GDPR Cookies

Controller
Order or Caras SRL, CUI 52516811, Brașov, Romania.

Principles
Lawfulness, fairness, transparency; purpose limitation; data minimisation; accuracy; storage limitation; integrity and confidentiality; accountability.

Security
We use HTTPS (SSL), access controls, and reasonable technical/organizational measures to protect personal data.

Processors/Recipients

• Payment processor (for secure online payments).
• Invoicing provider (e.g., Oblio) for issuing invoices.
• Hosting and email providers to operate the website and deliver files.
  All act under data processing agreements/appropriate safeguards.

International transfers
If data are transferred outside the EU/EEA, we rely on lawful transfer mechanisms (e.g., SCCs) where applicable.

Data subject rights
You can request access, rectification, erasure, restriction, portability, and objection. You may also complain to the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP).

Cookies
We use essential cookies for site functionality and security. Analytical/marketing cookies, if any, operate only with consent (see cookie banner/settings, where implemented).

Contact for privacy matters
Contact us via the website contact form or at our registered office in Brașov, Romania. Please include enough information to identify your order.