Privacy Policy
Privacy Policy
Table of Contents
- Grande Gloria Production S.A.
- VAT ID. :33844286Register No. :J17/1268/2014
- Str. Grande Gloria, Nr. 1, sat Costi, Com. VânătoriPostal Cod: 807325 Jud Galați, România
General Information
Grande Gloria Production S.A., as a personal data operator, is firmly committed to protecting the personal data of all data subjects, especially the users of the website www.grandegloria.com/. Data processing is carried out in accordance with:
- Articles 1–99 of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data;
- Law no. 190/2018 on measures for the implementation of Regulation (EU) 2016/679;
- Law no. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector;
- Regulation (EU) 2024/3228 on the harmonization of certain aspects regarding civil actions for the protection of personal data (applicable from January 7, 2025);
- The guidelines and recommendations issued by the National Supervisory Authority for Personal Data Processing (ANSPDCP).
This Privacy Policy describes the personal data we collect, how we use it, the legal grounds, how it is stored and protected, as well as the rights of the data subjects.
This Privacy Policy describes:
- the categories of processed data;
- the legal grounds and purposes of processing;
- durata păstrării datelor;
- user rights;
- use of cookies;
- use of third-party services and international data transfer
- automated profiling and personalized marketing
- technical and organizational security measures
Contact details of the data controller
Name: S.C. Grande Gloria Production S.A.
Registered office: Str. Grande Gloria, No. 1,
Costi Village, Vânători Commune
Postal Code: 807325
Galați County, Romania
VAT ID: RO33844286
Commercial Registry Number: J17/1268/2014
Email DPO: juridic@grandegloria.com
Fundamental principles of processing
According to Article 5 of Regulation (EU) 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, Grande Gloria Production processes data in compliance with the following principles:
- Lawfulness, fairness, and transparency
- Limitation to the declared purposes
- Data minimization
- Accuracy
- Storage limitation
- Integrity and confidentiality
- Responsibility and Traceability
Categories of Collected Data
Grande Gloria Production S.A. may process the following categories of data:
- Identification data: first name, last name;
- Contact data: email address, phone number, mailing addresses;
- Commercial and transactional data: order history, payment methods, returns;
- Technical data: IP addresses, browser type, operating system, devices used;
- Profile data: preferences, reviews, interests, shopping habits;
- Data resulting from browsing: cookies, timestamps, clicks, online behavior;
- Account authentication data and encrypted passwords;
- Data automatically collected through third-party platforms: (Google Ads, Meta/Facebook Ads, TikTok Ads, Instagram, YouTube, Vimeo, etc.).
Legal grounds and purposes of processing
Processing takes place in accordance with the following legal grounds provided by Article 6 of Regulation (EU) 679/2016 regarding the protection of natural persons with regard to the processing of personal data and the free movement of such data, as follows:
- Consent – for newsletters, personalized campaigns, cookies, automated profiling, based on the legal ground: Art. 6 alin. (1) lit. a), Regulation (EU) 679/2016/;
- performance of a contract — account registration, order processing, product delivery, on the following legal grounds: Art. 6 alin. (1) lit. b), Regulation (EU) 679/2016/ ;
- Legal obligation – fiscal archiving, invoice issuance, accounting records, based on the legal ground: Art. 6 alin. (1) lit. c), Regulation (EU) 679/2016/ ;
- Legitimate interest – statistical analysis, fraud prevention, website operation, remarketing, based on the legal ground: Art. 6 alin. (1) lit. f), Regulation (EU) 679/2016/ .
Purposes of processing
The data is processed for:
- Creation and management of user accounts
- Provision of information and technical support
- Commercial communications, where consent has been given
- Improving the site’s functionality and security
- Complying with legal obligations;
- Order processing and product delivery;
- Customer support and after-sales assistance
Data-retention periods
The data are stored in accordance with the storage-limitation principle (Art. 5 para. 1 lit. e of Regulation (EU) 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data), as follows:
- Fiscal data: 10 years – Accounting Law 82/1991 (RO)
- Inactive accounts: Automatic deletion after 5 years – Legitimate interest
- Marketing data: Until consent is withdrawn – Art. 6 (1)(a) GDPR
- Other data: For as long as required by a legitimate interest or contractual obligation – Art. 6 (1)(b)/(f) GDPR
Profiling and automated decisions
Profiling is carried out only with explicit consent and solely to personalise content. No fully automated decisions producing legal effects are taken without human involvement.
