Privacy Policy
How we use personal data to run your account, fulfil your purchases and provide support.
1. Who is responsible?
The controller for processing described here is EGAM TINE CU CASA SRL. Contact us at the details below for privacy requests. This notice covers our website and WooCommerce store; independently operated payment, Tebex and community services also provide their own notices.
2. Information we process
Depending on your interactions, we process account identifiers and email, names and billing/contact details, order items and payment status, download permissions and access records, digital-delivery agreement records, support messages and withdrawal notices. Security and technical records may contain IP address, browser/device information and timestamps. Passwords are stored using WordPress password hashing, not as readable passwords.
3. Purposes and legal bases
| Purpose | GDPR basis |
|---|---|
| Create an account, deliver purchases and provide contractual support | Performance of a contract / steps requested before a contract (Art. 6(1)(b)) |
| Accounting, tax records and compliance with consumer obligations | Legal obligation (Art. 6(1)(c)) |
| Protect the store, prevent abuse and handle or defend claims | Legitimate interests in security and establishing or defending rights (Art. 6(1)(f)), subject to your rights |
| Optional marketing or non-essential tracking, if separately offered | Consent where required (Art. 6(1)(a)); optional choices are separate from creating an account or buying |
Data needed to operate an account or fulfil a purchase is contractually necessary; billing data can also be required by law. If it is not provided, we may be unable to create the account or complete the purchase. Optional fields and choices are identified as optional.
4. Recipients and service providers
Only authorised personnel and providers needed for hosting, payment processing, transactional email, support and accounting receive the data necessary for their role. Authorities may receive records when required by law. Some providers act as processors; others act as independent controllers.
5. International transfers
Where processing involves a transfer outside the EEA, the applicable GDPR transfer mechanism must be used, such as an adequacy decision or appropriate safeguards. Contact us for details and copies of applicable safeguards.
6. How long we keep data
Account deletion does not automatically erase records that must be retained for legal obligations or claims. Retained records are restricted to the relevant purpose. Backup deletion follows the configured backup lifecycle.
7. Your rights
Subject to the applicable conditions, you may request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests. You can withdraw consent at any time without affecting the lawfulness of previous processing. You may object to direct marketing at any time.
Send your request to EGAMRO86@GMAIL.COM. We may request proportionate information to verify your identity. We respond within one month, subject to the permitted extension for complex or numerous requests, and explain any lawful refusal or retention requirement.
You may complain to the Romanian supervisory authority, ANSPDCP, at dataprotection.ro, or another competent supervisory authority.
8. Automated decisions and security
The standard account, order and support functions supplied with this store do not make decisions with legal or similarly significant effects solely through automated processing. Security measures include access control and password hashing. No system can guarantee absolute security. Any added profiling or decision service must be described here before use.
9. Cookies and changes
See the Cookie Policy for storage used on the website. We update this notice when our practices change and identify the policy version above.