GDPR Policy

1. Data controller

The data controller is SC ROFLEXI.COM S.R.L., CUI 53009728, Trade Register J2025092717009, using the contact details shown on the website.

2. Data processed

• first and last name;
• email address;
• the message submitted through the contact form;
• anonymous technical data and local preferences such as language and cookie consent.

3. Purposes of processing

• replying to requests and messages submitted through the website;
• ensuring website operation and security;
• remembering the selected language and cookie consent choice;
• anonymous statistics, if enabled later and only with your consent.

4. Legal basis

• Article 6(1)(b) GDPR - processing needed to answer your request and communicate with you;
• Article 6(1)(a) GDPR - analytics cookies, if you choose to accept them;
• Article 6(1)(f) GDPR - legitimate interest for website security and functionality.

5. Storage period

Contact form data is kept only as long as needed to answer your request and document the communication, usually up to 24 months from the last interaction, unless a longer period is required by law. Local preferences remain in the browser until they are cleared.

6. Your rights

You have the right to access, rectify, erase, restrict, object, and port your data, as well as the right to withdraw consent where consent was given.

7. Contact and complaints

For any data protection questions, you can contact us at support@roflexi.com. You also have the right to file a complaint with the competent supervisory authority.