Privacy Policy

LAST UPDATE: 27.09.2026

Thank you for your interest in our company and products. When you enter into a relationship with us you entrust us with your data, and protecting it is a fundamental commitment of eee-store. We process personal data in accordance with Regulation (EU) 2016/679 ("GDPR"), Romanian Law no. 190/2018 and Romanian Law no. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector.

This document explains what data we collect, why, how long we keep it, to whom we transmit it and what your rights are when you visit the site, create an account, place an order (on the site, by e-mail, telephone or messaging applications) or contact us.

1. Who we are (the controller)

eee-store is the trade name of D & R ONLINE STORE S.R.L., with its registered office in Timișoara, Strada Electronicii, No. 1, Bl. B1, Floor 4, Ap. 20, Timiș County, Romania, tax identification code RO44714842, registered with the Timiș Trade Register Office under number J35/3182/10.08.2021. We are the controller of your personal data. We have not appointed a data protection officer (we are not legally required to); any request should be sent to the contact details below.

2. How to contact us

For any question or request regarding your data:

• by e-mail at contact@eee-store.ro;
• by telephone on +40 748 202 999, Monday to Friday between 9:00 and 18:00 (Romanian time);
• by post, at the registered office address above.

3. What data we process

• Identification and contact data: first and last name, delivery and billing address, e-mail address, telephone number; for business customers: company name, tax identification code, registration number and the details of the contact person.
• Order data: products ordered, amounts, invoices, order history, correspondence relating to orders, returns and warranty claims.
• Payment data: for card payments, card details are entered exclusively on the secure page of the payment processor Netopia Payments and never reach us; we only receive confirmation of payment. For payment by bank transfer we see the account from which the transfer was made, on our bank statement.
• Account data: e-mail address, password (stored encrypted), saved addresses, preferences and newsletter subscription.
• Technical data: IP address (from which an approximate location can be derived), browser and operating system type, pages visited, date and time of access, and data collected through cookies (see chapter 10).
• Communications: the content of messages and the contact details you send us by e-mail, telephone, the contact form or messaging applications (for example WhatsApp).
• Reviews: the displayed name and the content of reviews you publish on the site.

We collect data directly from you. Your name, delivery address, e-mail address and telephone number are necessary for concluding and performing the sales contract; without them we cannot process your order. The site is not intended for persons under 18 and we do not knowingly collect data about them.

4. Purposes and legal bases of processing

• Performance of the contract (Art. 6(1)(b) GDPR): creating and managing your account, taking, validating, invoicing and delivering orders, processing payments, returns, refunds, warranty and customer support.
• Legal obligations (Art. 6(1)(c) GDPR): issuing and archiving invoices, transmitting them through the RO e-Factura system, accounting and tax records, obligations under consumer protection legislation, responding to requests from authorities.
• Our legitimate interest (Art. 6(1)(f) GDPR): security of the site and prevention of fraud and cyber attacks, establishing, exercising or defending legal claims, aggregated statistics on the use of the site and improvement of our products and services, administrative communications about your orders.
• Your consent (Art. 6(1)(a) GDPR): sending the newsletter, using analytics and marketing cookies (Google Analytics, Google Ads, including remarketing) and publishing reviews. Consent can be withdrawn at any time, without affecting previous processing.

Newsletter. We send marketing communications only if you have subscribed by ticking the "Subscribe to newsletter" box. You can unsubscribe at any time from your account, through the unsubscribe link in each e-mail, or by writing to contact@eee-store.ro with the subject "unsubscribe".

5. Automated decisions and personalised advertising

We do not take decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. If you have accepted cookies, Google may use your browsing data to show you personalised eee-store ads on other websites (remarketing) and to measure the effectiveness of our campaigns. You can opt out by deleting cookies in your browser or through your Google ad settings (adssettings.google.com).

6. How long we keep your data

• Account data: as long as the account is active; upon your deletion request the account is deleted, except for data we are legally required to keep.
• Orders, invoices and payment documents: for the statutory retention period for accounting and tax documents (currently 5 years from the end of the financial year, under Romanian Accounting Law no. 82/1991) and, where applicable, for the duration of the product warranty and the limitation period.
• Correspondence and complaints: 3 years from resolution (the general limitation period).
• Newsletter: until you unsubscribe.
• Technical data and access logs: no more than 12 months.
• Cookies: according to the durations in the table in chapter 10.

7. To whom we transmit your data

We transmit data, only to the extent necessary, to the following categories of recipients, who process it under contracts concluded with us and in accordance with data protection legislation:

• Netopia Payments – card payment processing – and our banks;
• courier companies delivering the parcels (name, address, telephone number and, for cash on delivery, the amount to be collected);
• IT service providers: hosting and maintenance of the online store, e-mail services;
• Google (Google Ireland Ltd.) – Google Analytics and Google Ads, if you have accepted cookies;
• Meta Platforms Ireland Ltd. – when you choose to contact us via WhatsApp;
• accounting and legal service providers;
• manufacturers or suppliers of the products, where necessary for a pre-order or a warranty claim (usually only the product, its serial number and the description of the defect);
• public authorities, where required by law: ANAF (RO e-Factura), ANPC, courts, criminal investigation bodies.

