e-meniu.ro

Cart

Privacy Policy

Last updated: September 27, 2026

This Privacy Policy explains how E MENIU CONCEPT SRL collects, uses, stores, and protects personal data when you use the e-meniu.ro website, create an account, place an order, download a digital product, contact us, subscribe to the newsletter, or use other website features.

Personal data is processed in accordance with Regulation (EU) 2016/679 on the protection of personal data (“GDPR”), as well as applicable national legislation.

1. Who the data controller is

The controller of personal data is:

E MENIU CONCEPT SRL
Registered office: Str. Rodniciei no. 18, apt. 12, Târgu Mureș, Mureș county, postal code 540441, Romania
CUI: 55512636
Trade Register No.: J2026052328004
E-mail: contact@e-meniu.ro
Website: https://e-meniu.ro

For questions or requests regarding personal data protection, you may contact us at contact@e-meniu.ro.

2. Who this policy applies to

This policy applies to individuals who interact with e-meniu.ro, including:

  • website visitors;
  • customers who purchase digital products;
  • individuals who create an account;
  • individuals who contact us via form or email;
  • newsletter subscribers;
  • individuals who submit reviews or other forms of feedback;
  • individuals who use other functionalities available on the site.

3. What data we may collect

Depending on how you use the website, we may process the following categories of data:

  • first and last name;
  • email address;
  • phone number, when provided or necessary;
  • address and other billing data, when necessary;
  • country or region relevant for order and billing;
  • data regarding orders and purchased products;
  • user account data;
  • payment identifiers and transaction status information;
  • data required for issuing and managing tax documents;
  • messages and information submitted via the contact form or email;
  • email address and information regarding newsletter subscription;
  • data submitted as part of a review or feedback;
  • technical data such as IP address, device type, browser, operating system, date and time of access, and technical information regarding interaction with the site;
  • information regarding cookie preferences and consent;
  • identifiers and technical information generated by analytics or marketing services, when these are activated according to consent preferences;
  • other data you voluntarily provide to us during an interaction with e-meniu.

We do not request sensitive health data through the website’s standard forms. We recommend that you do not provide such information unless it is strictly necessary in a context where its processing is permitted by law.

4. How we collect data

Data may be collected:

  • directly from you, when you fill out a form, place an order, create an account, or subscribe to the newsletter;
  • automatically, through the technical operation of the website and servers;
  • from providers involved in processing a transaction or providing a service, for example, payment confirmation by the payment processor;
  • through cookies or similar technologies, under the conditions described in the Cookie Policy and in accordance with the expressed consent preferences.

5. Purposes and legal bases for processing

We process data only when there is a specific purpose and an applicable legal basis.

Depending on the situation, processing may be based on:

  • the performance of a contract or taking steps requested prior to entering into it;
  • compliance with a legal obligation, including tax and accounting obligations;
  • the consent of the data subject;
  • the legitimate interest of E MENIU CONCEPT SRL, when the rights and freedoms of the data subject do not override this interest.

6. Orders and contract performance

When you place an order, we process the data necessary to:

  • order registration and processing;
  • payment confirmation;
  • digital product delivery;
  • sending links or information necessary for access and download;
  • managing any order-related issues;
  • providing customer support;
  • maintaining necessary transaction records.

The primary legal basis for this processing is the performance of the contract concluded with the customer or taking steps requested by the customer prior to entering into the contract.

Providing certain data is necessary to process the order. If this data is not provided, we may not be able to conclude or perform the contract.

7. User account

If you choose to create an account, we process the data necessary for its administration, authentication, order display, and, where applicable, access to digital products and account-related functionalities.

Creating an account is not mandatory when the site allows orders without an account.

Account-related data is processed primarily for the performance of the contractual relationship and for providing the functionalities requested by the user.

8. Payment processing

Electronic payments are processed through specialized providers, including Stripe.

Depending on the device and available methods, payment can also be made through solutions such as Apple Pay or Google Pay, via the payment processing infrastructure available on the site.

E MENIU CONCEPT SRL receives the necessary information for identifying and managing the transaction, such as value, currency, payment status, and transaction identifiers.

E MENIU CONCEPT SRL does not store the full bank card number, CVV code, or other complete card authentication data. This data is managed by the payment service provider and, where applicable, by the chosen payment method provider, according to their own security procedures and privacy policies.

The processing of data necessary for initiating and confirming payment is carried out for the performance of the contract, fraud prevention, and compliance with applicable legal obligations.

9. Invoicing and tax obligations

For issuing and managing tax documents, we may process data such as name, address, order details, transaction value, and other information required by applicable tax legislation.

For invoicing, we use specialized services, including SmartBill.

The legal basis for this processing is, as applicable, contract performance and compliance with legal tax and accounting obligations.

Data and documents that must be retained according to tax and accounting legislation will be kept for the periods provided by applicable law.

10. Digital product delivery and download

For the delivery of digital products, we may process information regarding the order, the customer, the purchased product, download rights, and the technical operations necessary to access the product.

