Privacy Policy

Effective Date: 1 March 2025
Last Updated: 30 September 2026

This Privacy Policy explains how Storosso SRL, a company registered in Romania, collects, uses, stores and protects personal data when you visit storosso.com, contact us, subscribe to communications or purchase our products.

1. Data Controller

The data controller is:

Storosso SRL
Registered office: Str. Roșca Pavel nr. 4, ap. 28, Cluj-Napoca, Romania
Operational address: Bd. Muncii nr. 10, Cluj-Napoca, Romania
Email: info@storosso.com

2. Personal Data We Collect

Depending on how you interact with our website, we may collect:

name and contact details;
email address and telephone number;
billing and shipping address;
order and purchase information;
information submitted through contact forms;
technical information such as IP address, browser type and device information;
website usage information, including pages visited, clicks and interactions;
marketing attribution information, such as campaign and UTM parameters;
cookie and consent preferences.

Payment card information is processed securely by our payment service providers. Storosso SRL does not store full payment card details.

3. How We Use Personal Data

We may use personal data to:

process and fulfil orders;
arrange delivery and returns;
process payments and refunds;
communicate with Customers regarding orders or inquiries;
provide customer support;
prevent fraud and protect the security of our website;
improve our website, products and services;
measure website and advertising performance;
send marketing communications where consent has been provided;
comply with legal, accounting and tax obligations.

4. Legal Basis for Processing

Where the General Data Protection Regulation (GDPR) applies, we process personal data on one or more of the following legal bases:

Contractual necessity — where processing is necessary to process an order or provide a requested service;
Legal obligation — where processing is required by applicable law;
Consent — for certain cookies, tracking technologies and marketing communications;
Legitimate interests — where appropriate, for purposes such as security, fraud prevention, customer service and improving our services.

Where processing is based on consent, you may withdraw your consent at any time.

5. Cookies and Similar Technologies

We use cookies and similar technologies to operate the website, remember preferences, understand how visitors use the website and, where consent is provided, measure advertising performance and deliver relevant advertising.

Depending on your consent choices, these technologies may include services such as:

Google Analytics;
Google Ads;
Meta Pixel;
Microsoft Clarity.

You can manage your preferences through the cookie consent banner available on our website.

Where required by applicable law, non-essential cookies and tracking technologies are activated only after consent has been provided.

6. Payment Processing

Online payments may be processed through third-party payment providers such as Stripe.

These providers process payment information under their own privacy and security policies.

Storosso SRL does not receive or store the full card number, security code or other complete payment card credentials.

7. Who We Share Personal Data With

We may share personal data only where necessary with service providers involved in operating our business, including:

payment processors;
couriers and logistics providers;
website hosting and technical service providers;
analytics providers;
advertising platforms;
email and customer relationship management providers;
professional advisers or public authorities where required by law.

We do not sell personal data.

Service providers receive only the information reasonably necessary to perform their services and are required to process personal data in accordance with applicable data protection requirements.

8. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected and as required by applicable legal, accounting and tax obligations.

For example:

order and transaction records may be retained for the period required by Romanian accounting and tax legislation;
customer service correspondence may be retained for a reasonable period necessary to resolve inquiries or disputes;
marketing data is retained until consent is withdrawn, the Customer unsubscribes or retention is no longer necessary;
analytics data is retained according to the settings and retention periods applied by the relevant analytics services.

When personal data is no longer required, it will be deleted, anonymized or otherwise securely disposed of where appropriate.

9. International Data Transfers

Some of our service providers may process personal data outside the European Economic Area.

Where personal data is transferred internationally, we use appropriate safeguards required by applicable data protection law, which may include adequacy decisions, Standard Contractual Clauses or other legally recognized transfer mechanisms.

10. Your Rights

Subject to applicable law, you may have the right to:

request access to your personal data;
request correction of inaccurate or incomplete data;
request deletion of your personal data;
request restriction of processing;
object to certain processing;
withdraw consent at any time where processing is based on consent;
request portability of certain personal data;
lodge a complaint with the competent data protection authority.

To exercise your rights, contact us at:

info@storosso.com

We may need to verify your identity before processing certain requests.

11. Data Security

We use reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration or disclosure.

Our website uses encrypted HTTPS connections, and payment information is processed through specialized payment providers.

No online system can guarantee absolute security, but we take reasonable measures to protect the information entrusted to us.

12. Children’s Privacy

Our website and online store are not intended to knowingly collect personal data directly from children without appropriate authorization where required by law.

If you believe that personal data relating to a child has been provided to us improperly, please contact us at info@storosso.com.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or data processing practices.

The updated version will be published on this page with a revised Last Updated date.

14. Contact

For questions regarding this Privacy Policy or the processing of personal data, contact:

Storosso SRL
Registered office: Str. Roșca Pavel nr. 4, ap. 28, Cluj-Napoca, Romania
Operational address: Bd. Muncii nr. 10, Cluj-Napoca, Romania
Email: info@storosso.com

Effective Date: 01.03.2025
Last Updated: 01.07.2025
Company: Storosso (registered in Romania)
Website: https://storosso.com