8. Transfers outside the European Union

Data is stored and processed mainly in Romania and in the European Union. For Google services (Analytics, Ads) and Meta (WhatsApp), data may be transferred to the United States of America, to Google LLC and Meta Platforms Inc. respectively, on the basis of the European Commission's adequacy decision on the EU–US Data Privacy Framework and the standard contractual clauses approved by the European Commission. We do not transfer data to other third countries.

9. Your rights

In relation to your personal data you have the following rights:

• the right of access – to find out what data we process about you and to receive a copy;
• the right to rectification – correction of inaccurate data or completion of incomplete data;
• the right to erasure ("right to be forgotten"), under the conditions of Art. 17 GDPR;
• the right to restriction of processing;
• the right to data portability – to receive the data you provided in a structured, commonly used format;
• the right to object – to processing based on legitimate interest and, at any time, to direct marketing;
• the right to withdraw consent at any time;
• the right not to be subject to a decision based solely on automated processing;
• the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru no. 28-30, Sector 1, Bucharest, www.dataprotection.ro, anspdcp@dataprotection.ro;
• the right to an effective judicial remedy.

How to exercise them. Send your request to contact@eee-store.ro, preferably from the e-mail address associated with your account or order so that we can identify you; otherwise we may ask for additional information to confirm your identity. We reply within one month of receiving the request; in complex cases this period may be extended by two months, and we will inform you. Exercising your rights is free of charge, except for manifestly unfounded or excessive requests, for which we may charge a reasonable fee or refuse to act (Art. 12 GDPR). We will not comply with a request that would adversely affect the rights and freedoms of others.

We will always try to resolve any issue regarding the processing of your data amicably, so please contact us first before contacting the ANSPDCP.

10. Cookies

The site uses cookies, small text files stored in your browser. Necessary cookies ensure the operation of the store (session, shopping cart, selected language, form security) and do not require consent. Analytics and marketing cookies (Google Analytics 4, Google Ads) are activated only after you click "Allow cookies" in the banner shown on your first visit; until then they are disabled.

You can withdraw your consent at any time: delete the site's cookies in your browser settings (including the user_allowed_save_cookie cookie), after which the banner will be shown again, or configure your browser to block cookies. For Google Analytics you can also install the opt-out browser add-on, and for personalised ads use your Google ad settings. Blocking necessary cookies may make it impossible to place orders.

The list of cookies we use:

Cookie	Category	Purpose	Duration
PHPSESSID	Necessary	Your session identifier on the server.	Session
form_key	Necessary	Randomly generated key used to prevent forged requests (CSRF).	Session
user_allowed_save_cookie	Necessary	Remembers that you have accepted the use of cookies.	1 year
store	Necessary	The language / store view you selected (Romanian or English).	1 year
mage-cache-sessid, mage-cache-storage, mage-cache-storage-section-invalidation, mage-cache-timeout, section_data_ids, private_content_version, X-Magento-Vary	Necessary	Manage the caching of content in the browser and on the server (cart, customer session) so that pages load faster.	Session / up to 1 year
mage-messages	Necessary	Displays the store's confirmation or error messages.	Session
guest-view	Necessary	Allows guests without an account to view their order.	Session
persistent_shopping_cart	Necessary	Keeps the link to your shopping cart, if you have asked for this.	Session
recently_viewed_product, product_data_storage	Necessary	Remembers recently viewed products in order to display them on the page.	Session
mage-translation-storage, mage-translation-file-version	Necessary	Stores interface translations for the selected language.	Session
_ga	Analytics (Google Analytics 4)	Random identifier that distinguishes visitors, for traffic statistics.	2 years
_ga_4ZW5KLW0SD	Analytics (Google Analytics 4)	Keeps the session state for our Google Analytics property.	2 years
_gcl_au	Marketing (Google Ads)	Measures conversions from Google Ads campaigns.	3 months
_gcl_aw	Marketing (Google Ads)	Remembers the click on a Google ad that brought you to the site, for conversion attribution.	3 months
IDE, test_cookie (doubleclick.net domain)	Marketing (Google Ads)	Third-party cookies set by Google for displaying personalised ads (remarketing) and measuring them.	Up to 13 months

11. Data security

We have implemented appropriate technical and organisational measures to protect your data: an encrypted connection (HTTPS) between your browser and the site, secured and monitored servers, access to data restricted to those who need it, passwords stored encrypted, backups. However, the transmission of information over the internet is never completely secure; we cannot be held responsible for vulnerabilities in systems that are not under our control (for example your device or network).

12. Changes to this policy

eee-store may update this policy from time to time to reflect changes in our processing or in legal requirements. The version in force is the one published on this page, with the date of the last update shown at the top; significant changes will be announced on the site or by e-mail. The previous version was published on 31.07.2025.