Last updated: 28 September 2026
1. Who we are
FORJA Padel, Miercurea Ciuc, Harghita, Romania. E-mail: info@forjapadel.com.
We are the controller of your personal data under Regulation (EU) 2016/679 (GDPR).
2. What data we process
- Order data: name, e-mail, phone, delivery and billing address, order contents and payment status.
- Your designs: the texts, names, logos and images you add to your racket, and any notes or reference images.
- Account: if you create an account, your name, e-mail address, account type (private or club/company), the company name, VAT number and address if you give them, and the designs you save. Your password is stored encrypted; we cannot see it.
- Messages: what you write to us through the contact or quote request forms, including files you attach, or by e-mail.
- Technical data: IP address, browser data and cookies needed to run the shop (see the Cookie policy).
- Usage statistics: if you accept statistics cookies, Google Analytics records which pages you visit, the device and browser you use, your approximate location and where you came from (for example a search engine). IP addresses are not stored by Google Analytics.
3. Why and on what legal basis
- To produce and deliver your order and handle guarantee claims (performance of a contract, Art. 6(1)(b) GDPR).
- To issue invoices and keep accounting records (legal obligation, Art. 6(1)(c) GDPR).
- To answer your messages and to protect the shop against fraud and abuse (legitimate interest, Art. 6(1)(f) GDPR).
- To measure how the site is used and improve it (Google Analytics), and to see which channel brought an order, only if you accept statistics cookies (consent, Art. 6(1)(a) GDPR).
- To send newsletters or show your racket as an example, only if you give consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
4. Who receives your data
Our hosting provider, our payment processor Stripe (card payments; Stripe receives the payment data directly, we never see your card number), couriers, our accountant and our invoicing software (SmartBill), each only as needed for their service. If you accept statistics cookies, Google Ireland Limited receives usage data as our processor for Google Analytics; Google may transfer data to the United States under the EU–US Data Privacy Framework. The workshop that produces your racket receives the artwork files only (for example a name printed on the racket), without your contact details. The workshop is located outside the European Economic Area (China); this transfer is necessary to produce the product you ordered (Art. 49(1)(b) GDPR) and is limited to the artwork.
5. How long we keep it
Order and invoice data is kept for the periods required by Romanian accounting law. Design files are kept for 3 years after delivery so we can handle guarantee claims and re-orders, unless you ask us to delete them earlier. Account data and saved designs are kept until you delete them or your account. Messages are kept for up to 2 years.
6. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent. Write to info@forjapadel.com. You can also complain to the National Supervisory Authority for Personal Data Processing (ANSPDCP, dataprotection.ro).
7. Security
The site uses HTTPS. Design files are stored under unguessable addresses and are not listed publicly.