1. Data Controller
Editura Micul Stejar – Registered trademark at OSIM
Email: contact@wstr.ro
Website: wstr.ro
Data Protection Contact: contact@wstr.ro
We process your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).
2. What Data We Collect
| Type of Data | Purpose | Legal Basis |
|---|---|---|
| Name | Order processing | Contract performance |
| Email address | Order confirmations, communication | Contract performance |
| Payment data | Payment processing | Contract performance |
| Email (newsletter) | Marketing | Consent |
Important: Credit card data is NOT stored on our servers. Payment data is processed directly by our payment processor.
3. Who We Share Data With
Your data may be shared with:
- Payment processors – for transaction processing (Stripe, PayPal)
- Email marketing services – for newsletter delivery (only with consent)
- Hosting services – for website operation
All our partners are required to comply with GDPR and ensure data confidentiality.
4. How Long We Keep Data
- Order data: 5 years (tax obligations)
- Customer account data: Until account deletion + 30 days
- Newsletter data: Until consent withdrawal
- Cookies: As per cookie policy
5. Your Rights
Under GDPR, you have the following rights:
🔍 Right of Access
You can request a copy of the data we hold about you.
✏️ Right to Rectification
You can request correction of inaccurate or incomplete data.
🗑️ Right to Erasure ("Right to be Forgotten")
You can request deletion of your data, except for data required for legal obligations.
⏸️ Right to Restriction
You can request limitation of processing in certain situations.
📦 Right to Data Portability
You can receive your data in a structured format for transfer to another controller.
🚫 Right to Object
You can refuse data processing for direct marketing purposes.
To exercise these rights, contact us at: contact@wstr.ro
We will respond within 30 days.
6. Data Security
We implement technical and organizational measures to protect your data:
- Secure SSL/TLS connection (https)
- Encryption of sensitive data
- Role-based access restrictions
- Regular backups
- Breach monitoring and detection
7. Complaints
If you believe your data is not being processed correctly, you have the right to file a complaint with:
ANSPDCP - Romanian National Supervisory Authority for Personal Data Processing
Website: dataprotection.ro
8. Policy Changes
This policy may be updated periodically. We will notify you of significant changes by email or on the website.
Last updated: February 2026