This data is used for the performance of the contract, delivery of the purchased product, resolution of technical issues, and prevention of fraudulent or abusive uses.

Depending on how the purchase is made, product access can be provided to both customers who use an account and customers who place an order without creating an account.

11. Contact form and communications with us

If you contact us via form or email, we may process the data you provide, such as:

  • name;
  • email address;
  • phone number, if provided;
  • message content;
  • other information you choose to share with us.

The data is used to respond to the request, provide support and, where applicable, take the pre-contractual steps requested by the person contacting us.

In other situations, the response and maintenance of limited correspondence records may be based on our legitimate interest in managing communications and protecting the rights of E MENIU CONCEPT SRL.

12. Newsletter and marketing communications

If you subscribe to the newsletter, we process your email address and the technical or administrative information necessary for managing the subscription.

Commercial communications via newsletter are sent based on the consent expressed through subscription.

For newsletter administration, we use functionalities provided by The Newsletter Plugin, and for sending messages, we may use specialized email delivery services, including Brevo.

You can withdraw your consent and unsubscribe at any time, using the link available in the messages received or the mechanism provided on the site.

Unsubscribing from the newsletter does not affect communications strictly necessary to fulfill an order or the contractual relationship.

The site also uses a local browser record, e-meniu-newsletter-v1, exclusively for the functional management of displaying the newsletter invitation. This does not contain the email address or a subscriber identifier. Additional information is available in the Cookie Policy.

13. Reviews and feedback

If you submit a review or feedback through the site’s functionalities, we may process the information provided, including the chosen name or identifier, email address, rating, and the text submitted.

The email address used for verifying or administering a review is not intentionally published as part of the review.

Reviews may be checked and moderated before publication to prevent spam, fraud, illegal or abusive content, and to maintain the authenticity of the review system.

Do not publish sensitive personal information or data related to other individuals in a review.

14. Site security and abuse prevention

We may process certain technical data to protect the site, accounts, forms, and transactions against spam, unauthorized access, fraud, and other abusive activities.

This data may include IP address, browser or device information, date and time of access, and technical information regarding requests sent to the website.

We may use technical measures, infrastructure services, and security functionalities to detect and prevent abusive activities.

The basis for this processing is, where applicable, the legitimate interest of E MENIU CONCEPT SRL to protect its infrastructure, users, and services, as well as legal obligations regarding data security.

15. Technical data and logs

The servers and systems used for the site’s operation may automatically generate technical logs.

These may include IP addresses, technical identifiers, requested URLs, access time, error information, and other data necessary for the service’s operation and security.

Logs are used for problem diagnosis, security, abuse prevention, and maintaining site availability.

16. Cookies, analytics, and marketing

The site uses cookies and similar technologies.

Strictly necessary or functional cookies and technologies may be used for site operation, security, shopping cart, checkout, account, order processing, and remembering certain preferences, to the extent permitted by law.

For managing cookie preferences and consent, we use Complianz.

With user consent, the site uses Google Analytics 4 for statistics and analyzing site usage.

Also with user consent, we may use technologies associated with Meta services, including Meta Pixel, as well as technical integration via PixelYourSite, for measuring certain interactions and for marketing activities.

Non-essential cookies and technologies used for statistics or marketing are activated in accordance with the user’s consent options.

For detailed information on the categories used, their purposes, and how you can change your preferences, consult the Cookie Policy.

17. Consent management

When processing is based on consent, it is requested before the respective processing is carried out, under the conditions provided by law.

Preferences regarding cookies and similar technologies can be managed through the consent management tool available in the Cookie Policy on the site.

You can later modify or withdraw your consent for optional categories.

The withdrawal of consent does not affect the legality of processing carried out before its withdrawal.

18. To whom we may transmit data

For the operation of the site and the provision of services, we may transmit or allow access to data to providers who help us carry out our activity.

Depending on the services used and your interaction with the site, these categories of recipients may include:

  • hosting providers, technical infrastructure, and email services, including Hostinger;
  • payment processors, including Stripe;
  • the provider of the payment method selected by the user, where applicable;
  • invoicing service providers, including SmartBill;
  • newsletter and message delivery service providers, including Brevo;
  • analytics service providers, including Google, when their use is permitted according to consent preferences;
  • advertising and measurement service providers, including Meta, when their use is permitted according to consent preferences;
  • IT service providers, maintenance, security, or technical support;
  • accountants, consultants, or other professionals, to the extent that access is necessary and permitted by law;
  • public authorities, courts, or other bodies, when disclosure is required by law.

Only data necessary for the relevant purposes is transmitted or made available to providers, under the applicable contractual and legal conditions.

19. Processors and independent controllers

Depending on the nature of the service provided, a third party may act as a processor for E MENIU CONCEPT SRL for data processing, as an independent controller, or, in certain situations, in another role provided by data protection legislation.

For example, payment service providers may process certain data based on their own legal, security, or fraud prevention obligations, independently of the instructions of E MENIU CONCEPT SRL.

Analytics or advertising service providers may also process certain information in accordance with their own policies and their legal role in relation to the respective data.

In these situations, the privacy policies of the respective providers also apply.

