Menu
Your Cart

Privacy Policy

Last Updated: 29.10.2025

1. Introduction

Welcome to SC SOTEO SRL. We are committed to protecting your privacy and handling your personal data in an open and transparent manner. This privacy policy ("Policy") explains how we collect, use, process, and protect your personal information when you visit our websites:

  • www.soteo.eu

  • www.soteo.at

  • www.soteo.de

  • www.soteo.ro

  • www.soteo.hu (collectively, the "Websites") or use our services.

2. Data Controller (Who We Are)

The company responsible for processing your personal data (the "Data Controller") is:

SC SOTEO SRL CUI (VAT ID): RO50292777 Address: Str. 12 nr. 13, Sat Turnu, Oras Pecica, Judet. Arad, Romania Email: office@soteo.ro

3. What Personal Data We Collect and Why

We collect personal data to provide and improve our services. The legal basis for processing depends on the specific context.

  • When you create an account: We collect your Name, Email Address, Billing/Shipping Address, and Hashed Password.

    • Legal Basis: Performance of a contract (to provide account features).

  • When you place an order: We collect your Full Name, Billing Address, Shipping Address, Email Address, and Phone Number.

    • Legal Basis: Performance of a contract (to fulfill your order).

  • When you contact us (via contact form or email): We collect your Name, Email Address, Phone Number, and the content of your message.

    • Legal Basis: Legitimate interest (to respond to your inquiry).

  • When you subscribe to our newsletter: We collect your Email Address.

    • Legal Basis: Consent.

  • When you leave comments or reviews: We collect your Name (as provided), Email Address, and the content of your comment.

    • Legal Basis: Consent (to publish your content).

  • Technical & Analytics Data: We collect your IP Address, browser type, operating system, and browsing behavior via cookies and similar technologies.

    • Legal Basis: Consent (for analytics and marketing cookies) or Legitimate Interest (for necessary cookies).

4. How We Share Your Data (Third Parties)

We do not sell your personal data. We only share it with trusted third parties who help us operate our business.

  • Payment Processors: We share payment and order details with Stripe, Inc. to securely process your payments. We do not store your credit card information.

  • Shipping Providers: We provide your name, shipping address, and contact details (email/phone) to our delivery partners, such as GLS, DPD, and national postal services, to deliver your orders.

  • Dropshipping Suppliers: To fulfill certain orders, we may send your order details (Name, Shipping Address, items ordered) directly to our third-party suppliers or manufacturers who ship the product directly to you.

  • Analytics and Marketing Providers: We share technical data (via cookies, with your consent) with:

    • Google LLC (for Google Analytics and Google Ads) to analyze website traffic and show relevant advertisements.

    • Meta Platforms, Inc. (for Facebook Pixel) to measure, optimize, and build audiences for our advertising campaigns.

  • Legal Authorities: We may disclose your data if required by law.

5. International Data Transfers

Some of our third-party service providers, including Stripe, Inc., Google LLC, and Meta Platforms, Inc., are based in the United States or other countries outside the European Economic Area (EEA). When we transfer your personal data outside the EEA, we ensure a similar degree of protection is afforded to it by relying on Adequacy Decisions or by using Standard Contractual Clauses (SCCs) approved by the European Commission.

6. Data Security

We have implemented appropriate technical and organizational security measures to protect your personal data from accidental loss, unauthorized access, alteration, or disclosure.

7. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for any legal, accounting, or reporting requirements.

  • Order Data: Retained for the period required by Romanian accounting laws (e.g., 10 years).

  • Account Data: Retained for as long as your account is active.

  • Newsletter Data: Retained until you withdraw your consent (unsubscribe).

8. Your Rights under GDPR

As a data subject in the EU, you have the following rights:

  • The right to access: You can request a copy of the personal data we hold about you.

  • The right to rectification: You can request that we correct any inaccurate data.

  • The right to erasure ("right to be forgotten"): You can request that we delete your data, under certain conditions.

  • The right to restrict processing: You can request that we limit the processing of your data.

  • The right to data portability: You can request that we transfer your data to another organization.

  • The right to object: You can object to our processing of your data (e.g., for direct marketing).

To exercise any of these rights, please contact us at office@soteo.ro.

9. Cookies

We use cookies and similar technologies (including for analytics and marketing) to operate and improve our Websites. When you first visit our site, you will be asked for your consent via our cookie banner. For detailed information on the cookies we use, their purpose, and how you can manage your preferences, please see our separate Cookie Policy [You must create and link this page].

10. Updates to This Policy

We may update this Policy from time to time. The "Last Updated" date at the top of this page indicates the latest revision.

11. How to Complain

If you have any concerns about our use of your personal information, you can make a complaint to us at office@soteo.ro. You also have the right to lodge a complaint with the Romanian data protection authority:

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP) Website: www.dataprotection.ro