Last updated: 3 October 2026
This policy explains which personal data we collect through cafetaria.ro, why we collect it, how long we keep it, who we share it with and what rights you have, under Regulation (EU) 2016/679 (GDPR) and Romanian Law no. 190/2018.
1. Who the data controller is
SPECIALTY GENERAL BUSINESS SRL
- Registered office: 38 Dinicu Golescu Blvd., ground floor, Dinicu Golescu wing, Sector 1, Bucharest, Romania
- Tax ID: RO35630343 · Trade Register No.: J40/1902/2016 · EUID: ROONRC.J40/1902/2016
- E-mail: comenzi@cafetaria.ro · Phone: +40 786 224 441
For any question or request about your personal data, write to comenzi@cafetaria.ro with the subject "Personal data".
2. What data we collect and why
| Situation | Data | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| You place an order (with or without an account) | title, first name, last name, e-mail, phone, delivery and billing address; optionally company name and tax ID | to take, deliver and invoice your order and keep you informed about it | performance of a contract (Art. 6(1)(b)) |
| We issue and archive the invoice | billing and order data | tax and accounting obligations | legal obligation (Art. 6(1)(c)) |
| You create an account | the data above and your password (stored encrypted, we cannot read it) | to keep your addresses and order history | performance of a contract (Art. 6(1)(b)) |
| You write to us via the contact form or e-mail | e-mail, message, any attachment | to reply to you | legitimate interest in answering requests (Art. 6(1)(f)) |
| You use the chat on the site | your messages, your name or e-mail if you give them, technical session data | to answer you in real time | consent (Art. 6(1)(a)): the chat only starts if you have accepted cookies |
| You accept statistics cookies | browsing data (pages visited, device, approximate location) | to understand how the site is used and improve it | consent (Art. 6(1)(a)) |
| You access the site | IP address and technical data in server logs | site security, abuse prevention | legitimate interest (Art. 6(1)(f)) |
We do not collect or process bank card data. Orders are paid by bank transfer, cash on delivery or in Cafetăria shops.
We do not make automated decisions or carry out profiling that produces legal effects concerning you.
3. Who we share data with
We share only the data strictly needed, with:
- FAN Courier: name, address, phone and cash-on-delivery amount, for delivery;
- Smartsupp (Smartsupp.com s.r.o., Czech Republic), the provider of the site chat;
- Google Ireland Ltd. (Google Analytics), only if you have accepted statistics cookies. Google may transfer data to the USA under the EU-US Data Privacy Framework;
- the website hosting provider, on whose servers the site and its database run;
- our accountant or accounting firm, for invoice records;
- public authorities, only when the law requires it.
We do not sell or rent your data.
4. How long we keep data
- Account: until you delete it or ask us to delete it.
- Orders and invoices: for the period required by Romanian Accounting Law no. 82/1991.
- Contact and chat messages: 2 years from the last message.
- Google Analytics data: 14 months.
- Server logs: 90 days.
5. Your rights
You have the right:
- of access: to find out what data we hold about you;
- to rectification: to have incorrect data corrected;
- to erasure: to have data deleted, except data the law requires us to keep, such as invoices;
- to restriction: to have processing temporarily limited;
- to data portability: to receive your data in a common electronic format;
- to object: to processing based on legitimate interest;
- to withdraw consent at any time, for example for statistics cookies, without affecting processing carried out before withdrawal.
Send requests to comenzi@cafetaria.ro. We reply within one month.
You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), 28-30 G-ral Gheorghe Magheru Blvd., Sector 1, Bucharest, www.dataprotection.ro.
6. Cookies
- Necessary: session, shopping cart, language, your cookie choice. The site cannot work without them, so they do not require consent.
- Statistics (Google Analytics): only activated if you click "Accept" in the cookie banner. If you choose "Necessary only", they are not activated.
- Chat (Smartsupp): the chat and its cookies only load if you click "Accept".
You can change your choice at any time by deleting cookies in your browser; the banner will appear again.
7. Security
The site uses encrypted connections (HTTPS) only. Passwords are stored encrypted, administration access is restricted and the database has encrypted backups.
8. Minors
The site is not aimed at people under 16 and we do not knowingly collect their data.
9. Changes
We may update this policy. The version in force is always the one published on this page, with the date of the last update.