Data Controller

FRULIV S.R.L. (commercial brand SERIOSFOOD), with its registered office in Oradea, Str. Depozitului, No. 24, Office No. 2, Bihor County, Romania, CUI RO 32987210, is the controller of your personal data, within the meaning of Regulation (EU) 2016/679 (GDPR).

Data protection contact: contact@seriosfood.ro

Personal Data Collected

We collect and process the following categories of personal data:

• Identification data: first name, last name
• Contact data: email address, phone number
• Delivery data: full delivery address
• Transaction data: order history, payment method used (excluding card details)
• Technical data: IP address, browser type, cookies (details in the Cookie Policy)

We do not collect or store bank card data. Payments are securely processed by Shopify Payments, PayPal, or Apple Pay/Google Pay, according to their own privacy policies.

Purpose and Legal Basis for Processing

We process your personal data for the following purposes:

• Execution of the sales contract: order processing, product delivery, payment management, and communication regarding order status (Art. 6 para. 1 lit. b GDPR)
• Legal obligations: invoicing, tax compliance, maintaining accounting records (Art. 6 para. 1 lit. c GDPR)
• Consent: sending commercial communications, newsletters, and promotional offers, only with your express consent (Art. 6 para. 1 lit. a GDPR)
• Legitimate interest: improving services, analyzing website traffic, preventing fraud (Art. 6 para. 1 lit. f GDPR)

Recipients of Data

Your data may be transmitted to the following categories of recipients, strictly for the purpose of fulfilling contractual obligations:

• Shopify Inc. (e-commerce platform, data hosting)
• Courier services (for order delivery)
• Payment processors (Shopify Payments, PayPal)
• Google LLC (Google Analytics, for traffic analysis, with anonymized data)
• Meta Platforms (Facebook/Instagram, for advertising campaigns, with your consent)

We do not sell, rent, or transmit your personal data to third parties for marketing purposes without your consent.

International Data Transfers

Some of our service providers (Shopify, Google, Meta) may store data outside the European Economic Area. These transfers are carried out based on standard contractual clauses approved by the European Commission or other GDPR-compliant transfer mechanisms.

Data Retention Period

Personal data is retained for the period necessary to fulfill the purposes for which it was collected:

• Order-related data: 5 years from the date of the transaction (according to tax and accounting obligations)
• Account data: for the duration of the account's existence, plus 30 days after deletion
• Data for marketing: until consent is withdrawn
• Cookies: according to the terms specified in the Cookie Policy

Your Rights

According to GDPR, you benefit from the following rights:

• Right of access: you can request confirmation of data processing and a copy of the data held
• Right to rectification: you can request the correction of inaccurate data
• Right to erasure ("right to be forgotten"): you can request the deletion of data, except for those we are legally obliged to retain
• Right to restriction of processing: you can request the limitation of processing under certain conditions
• Right to data portability: you can request to receive your data in a structured, commonly used format
• Right to object: you can object to the processing of data for direct marketing purposes
• Right to withdraw consent: at any time, without affecting the legality of previous processing

To exercise any right, please contact us at contact@seriosfood.ro. We will respond within a maximum of 30 days.

Complaints

If you believe that the processing of your data violates the provisions of the GDPR, you have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP):

Address: B-dul G-ral. Gheorghe Magheru no. 28-30, Sector 1, Bucharest

Website: www.dataprotection.ro

Protection of Minors

Our website and services are not intended for individuals under 16 years of age. We do not knowingly collect personal data from minors under 16 without the consent of the parent or guardian. If we become aware that we have collected such data without this consent, we will delete it without delay. If you are a parent or guardian and believe that a minor has provided us with personal data, please contact us at contact@seriosfood.ro.

Automated Decisions and Profiling

We do not make decisions based solely on automated data processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. For online advertising campaigns (Meta, Google), we may use audience segmentation techniques, but these are carried out only with your consent, expressed by accepting marketing cookies, and can be withdrawn at any time from the cookie settings.

Data Security

We implement appropriate technical and organizational measures for the protection of personal data, including data transmission encryption (SSL/TLS), restricted access based on roles, and periodic monitoring of security systems.

Changes

We reserve the right to update this policy. Any significant changes will be communicated via email or by posting on the Website.

Last updated: June 2026