20. International data transfers

Some of the providers used may have infrastructure, affiliated companies, or subcontractors located outside the European Economic Area.

When personal data is transferred outside the European Economic Area, the transfer must be carried out under the conditions permitted by applicable law and, where applicable, by using mechanisms such as:

  • an adequacy decision adopted by the European Commission;
  • standard contractual clauses approved by the European Commission;
  • the provider’s participation in a mechanism recognized by applicable law;
  • other legal safeguards or mechanisms provided by GDPR.

Additional information regarding the mechanisms applicable to a specific provider can be requested at contact@e-meniu.ro.

21. How long we retain data

Personal data is retained only as long as necessary for the purposes for which it was collected and for fulfilling legal obligations.

Retention periods may differ depending on the data category and the purpose of processing.

  • Data regarding orders, transactions, and tax documents are retained for the period required by applicable tax and accounting legislation.
  • Account data may be retained for the duration of the account’s existence, with the exception of information that must be further retained for compliance with a legal obligation or defense of a right.
  • Data regarding product access and order history may be retained as long as necessary for providing functionalities associated with the purchase, resolving issues, and protecting the rights of the parties.
  • Correspondence data is retained as long as necessary for resolving the request and, if justified, for an additional period necessary to protect legitimate rights.
  • Data used for the newsletter is processed until consent is withdrawn or unsubscribed, without excluding the retention of minimal records necessary to respect the unsubscribe option.
  • Technical data and logs are retained for limited periods, depending on security, operational, and incident investigation needs.
  • The periods for cookies and similar technologies are described in the Cookie Policy or are set by the providers of the respective technologies.

Upon expiration of the applicable periods, data is deleted, anonymized, or further retained only if there is a legal basis for it.

22. Your rights

Under the conditions provided by GDPR, you may benefit, where applicable, from the following rights:

  • the right of access to your personal data;
  • the right to rectification of inaccurate or incomplete data;
  • the right to erasure of data, when legal conditions are met;
  • the right to restriction of processing;
  • the right to data portability, in situations provided by law;
  • the right to object to certain processing, including those based on legitimate interest;
  • the right to withdraw consent at any time for processing based on consent;
  • the right to lodge a complaint with the competent data protection authority.

These rights are not absolute. In certain situations, legislation may permit or oblige the controller to continue retaining or processing certain data.

23. How you can exercise your rights

To exercise your data protection rights, you can send us a request at:

Email: contact@e-meniu.ro
Mail: E MENIU CONCEPT SRL, Str. Rodniciei no. 18, apt. 12, Târgu Mureș, Mureș county, postal code 540441, Romania

The request must contain sufficient information to identify the request and the data it refers to.

If necessary for data protection, we may request reasonable additional information to verify the identity of the person making the request.

We will respond to requests within the period provided by applicable law.

24. Right to lodge a complaint

If you believe that your personal data is processed in violation of the law, you have the right to lodge a complaint with the competent supervisory authority.

In Romania, the competent authority is:

National Supervisory Authority for Personal Data Processing (ANSPDCP)
Bd. G-ral Gheorghe Magheru no. 28-30
Sector 1, postal code 010336
Bucharest, Romania
Website: www.dataprotection.ro

Before lodging a complaint, we encourage you to contact us to try to resolve the issue directly, without this in any way limiting your right to address the authority.

25. Data security

E MENIU CONCEPT SRL applies reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration, unauthorized disclosure, or destruction.

These measures may include, where applicable, the use of secure connections, access control, system updates, authentication mechanisms, backups, and protection measures against abusive automated activities.

No method of electronic transmission or storage can guarantee absolute security, but we adopt measures proportionate to the nature and risks of processing.

26. Automated decisions and profiling

E MENIU CONCEPT SRL does not use data collected through the site to make decisions based solely on automated processing that produce legal effects concerning the user or similarly significantly affect them.

Certain providers, such as payment processors and security services, may use automated systems for fraud or abuse prevention, in accordance with their own policies and legal obligations.

When you have given consent for marketing technologies, advertising service providers may use certain information for measurement, audience segmentation, or other forms of advertising profiling, in accordance with their own policies and applicable legislation.

27. Links to external sites and services

The site may contain links to sites or services administered by third parties.

E MENIU CONCEPT SRL does not control and is not responsible for the privacy practices of external sites.

We recommend that you consult their privacy policies before providing personal data.

28. Amendment of the Privacy Policy

We may update this Privacy Policy when necessary to reflect legislative changes, changes in services, providers, or how the site operates.

The updated version will be published on this page, and the date of the last modification will be indicated at the top.

In the event of significant changes, we will use reasonable means to inform affected individuals, when necessary.

29. Contact

For any questions regarding this Privacy Policy or how we process personal data, you can contact us at:

E MENIU CONCEPT SRL
Str. Rodniciei no. 18, apt. 12
Târgu Mureș, Mureș county
Postal code 540441
Romania
CUI: 55512636
Trade Register No.: J2026052328004
Website: https://e-meniu.ro
Email: contact@e-meniu.ro