Privacy policy

POLICY REGARDING THE PROTECTION OF PERSONAL DATA

1. Processing of Personal Data

To ensure that users’ rights to personal data protection are respected, we have implemented specific protective measures, taking into account Romanian legislation as well as the requirements established by Regulation (EU) 2016/679 — applicable throughout the European Union starting from May 25, 2018 (“the Regulation”).

Personal data means any information through which you can be identified, in particular by reference to an identifier such as a name, identification number, location data, an online identifier, or one or more factors specific to your physical, physiological, genetic, mental, economic, cultural, or social identity. Our company takes all necessary measures to ensure your right to personal data protection, and these terms constitute the notification established under Articles 13 or 14 of the Regulation, through which we explain why we collect your personal data, how we protect it, and what your rights are regarding such data collection.

We encourage you to read this document carefully and request any additional information or clarification you deem necessary regarding its contents.

2. Who are we?

We are Piața9 – HONEST FOOD SRL, a limited liability company headquartered in Oradea, P-ța Emanuil Gojdu, No. 37, COMMERCIAL SPACE, Block A5, Bihor County, and with a branch office in Oradea, Bld. Decebal No. 61A, Bihor County, having CUI 36973390 and registered with the National Trade Register Office under number J05/127/2017, referred to as “Piața9” in this document.

By visiting the websites www.piata9.ro or www.packed.piata9.ro belonging to Piața9, and by purchasing our products and/or services or interacting with us through any means and/or communication channels (email, phone, social networks, etc.), you agree to this Privacy Policy and consent to the use of your data for the purposes mentioned below. If you do not agree with this Privacy Policy, you will not be able to use our products or services.

Under the law, our company is a personal data controller. To ensure your data is processed securely, we have made every effort to implement reasonable and adequate technical and organizational measures to protect your personal information.

3. General considerations regarding your personal data

In accordance with Regulation (EU) 2016/679, Piața9 will manage the personal data provided by Users securely and only for specified purposes. Through the Terms and Conditions, Users are informed that their personal data will be processed in order to optimally provide internet services, goods and service supply, advertising, marketing, publicity, and statistical services.

Piața9 carries out the following processing operations: collecting, recording, organizing, storing, adapting, altering, retrieving, consulting, using, and in some cases, transferring to third parties — solely under a regulated commercial contract that ensures the security and confidentiality of the data and respects the user’s rights — the personal data of website users in order to manage, maintain, improve, and obtain information about the services offered, as well as to prevent errors, information leaks through its IT network, law violations, or breaches of contractual terms.

Personal data will be provided by Users voluntarily when creating a valid account on the site or subscribing to a service available on the site, to benefit from the services and products offered through it. During registration, the User will be asked for certain personal data, such as:

Full name, email, phone, bank card details, delivery address
Order number, type of products ordered, payment information, transaction details
Information about account and site usage, including IP address

The User is solely responsible for all data provided when creating an account. To confirm the data and account, the User will receive an email to the address provided during registration. This confirmation email is intended to stop fraudulent actions by users who use others’ email addresses to create fake accounts. If you receive such a message and did not personally register on the site, please email us at contact@piata9.com to have the account deleted within 3 business days.

The User’s account contains editable fields for modifying or completing the data provided at registration.

Providing this data is not mandatory but is necessary for:
i) order execution and tracking site usage, and
ii) optimally providing services via the site, informing about promotional campaigns, advertising, personalized marketing, and granting access to additional features. Refusal to provide the requested data means the User cannot participate in promotional campaigns or use exclusive additional features available only to registered users.

Piața9 collects personal data in the following ways: directly from you (via the site, email, social networks, or other communication means), from traffic reports recorded by the servers hosting the site, from social networks, via cookies, or from third-party partners who provide data for product delivery (e.g., online sales platforms).

4. Personal data we collect, legal grounds, and purposes

We process your personal data as permitted or required by applicable law for the following purposes:

To supply goods and services offered by Piața9 on our websites, including specific actions necessary for this activity, optimizing site use, and gathering statistical information to improve services and products.
For marketing activities, such as sending updates about our products and services. You can unsubscribe at any time by clicking the “Unsubscribe” link in each newsletter.
When you participate in promotional activities (raffles, contests), you may be asked for relevant information needed to manage these promotions or deliver awarded prizes.

Data may be collected through account creation, account updates, newsletter subscriptions, online surveys, or forms for personalized information or commercial benefits within campaigns promoted on the site.

The legal grounds for collecting personal data on the site include:

Consent – e.g., subscribing to a newsletter. Consent can be withdrawn at any time.
Contract – processing is necessary to perform or prepare for a contract with you.
Legal obligation – e.g., compliance with accounting or tax laws.
Vital interests – protecting you or another person’s safety.
Public interest or legitimate interest – e.g., site optimization, fraud detection, marketing.

We do not process personal data of minors.

5. Retention period

We store personal data no longer than necessary for the purposes for which they are processed, or as required by law. Depending on the situation, this may range from 1 day to 10 years.

If legal action is initiated, data may be retained until its conclusion, including appeals.

Marketing-related data is stored until consent is withdrawn.

Generally, data will be deleted or anonymized after the retention period, except for legally required storage (e.g., up to 10 years for contractual or accounting records).

6. Data transfers

We may transfer your data within the Piața9 group for legitimate interests, and to third parties such as:

Public authorities and institutions, courts, auditors, legal advisors, accountants, IT service providers, payment processors, delivery companies, marketing agencies, etc.

We do not transfer your personal data outside the EU. We use adequate security procedures and restrict access to authorized personnel only.

7. Your rights regarding personal data

Under GDPR, you have the following rights:

Right to withdraw consent – at any time.
Right of access – to know if your data is processed and obtain a copy.
Right to rectification – to correct inaccurate or incomplete data.
Right to erasure – “to be forgotten.”
Right to restriction – limit processing under certain conditions.
Right to data portability – receive and transfer your data elsewhere.
Right to object – to certain processing based on your situation.
Right to lodge a complaint – with the Romanian National Authority for the Supervision of Personal Data Processing.

Requests can be made via email (contact@piata9.com), post (Bld. Decebal Nr. 61A, Oradea, Bihor, Romania), or phone (0747-385.686). We may verify your identity before fulfilling requests and will respond within 30 days.

This Policy will be reviewed periodically and updated as needed.