Skip to content
RO

Privacy Policy

Last updated: September 2026

1. General information

This policy explains how SC OVRIDE COFFEE SRL (hereinafter referred to as “OVRIDE COFFEE” or “we”) collects, uses, and protects the personal data of the website’s visitors and customers https://ovride.coffee.

This policy describes the data we process, the purposes for which we process it, and the choices available to you in the context of Regulation (EU) 2016/679 (GDPR) and applicable national legislation.

2. Who we are

  • Company name: SC OVRIDE COFFEE SRL
  • Registered office: Sat Sânandrei (Com. Sânandrei), Str. Sf. Andrei nr. 27, Jud. Timiș, România
  • Business location: Sat Săcălaz (Com. Săcălaz), nr. cadastral 413579-C1, Jud. Timiș, România
  • CUI: RO51318140
  • Nr. Reg. Comerț: J2025011981003
  • Contact email: [email protected]

3. The data we collect

We collect the following data when you use the website or place an order:

  • first and last name
  • shipping address
  • billing address
  • email address
  • phone number (optional, but recommended for the courier)
  • details about ordered products, delivery methods, and order history
  • IP addresses and technical data (via cookies and analytics tools)
  • messages submitted through the contact form
  • email addresses submitted through the newsletter form (voluntary opt-in)

We do not collect or store bank card details. Online payments are processed entirely by Viva.com, through a secure connection. Bank transfer details supplied for Wholesale orders may appear in order records and accounting documents.

4. Purpose and legal basis for processing

We process your personal data for the following purposes:

  • for processing and delivering orders (Art. 6(1)(b) – performance of a contract)
  • for issuing invoices and managing accounting documents (Art. 6(1)(c) – legal obligation)
  • for communication related to your orders (confirmations, delivery, updates)
  • for optional analysis of website traffic and usage, only after you give consent (Art. 6(1)(a) – consent)
  • for measuring advertising performance, only after you give consent: orders may be sent to Google Ads and Meta together with your email address and phone number in pseudonymised (hashed) form, never in plain text (Art. 6(1)(a) – consent)
  • for sales statistics: for every order placed on the website we send Google Analytics the order number, value, currency and products purchased. If you have rejected optional measurement, the order data is sent without anything that identifies you (no name, email, phone number, IP address or cookies) and only to Google Analytics, never to advertising platforms (Art. 6(1)(f) – our legitimate interest in measuring the store’s sales)
  • for sending newsletters only with your explicit consent (Art. 6(1)(a) – consent)

5. Systems and service providers

Depending on the operation and your preferences, data may be processed through the following systems and services:

  • Viva.com – the online payment processor
  • SmartShip – the shipping platform through which we send delivery details to the chosen courier
  • Partner couriers (for example Sameday, SmartShip Delivery, FedEx) – order delivery
  • Oblio – automatic invoicing system connected to the online store
  • FluentCRM – management of inquiries, contacts, and newsletters
  • FluentSMTP / Resend – delivery of transactional messages and newsletters
  • Google Analytics / Tag Manager – for optional traffic and usage analysis, after you give consent, and for the sales statistics described in section 4
  • Google Ads – for measuring advertising performance, after you give consent
  • Meta (Facebook, Instagram) – for measuring advertising performance, after you give consent
  • Cloudflare – security and load-speed optimization provider
  • Webbership Tracking – the platform we use to collect website events and send orders to Google Analytics and, after you give consent, to Google Ads and Meta

6. User accounts and Wholesale access

Users can create an account on the site to manage their orders and order history.

Requests for Wholesale access are reviewed manually. Submitting the form does not activate Wholesale access automatically.

After approval, the account may receive dedicated pricing and the payment and delivery options available to that partner.

Account-associated data can be deleted upon request, by email sent to [email protected].

7. Data retention period

  • Data related to orders and invoices is kept in accordance with tax legislation, for a period of a minimum of 3 years
  • Data collected through the newsletter is kept until consent is withdrawn
  • Automatic site backups are stored for 30 days
  • Data for inactive accounts may be deleted after a period of inactivity longer than 2 years

8. Data security

We use appropriate technical and organizational measures to protect your data:

  • secure connection HTTPS
  • hosting on servers within the European Union
  • encryption and protection through Cloudflare
  • restricted access for administrators
  • regular weekly backups

9. Users’ rights

Under the GDPR, you have the following rights regarding your personal data:

  • the right of access to your data
  • the right of rectification of inaccurate data
  • the right of erasure (“the right to be forgotten”)
  • the right of restriction of processing
  • the right of portability of data to another controller
  • the right of objection to the processing of data
  • the right to withdraw consent for marketing communications

To exercise these rights, you can contact us at:

📧 [email protected]

If you believe your data is being processed incorrectly, you have the right to file a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) – www.dataprotection.ro

10. Cookies and similar technologies

The website https://ovride.coffee uses cookies for proper functioning and, with your consent, for traffic and usage analysis.

On your first visit, the preference banner lets you accept or reject optional measurement.

If you reject optional measurement, analytics and advertising tools no longer set cookies, and their existing cookies (Google Analytics, Google Ads, Meta) are deleted from your browser. Orders placed after you reject are sent to Google Analytics only as anonymous data, as described in section 4.

You can change these preferences at any time via the “Tracking preferences” link in the page footer.

11. Changes to the privacy policy

We reserve the right to update this policy whenever necessary, to reflect legislative or infrastructure changes.

The updated version will be published on this page, along with the date of the last change.

12. Contact

For any questions related to the processing of personal data or to exercise your rights under the GDPR, you can contact us at:

📧 [email protected]

We commit to responding to your data privacy requests within a maximum of 30 calendar days.