Privacy Policy / GDPR

1. Introduction

This Privacy Policy explains how SFFB TRADING SRL collects, uses and protects personal data of visitors and customers of the website www.sffbtrading.com. We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Romanian law.

2. Data controller

The data controller is SFFB TRADING SRL, registered office: B-dul Iuliu Maniu Nr. 57, Bl. OD16, Sc. E, Et. 2, Ap. 188, Sector 6, Bucharest, postal code 061081, Trade Register no. J2024046883001, VAT number 50991104.

For any questions about personal data, you can contact us at: [your contact email].

3. What data we collect

We may collect the following categories of data:

• Identification data (name, company name).
• Contact details (email address, phone number, billing and delivery address).
• Order and invoicing data (products ordered, amounts, payment status).
• Website usage data (IP address, browser type, visited pages, cookies).

4. Purposes and legal basis

We process personal data for the following purposes:

• To register and process orders, issue invoices and deliver products (performance of a contract).
• To respond to your questions or requests sent via contact forms (legitimate interest).
• To prevent fraud and ensure the security of online payments (legal obligation and legitimate interest).
• For marketing communications, only with your prior consent (newsletter, special offers).

5. Online payments via NETOPIA Payments

When you choose to pay online by bank card, you are redirected to the secure payment page of NETOPIA Payments. Card data are processed exclusively by NETOPIA Payments on its own servers; SFFB TRADING SRL does not collect or store your card number, CVV or other sensitive card information.

6. Cookies and tracking

Our website may use cookies and similar technologies to ensure proper functioning and to analyse traffic. You can control cookies from your browser settings; however, disabling certain cookies may affect the website experience.

7. Data retention

We keep your personal data only for the period necessary to fulfil the purposes for which they were collected, and as required by accounting and tax legislation (for example, invoices are kept for the period required by law).

8. Data sharing

We may share personal data with:

• Courier companies and logistics partners, to deliver your orders.
• Payment processors (NETOPIA Payments, banks) for processing online payments.
• IT service providers or hosting providers, strictly for operating the website.
  In all cases, we ensure that these partners provide adequate guarantees for the protection of personal data.

9. Your rights under GDPR

As a data subject, you have the following rights:

• Right of access to your data.
• Right to rectification of inaccurate data.
• Right to erasure (“right to be forgotten”) in the cases provided by law.
• Right to restriction of processing.
• Right to data portability.
• Right to object to certain processing activities.
• Right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) if you consider that your rights have been violated.

10. Security measures

We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration or disclosure.

11. Updates to this policy

We may update this Privacy Policy from time to time. The updated version will always be available on this page and will apply from the date of publication.