GDPR Policy

Last updated: 16 September 2026

This policy describes how TOP GUIDE S.R.L. complies with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (GDPR) and how you can exercise your rights. What data we collect, for what purpose and to whom we transmit them is detailed in the Privacy policy, and cookie-type technologies in the Cookie policy.

1. Data controller

TOP GUIDE S.R.L.
CIF: 54815518  |  Trade Reg. No.: J2026036188000
Registered office: Str. Calea Roșiori, Nr. 104, 147130 Sat Văcărești, Comuna Drăgănești de Vede, Teleorman County, Romania

Email: comanda@pozacruce.ro · Phone: +40 779 243 541 (Monday–Friday, 09:00–18:00)

Given the nature and volume of the processing, we have not appointed a data protection officer (DPO). For any request concerning personal data you can contact us directly, using the details above.

2. The principles we follow

  • Lawfulness, fairness and transparency — we process data only on a legal basis and inform you about it;
  • Purpose limitation — we use data only for the stated purposes (processing and delivering the order, legal obligations, order-related communications);
  • Data minimisation — we ask only for the data needed for delivery and invoicing;
  • Accuracy — we correct or delete inaccurate data on request;
  • Storage limitation — we keep data only for the period set out in the Privacy policy;
  • Integrity and confidentiality — we protect data through SSL/TLS encryption, restricted access and providers with contractual guarantees.

3. Your rights

  • Right of access (art. 15) — to find out whether we process data about you and to receive a copy of it;
  • Right to rectification (art. 16) — to have inaccurate or incomplete data corrected;
  • Right to erasure (art. 17) — to have data deleted, except data the law requires us to keep (for example, invoices);
  • Right to restriction of processing (art. 18);
  • Right to data portability (art. 20) — to receive the data in a structured, commonly used format;
  • Right to object (art. 21) — including to direct marketing, at any time and without justification;
  • Right not to be subject to a decision based solely on automated processing (art. 22) — we do not take automated decisions with legal effects on customers;
  • Right to withdraw your consent, where processing is based on consent (for example, analytics and marketing cookies), without affecting the lawfulness of prior processing.

4. How to exercise your rights

  1. Send a request by email to comanda@pozacruce.ro or by post to the registered office address above. You can call us at +40 779 243 541 for guidance.
  2. State the right you wish to exercise and, where applicable, the order number.
  3. To protect data against unauthorised access, we may ask for additional information strictly necessary to confirm your identity (for example, the phone number or email used for the order).

Response time: we respond without undue delay, within at most one month of receiving the request. This period may be extended by two further months for complex or numerous requests, in which case we will inform you within the first month (art. 12(3) GDPR).

Free of charge: exercising your rights is free of charge. Only for manifestly unfounded or excessive requests, in particular repetitive ones, may we charge a reasonable fee or refuse the request, giving reasons.

5. Photographs sent for the order

Photographs uploaded to make the ceramic photo are used exclusively to fulfil your order; they are not published and are not used in promotional materials without your explicit consent. We keep them for a maximum of 12 months from completion of the order, for possible remakes or complaints, and delete them earlier on request.

6. Minors

The website is intended for persons aged over 18. We do not knowingly collect data about minors.

7. Security and security incidents

We apply appropriate technical and organisational measures: encrypted HTTPS connection, access to data only for the people who process orders, passwords and authentication for the administration area, and providers offering GDPR guarantees. In the event of a personal data breach that poses a risk to your rights, we notify ANSPDCP within 72 hours (art. 33) and, where the risk is high, we inform you directly (art. 34).

8. Complaints — the supervisory authority

If you consider that your rights have been infringed, please contact us first, so that we can remedy the situation. You always have the right to lodge a complaint with:

The Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
B-dul G-ral. Gheorghe Magheru nr. 28-30, sector 1, București
Email: anspdcp@dataprotection.ro
Web: dataprotection.ro

9. Contact

TOP GUIDE S.R.L.
CIF: 54815518  |  Trade Reg. No.: J2026036188000
Address: Str. Calea Roșiori, Nr. 104, 147130 Sat Văcărești, Comuna Drăgănești de Vede, Teleorman County, Romania

Email: comanda@pozacruce.ro
Phone: +40 779 243 541

Customer support hours:
Monday – Friday
09:00 – 18:00