PRIVACY POLICY - POCAL

Data controller: POCAL S.R.L., VAT ID 51392650, headquartered in Brașov County, Brașov Municipality, BOGDAN VODĂ Street, No. 1A.

1. Collected data

The Platform does not store card data.

We may collect:

• Full name
• Email
• Phone number
• Order history
• Technical data (IP, device)
• Transactional data (through Stripe)

2. Purpose of processing

• Order fulfillment
• Account management
• Customer support
• Tax compliance
• Fraud prevention

3. Legal basis

• Performance of contract
• Legal obligation
• Legitimate interest
• Consent (for marketing)

4. Recipients

Data may be shared with:

• Stripe (payment processor)
• IT providers
• Public authorities, when required

5. Storage period

Data is retained:

• For the duration of the contractual relationship
• Afterwards, according to legal obligations (e.g. 5-10 years for fiscal documents)

6. User rights

Users have the right to:

Requests can be sent to: contact@pocal.ro.

• Access
• Rectification
• Erasure
• Restriction
• Portability
• Objection

7. Security

The Platform uses technical and organizational measures to protect data.

8. International transfers

When using Stripe or other external providers, data may be transferred outside the EU based on applicable legal mechanisms.

9. Changes

This policy may be updated periodically.