Legal

Privacy policy

We explain what data we collect, why, how long we keep it and what you can ask of us. This document follows Regulation (EU) 2016/679 (GDPR).

1. Who processes the data

The data controller is ANTONIA CONF S.R.L., J40/10475/2017, VAT RO37840015, with its place of business at Strada Castanilor 2F, Ilfov county. For any request concerning data, write to office@antoniaconf.ro.

2. What data we collect and why

Online order	First and last name, phone, email, delivery address and, for companies, the billing details. Basis: performance of the contract.
Quote request	Name, company, email, phone and the project details. Basis: your consent and pre-contractual steps.
Customer account	Email, encrypted password and order history. Basis: performance of the contract.
Invoicing	The data needed to issue the invoice. Basis: legal obligation.
Browsing the site	Technical data collected through cookies, detailed in the Cookie policy. Basis: legitimate interest for strictly necessary cookies, consent for the rest.

We do not collect sensitive data and we do not ask you for medical information.

3. Who we share the data with

We share data only as far as needed to deliver the order and meet our legal obligations, with:

the courier company, for delivery (name, phone, address);
the invoicing service provider and the accountant, for tax documents;
the site hosting provider, which stores the data on servers;
public authorities, where the law requires it.

We do not sell or rent your data.

4. How long we keep the data

Accounting documents and invoices: 10 years, under tax law.
Order data: for the duration of the contractual relationship and afterwards within the applicable limitation periods.
Quote requests: 2 years from the last interaction, if no order follows.
The customer account: until you ask us to delete it.

5. Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability, objection, and the right to withdraw your consent at any time, without the withdrawal affecting earlier processing.

You can contact us at office@antoniaconf.ro. We answer within 30 days. If the answer does not satisfy you, you have the right to lodge a complaint with the Romanian data protection authority, ANSPDCP (dataprotection.ro).

6. Data security

The site uses an encrypted HTTPS connection. Access to customer data is limited to the people who need it to process orders. Passwords are stored encrypted, not in plain text.