Last updated: 25 September 2026
1. Who we are
[Legal company name], CUI [CUI], [Trade register no.], [Street, number], Miercurea Ciuc, Harghita, Romania. E-mail: [contact e-mail], phone: [phone].
We are the controller of your personal data under Regulation (EU) 2016/679 (GDPR).
2. What data we process
- Order data: name, e-mail, phone, delivery and billing address, order contents and payment status.
- Your designs: the texts, names, logos and images you add to your racket, and any notes or reference images.
- Messages: what you write to us through the contact form or by e-mail.
- Technical data: IP address, browser data and cookies needed to run the shop (see the Cookie policy).
3. Why and on what legal basis
- To produce and deliver your order and handle guarantee claims (performance of a contract, Art. 6(1)(b) GDPR).
- To issue invoices and keep accounting records (legal obligation, Art. 6(1)(c) GDPR).
- To answer your messages and to protect the shop against fraud and abuse (legitimate interest, Art. 6(1)(f) GDPR).
- To send newsletters or show your racket as an example, only if you give consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
4. Who receives your data
Our hosting provider, our payment processor Stripe (card payments; Stripe receives the payment data directly, we never see your card number), couriers and our accountant, each only as needed for their service. The workshop that produces your racket receives the artwork files only (for example a name printed on the racket), without your contact details. The workshop is located outside the European Economic Area (China); this transfer is necessary to produce the product you ordered (Art. 49(1)(b) GDPR) and is limited to the artwork.
5. How long we keep it
Order and invoice data is kept for the periods required by Romanian accounting law. Design files are kept for 3 years after delivery so we can handle guarantee claims and re-orders, unless you ask us to delete them earlier. Messages are kept for up to 2 years.
6. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent. Write to [contact e-mail]. You can also complain to the National Supervisory Authority for Personal Data Processing (ANSPDCP, dataprotection.ro).
7. Security
The site uses HTTPS. Design files are stored under unguessable addresses and are not listed publicly.