Draft under legal review. Company registration details shown in [brackets] will be completed before sales open. A Romanian version of this page will be published alongside it.
Last updated: 15 October 2026
1. Who we are
The controller of your personal data is [COMPANY LEGAL NAME] [SRL], registered office [FULL ADDRESS], Godinești, Gorj County, Romania; Trade Register No. [J18/XXX/YYYY]; EUID [ROONRC.J18/XXX/YYYY]; CUI [RO]XXXXXXXX („Iacobici Winery”, „we”). Contact for privacy matters: contact@iacobici.com · [PHONE] · postal address above.
2. What data we collect
When you request a reservation of bottles we collect:
- name and surname;
- e-mail address;
- phone number;
- requested quantity (and bottle numbers, if you choose them);
- your confirmation that you are at least 18 years old;
- any message you choose to write to us;
- if a reservation is confirmed: billing data (name, address, and, for companies, company name and CUI) and delivery or pick-up details.
When you simply browse the site we do not use analytics or advertising trackers. Our hosting provider records technical server logs (IP address, date/time, page requested, browser type) for security purposes.
We do not knowingly collect data from persons under 18. Please do not use the reservation form if you are under 18.
3. Why we use your data and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Handling your reservation request, contacting you about availability, confirmation, payment, delivery or pick-up | Art. 6(1)(b), steps taken at your request before entering into a contract, and performance of the contract |
| Checking that wine is sold only to adults | Art. 6(1)(c), legal obligation (prohibition on selling alcohol to minors) and art. 6(1)(f), legitimate interest in responsible sale |
| Issuing invoices and keeping accounting records | Art. 6(1)(c), legal obligation (Romanian fiscal and accounting law) |
| Handling complaints and defending legal claims | Art. 6(1)(f), legitimate interest |
| Website security (server logs) | Art. 6(1)(f), legitimate interest in keeping the site secure |
| Sending news about future releases, only if you ask us to in writing | Art. 6(1)(a), consent, which you can withdraw at any time by replying to any message or writing to us |
Providing name, e-mail and quantity is necessary to process a reservation; without them we cannot handle your request. The phone number is [optional / required for delivery coordination].
4. Who receives your data
We do not sell your data. We share it only with:
- our website hosting provider Hostinger International Ltd. (Cyprus, EU) and e-mail provider [E-MAIL PROVIDER];
- our accountant [ACCOUNTING FIRM] (invoices);
- courier companies [COURIER], only if you choose delivery;
- payment providers [BANK / PAYMENT PROVIDER], if applicable;
- public authorities when required by law.
These providers act as processors under written contracts (art. 28 GDPR) or as independent controllers where the law requires.
5. Transfers outside the EEA
We aim to keep data within the EEA. If a provider processes data outside the EEA [e.g. e-mail provider], the transfer is based on an EU adequacy decision (such as the EU-US Data Privacy Framework for certified companies) or EU Standard Contractual Clauses. [DELETE IF NOT APPLICABLE]
6. How long we keep your data
- Reservation requests that do not lead to a sale: [12] months after the last contact, then deleted.
- Confirmed sales: contract data for the general limitation period (3 years) after delivery; invoices and accounting documents for the period required by Romanian accounting law (currently [5 / 10] years).
- News about future releases: until you withdraw your consent.
- Server logs: [30] days.
7. Your rights
You have the right to access your data, to rectification, erasure, restriction of processing, data portability, to object to processing based on legitimate interest, and to withdraw consent at any time (without affecting earlier processing). To exercise them write to contact@iacobici.com. We reply within one month.
You also have the right to lodge a complaint with the Romanian supervisory authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral Gheorghe Magheru 28-30, Sector 1, 010336 București; anspdcp@dataprotection.ro; www.dataprotection.ro.
8. Security
We use HTTPS, restricted access to the reservation inbox/database, strong passwords and two-factor authentication for administrators, and regular updates of the website software.
9. Automated decisions
We do not take decisions based solely on automated processing or profiling.
10. Cookies and local storage
See our Cookie Policy.
11. Changes
We may update this policy; the date at the top shows the latest version. Significant changes will be announced on the website.