Skip to content
Teme în Vacanță.ro

Privacy policy (GDPR)

Last updated: 29.09.2026

The data controller is:

Nutrieme SRL
Tax ID (CUI): 54867339
Trade Register No.: J2026037863001
Registered office: Str. Rotașului, Sector 1, București
Email: contact@temeinvacanta.ro

What data we collect

  • Orders: email address, name and billing address (collected by Stripe), optional company name and VAT number. These are needed to deliver the files and to issue the invoice.
  • Worksheet requests: name, email and what you write in the form, including an optional attachment.
  • Reviews and ideas: the name and text you send. Your email is only used if you choose to give it to us.

Why we use it

  • To deliver the files and the invoice. The legal basis is the contract.
  • To keep accounting records. The legal basis is a legal obligation.
  • To answer your requests. The legal basis is your consent.

Who processes it for us

  • Stripe (payments)
  • Supabase (database and file hosting, EU region)
  • Vercel (hosting)
  • Resend (email)
  • SmartBill (invoicing)
  • Cloudflare Turnstile (anti-spam check on the forms, if enabled). It reads technical browser signals such as your IP address, without cookies. The legal basis is our legitimate interest in keeping the forms free of spam.

Some of these providers (Stripe, Vercel, Resend, Cloudflare) are based in the United States. Transfers are covered by the EU-U.S. Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.

Reviews

If you send a review and we approve it, your name (as you typed it) and your text are shown publicly on the site. You can ask us to remove it at any time.

How long we keep it

  • Invoices and accounting records: 10 years, as required by accounting law.
  • Unpaid or canceled orders: deleted after 90 days.
  • Worksheet requests and their attachments: 2 years, then deleted.
  • Ideas and reviews: until you ask us to delete them.
  • Server logs (IP address, technical data): kept by our hosting providers for a short period, for security.

Security

Data is sent over HTTPS only. Files and orders are stored in private storage with restricted access. Admin access requires a password and a second authentication factor.

Your rights

You have the right to access, rectify, erase, restrict, object to processing, and to data portability. Where processing is based on consent, you can withdraw it at any time. We answer within one month. You can also complain to ANSPDCP (https://www.dataprotection.ro). Write to contact@temeinvacanta.ro.

We do not use automated decision-making or profiling, and we do not sell your data.

Children

The site is used by parents. We do not ask for data about children. The child's name is only included if you choose to add it to a request.