Legal

Privacy & data protection

Last updated: 07.10.2026. We respect your personal data and clearly explain here what we collect, why, and what rights you have — under Regulation (EU) 2016/679 (GDPR).

1. Who is the controller of your data

Zitronia Marketplace SRL, CUI RO00000000, with registered office at adresa completă, is the personal data controller for the zitronia.ro site. For any request regarding your data, you can write to us at contact@zitronia.ro.

2. What data we collect

• Identification and contact data: name, surname, email address, phone number, delivery address and, where applicable, billing address.
• Order data: products ordered, order value, order history.
• Account data (if you create an account): email address and encrypted password.
• Technical and browsing data: IP address, device and browser type, pages visited, collected partly via cookies — detailed in the cookie policy.
• Data you enter in the "What are you looking for today?" field, used exclusively to show you relevant recommendations, not for external profiling.

3. Where this data comes from

The data comes directly from you — when you place an order, create an account or contact us — and, partly, is collected automatically through cookies and similar technologies when you browse the site.

4. Why we collect this data and on what legal basis

• Contract performance — to process and deliver your order (Art. 6(1)(b) GDPR).
• Legal obligation — to issue and retain invoices, in accordance with tax legislation (Art. 6(1)(c) GDPR).
• Legitimate interest — to prevent fraud, improve the site and ensure its security (Art. 6(1)(f) GDPR).
• Your consent — for marketing communications (newsletter) and non-essential cookies, which you can withdraw at any time (Art. 6(1)(a) GDPR).

5. Who we disclose your data to

We do not sell or rent your data to any third party. We may only share it with partners who help us deliver the service, contractually bound to respect data confidentiality and security:

• the courier service provider, for order delivery;
• the online payment processor, for card payment processing;
• the hosting provider for the site and database;
• any transactional email providers (e.g. order confirmations) or newsletter providers, only with your consent for marketing.

We may also disclose data when required by law (e.g. at the request of competent authorities).

6. How long we keep the data

Data related to orders and billing is kept for the period required by tax and accounting legislation (generally 10 years from the invoice date). Account data is kept as long as the account is active; you may request its deletion at any time. Data collected through cookies is kept according to the durations indicated in the cookie policy.

7. Your rights

Under GDPR, you have the right to:

• Access — find out what data we hold about you;
• Rectification — request correction of inaccurate data;
• Erasure (the "right to be forgotten") — request deletion of data, within the limits of our legal retention obligations;
• Restriction of processing — in certain situations provided by law;
• Data portability — receive your data in a structured format, to transfer it to another controller;
• Objection — object to processing based on legitimate interest or direct marketing;
• Withdrawal of consent — at any time, without affecting the lawfulness of processing before withdrawal;
• Complaint — to the National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro, if you believe your rights have been violated.

To exercise any of these rights, write to us at contact@zitronia.ro. We will respond within 30 days at the latest.

8. Data security

We use reasonable technical and organizational measures to protect your data — encrypted connection (HTTPS), encrypted password storage, restricted database access limited to authorized staff.

9. Minors

The site is not intended for persons under 16. If you are a minor, please use the site only with the consent and under the supervision of a parent or guardian.

10. Changes to this policy

We may periodically update this policy. Any significant change will be communicated by displaying a new update date at the top of the page.