- Company name / VAT number / Trade Register number (if ordering as a legal entity)

- Order history

- Information submitted through the contact form

- Account information (if a user account is created)

- Newsletter subscription data (if voluntarily provided)

We do not conduct automated profiling.
We do not collect IP tracking data or behavioral analytics (unless technically required for security purposes).

We process your personal data for the following purposes:

- To administer and maintain the website

- To process and ship orders

- To issue invoices and comply with tax obligations

- To create and manage customer accounts

- To communicate order status updates

- To respond to inquiries, returns, or contact form submissions

- To send marketing communications (only if consent has been provided)

We will not sell, rent, or disclose your personal data to third parties for direct marketing purposes without your explicit consent.

We process your data under the following legal bases:

- Performance of a contract (order processing)

- Legal obligation (tax and accounting requirements)

- Legitimate interest (website administration and communication)

- Consent (newsletter and marketing communications)

We collect personal data through:

- Contact forms

- Account creation forms

- Newsletter subscription forms (if available)

- Quote request forms for large or custom orders

We do not collect data via social media logins (Facebook, Google, etc.).
We do not use automated profiling systems.

Our website uses cookies. Upon your first visit, you will be asked to consent to the use of cookies in accordance with this policy.

Cookies are small text files stored on your device that help improve website functionality and user experience.

We use:

- Session cookies (deleted when you close your browser)

- Persistent cookies (stored until expiration or manual deletion)

Cookies are used to:

- Maintain shopping cart functionality

- Enhance website security

- Improve user navigation

You may configure your browser to refuse cookies. However, certain parts of the website may not function properly without them.

We implement appropriate technical and organizational measures to protect your personal data, including:

- Restricted internal access to data

- Secure HTTPS / SSL encrypted connections

- Encrypted passwords

- Regular website backups

We may share your personal data with:

- Payment processors

- Shipping providers

- Accounting service providers

- Technical service providers

Only to the extent necessary for fulfilling contractual or legal obligations.

We may also disclose data:

- If required by law

- In connection with legal proceedings

- To establish, exercise, or defend legal claims

We do not disclose personal data to third parties beyond the scope described above.

We do not transfer personal data outside the European Union.

Under GDPR, you have the right to:

- Access your personal data

- Rectify inaccurate data

- Request deletion (“right to be forgotten”)

- Restrict processing

- Object to processing

- Withdraw consent (e.g., newsletter subscription)

- Request data portability

To exercise your rights, you may contact us at: hello@carmenvranau.com

We may request proof of identity before responding to your request.

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those external sites.

We use third-party payment processors to process payments.

Card payments are processed by Stripe. Stripe acts as an independent data controller for payment information. Please consult Stripe’s privacy policy for more information.

We do not store or collect your card payment details.

We may update this Privacy Policy periodically. The latest version will always be available on this page, along with the date of last update.

If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact us at: hello@carmenvranau.com