top of page

Privacy policy

Last updated: February 2026

​

Moara de Artă Transilvania (hereinafter referred to as “we”, “us”, “our”, “the operator” or “the company”) is fully committed to complying with data protection legislation and processes your personal data exclusively in accordance with:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the “GDPR”), and

  • other applicable legal provisions in Romania.

This policy explains how we collect, use, store and protect your personal data when you visit our website or contact us for business purposes.

1. Who we are (Data Controller)

Company name: Moara de Arta Transilvania S.R.L.

Tax identification number (CUI): RO50567479

Registered office: Sat Cuciulata, nr. 229, Comuna Hoghiz, Județul Brașov, Romania

Phone: +49 1516 6749470

Email: info@moaradearta.com

2. What data we process and for what purpose

We collect and process personal data only in the limited situations and for the strictly necessary purposes described below:

  • Invoicing and fulfilling contractual and legal obligationsData processed: first name, last name, company name, tax identification number (CUI/CIF), registered office / place of business address, bank account details, phone number, email address Legal basis: legal obligation + performance of a contract (Art. 6(1)(b) and (c) GDPR) Storage period: in accordance with statutory archiving periods (generally at least 10 years for financial-accounting documents)

  • Communication regarding offers, orders or requested servicesData processed: first name, last name, phone number, email address, company name (if applicable) Legal basis: pre-contractual steps or legitimate interests (Art. 6(1)(b) and (f) GDPR) Storage period: maximum 3 years from the last interaction or until the request is fully resolved

We do not collect or process special categories of data (sensitive data), data relating to minors, or any other categories of data beyond what is strictly necessary for the purposes listed above.

3. We do not use cookies or similar tracking technologies

Our website does not use cookies, tracking pixels, web beacons, fingerprinting, or any other technologies that automatically store or read information from your device.

No cookie consent is requested and no cookie banner is displayed.

4. We do not sell or commercially trade your data

We do not sell, rent, lease, transfer or otherwise disclose your personal data to third parties for marketing, advertising or any other commercial purposes.

Your data is not subject to any commercial transactions and is not passed on to data brokers or similar entities.

5. To whom do we disclose your data?

Your data is accessible only within the company and is disclosed only to the following categories of recipients, and only to the extent strictly necessary:

  • Authorized accountant / chartered accountant (for fulfilling legal invoicing and tax reporting obligations)

  • Competent public authorities (ANAF, courts, other institutions – only when there is a legal obligation)

  • IT service providers / server maintenance / hosting providers (with whom we have concluded data processing agreements in accordance with Art. 28 GDPR)

All recipients are contractually obliged to maintain confidentiality and ensure the security of the data.

6. Data security

We implement reasonable technical and organizational measures to protect your data against unauthorized access, loss, destruction or alteration, including:

  • Restricted access to data (only authorized personnel)

  • Strong, regularly updated passwords

  • Periodic backups

  • Continuous updating of systems and software

7. Your rights as a data subject

Under the conditions set out in the GDPR, you have the following rights:

  • Right of access to your data

  • Right to rectification

  • Right to erasure (“right to be forgotten”) – to the extent there is no legal obligation to retain the data

  • Right to restriction of processing

  • Right to object

  • Right not to be subject to automated individual decision-making (does not apply in our case)

  • Right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) – www.dataprotection.ro

To exercise these rights, please contact us at: Email: info@moaradearta.com Phone: +49 1516 6749470

We will respond to your requests within a maximum of 30 days (or sooner whenever possible).

8. Changes to this policy

We reserve the right to update this privacy policy whenever necessary. The updated version will be published on this page and will take effect from the date of publication.

We recommend that you check this page periodically.

9. Contact

Email: info@moaradearta.com Phone: +49 1516 6749470 Postal address: Sat Cuciulata, nr. 229, Comuna Hoghiz, Județul Brașov, Romania

If you have any questions about how we process your personal data, please feel free to contact us.

Thank you for your trust!

bottom of page