Automated profiling is used for personalised marketing, remarketing and automated campaigns (e-mail marketing, Facebook Ads, Google Ads, Instagram, TikTok Ads).
- Processing is based on Art. 6 (1)(a) GDPR (consent).
- Users may request human intervention, object to profiling, or ask for details of the logic involved.
Sharing of personal data
Your personal data are never sold to third parties. However, personal data may be shared with third-party service providers, such as payment processors (e.g., PayPal, bank cards), courier services, or marketing and analytics platforms, but only for the purposes described above and in accordance with legal regulations.
Legal basis:
Regulation (EU) 2016/679 (GDPR)
Law 190/2018 (RO) implementing the GDPR
Security measures
Grande Gloria Production S.A. applies appropriate technical and organisational measures to ensure confidentiality, integrity and availability of data, including:
- Encryption and pseudonymisation
- Access control and internal audits
- Regular back-ups and security monitoring
- Internal policies and staff training
In the event of a personal-data breach, we will notify the Romanian Supervisory Authority (ANSPDCP) and the affected individuals within 72 hours (Arts. 33–34 GDPR).
Rights of Data Subjects
In accordance with Articles 15–22 of Regulation (EU) 679/2016 on the protection of natural persons with regard to the processing of personal data, you have the following rights:
- Right to information and access (Art. 15);
- Right to rectification (Art. 16);
- Right to erasure (“right to be forgotten” – Art. 17);
- Right to restriction of processing (Art. 18);
- Right to data portability (Art. 20);
- Right to object (Art. 21);
- Right not to be subject to an automated decision (Art. 22).
- Right to lodge a complaint with the National Supervisory Authority for Personal Data Processing ANSPDCP (www.dataprotection.ro).
Requests may be sent to juridic@grandegloria.com
or by post to:
Str. Grande Gloria, No. 1
Costi village, Vânători commune
Postal Cod: 807325
Galați County, Romania
Exercise of rights
You may contact the Data Protection Officer (DPO) at the following e-mail address:
by post to the company’s registered office. We will reply within 30 days at the address:
Str. Grande Gloria, No. 1
Costi village, Vânători commune
Postal Cod: 807325
Galați County, Romania
via the form provided on this page, in the “Complaints and Notifications” section,
Complaints and notifications
You have the right to contact the ANSPDCP (National Supervisory Authority for Personal Data Processing) for any complaint regarding the processing of your data:
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal
Bd. Gen. Gheorghe Magheru 28–30, Sector 1, Bucharest
E-mail: anspdcp@dataprotection.ro
GDPR Complaint / Request Form
Cookies and similar technologies
This website uses cookies to improve your online experience, under Article 6 (1)(a) of Regulation (EU) 679/2016 and Law 506/2004.
Types of cookies we use
- Strictly necessary – essential for site functionality.
- Performance – analytics and statistics.
- Functional – remember your preferences.
- Marketing – remarketing and ad personalisation.
- Social-media – integration with Facebook, Instagram, YouTube, etc.
By browsing the site you agree to our use of cookies. You can manage preferences via your browser settings or the consent banner.
Granting consent in line with this policy on your first visit allows us to use cookies each time you access the website.
Full details are available in our Cookie Policy page.
Third-party services and external links
Grande Gloria Production S.A. uses:
- Hosting and CDN services (e.g., Cloudflare)
- Media-hosting platforms (YouTube, Vimeo)
- Social networks (Meta/Facebook, Instagram, TikTok)
- Advertising platforms (Google Ads, Meta Ads)
- WhatsApp – for chat-service integration
- YouTube – for watching videos directly on our website
- Google Analytics – for traffic analysis and user-experience improvements
- Facebook Pixel – for tracking user behaviour and delivering relevant ads on Facebook
- Other websites that are not part of the Grande Gloria Group
The processing of data by these entities is carried out in accordance with their own policies, and the Controller is not responsible for how they manage the data.
Data transfers to these providers are governed by:
- Data-processing agreements – Art. 28 GDPR
- Appropriate safeguards for international transfers – Arts. 45-49 GDPR
- Legitimate interest – Art. 6 (1)(f) GDPR
Changes to the Privacy Policy
Changes to the Privacy Policy
This policy may be updated. Any new version will be published on the website, indicating the date it takes effect. Please check this page periodically for possible changes.
