{"id":10,"date":"2026-07-28T10:21:25","date_gmt":"2026-07-28T07:21:25","guid":{"rendered":"https:\/\/gammaprint.ro\/en\/?page_id=10"},"modified":"2026-07-28T10:21:27","modified_gmt":"2026-07-28T07:21:27","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/gammaprint.ro\/en\/privacy-policy\/","title":{"rendered":"PRIVACY AND PERSONAL DATA PROTECTION POLICY"},"content":{"rendered":"<style>.wp-block-kadence-advancedheading.kt-adv-heading10_d0f18b-c5, .wp-block-kadence-advancedheading.kt-adv-heading10_d0f18b-c5[data-kb-block=\"kb-adv-heading10_d0f18b-c5\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading10_d0f18b-c5 mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading10_d0f18b-c5[data-kb-block=\"kb-adv-heading10_d0f18b-c5\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading10_d0f18b-c5 img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading10_d0f18b-c5[data-kb-block=\"kb-adv-heading10_d0f18b-c5\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h2 class=\"kt-adv-heading10_d0f18b-c5 wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading10_d0f18b-c5\">PREAMBLE<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This Privacy Policy (the \u201cPolicy\u201d) explains how MMAX Distribution S.R.L. (\u201cGamma Print\u201d, \u201cwe\u201d, \u201cus\u201d, \u201cour\u201d, or the \u201cdata controller\u201d) collects, uses, discloses, and safeguards the personal data of individuals who use our websites and services, in accordance with Regulation (EU) 2016\/679 (the \u201cGDPR\u201d), Romanian Law No. 190\/2018, Romanian Law No. 365\/2002 on electronic commerce, and all other applicable legal provisions.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This Privacy Policy sets out the rules governing the processing of personal data through www.gammaprint.ro and https:\/\/gammaprint.cool-shop.eu\/ro (collectively, the \u201cWebsites\u201d). Both Websites are operated by MMAX Distribution SRL, a company incorporated under Romanian law, with its registered office at Str. Cosmos no. 1, bl. 24, sc. B, 4th floor, apt. 10, Bra\u0219ov County, Bra\u0219ov, and its place of business and correspondence address at Str. Fund\u0103tura H\u0103rmanului no. 1, Bra\u0219ov, 550240, Romania, registered with the Trade Register Office attached to the Bra\u0219ov Tribunal under no. J2007003145084, unique registration code (CUI) 22776747, e-mail address office@gammaprint.ro, and bank account RO88INGB000099990222479, opened with ING Romania.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">By accessing or using either of these Websites, you acknowledge and accept this Policy. Both Websites are operated by the same company and form part of the same commercial infrastructure. In this document, MMAX Distribution S.R.L. is referred to as \u201cGamma Print\u201d or the \u201cCompany\u201d. Any reference to \u201cGamma Print\u201d or the \u201cCompany\u201d is a reference to MMAX Distribution S.R.L. Gamma Print may update this document from time to time, including to reflect changes concerning Website functionality, order processing, products, services, payments, delivery, or applicable law.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This Privacy Policy comprises a set of rules governing the relationship between MMAX Distribution S.R.L., the entity that administers and develops the Websites, and their users and visitors.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">By accepting this Privacy Policy, users accept its contents in full and undertake to comply with it whenever applicable.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For any request concerning this Privacy Policy, data protection, or the exercise of your rights, you may contact us at office@gammaprint.ro. To the fullest extent permitted by law, Gamma Print shall not be liable for loss or damage arising exclusively from improper use of the Websites, users\u2019 failure to comply with this Privacy Policy, or circumstances beyond the Company\u2019s reasonable control.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The purpose of this notice is to inform you of the essential aspects of our processing of your personal data and of the rights available to you under Regulation (EU) 2016\/679 on data protection (the \u201cGDPR\u201d) and applicable Romanian and European legislation.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Protecting the confidentiality of your personal data is a priority for us. We recommend that you read this Policy together with the Terms and Conditions and the Cookie Policy available on the Websites.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">1. Data Controller and Contact Details<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The controller of your personal data is:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">MMAX DISTRIBUTION SRL, a company incorporated under Romanian law, with its registered office at Str. Cosmos no. 1, bl. 24, sc. B, 4th floor, apt. 10, Bra\u0219ov County, Bra\u0219ov, and its place of business and correspondence address at Str. Fund\u0103tura H\u0103rmanului no. 1, Bra\u0219ov, 550240, Romania, registered with the Trade Register Office attached to the Bra\u0219ov Tribunal under no. J2007003145084, unique registration code (CUI) 22776747, e-mail address office@gammaprint.ro, and bank account RO88INGB000099990222479, opened with ING Romania; telephone: 0785 550 096.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Websites: www.gammaprint.ro and https:\/\/gammaprint.cool-shop.eu\/ro.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Data Protection Contact Person<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Given the nature, scope, and purposes of the processing activities we carry out, our core activities do not consist of large-scale systematic monitoring of data subjects or the large-scale processing of special categories of personal data. Accordingly, the appointment of a Data Protection Officer (\u201cDPO\u201d) under Article 37(1) of the GDPR is not mandatory.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Nevertheless, to support compliance with data protection requirements, we have appointed a contact person responsible for handling matters relating to the processing of personal data and the exercise of your rights. You may contact this person with any question or request at privacy@gammaprint.ro, at our registered office at Str. Cosmos no. 1, bl. 24, sc. B, 4th floor, apt. 10, Bra\u0219ov County, Bra\u0219ov, or at our correspondence address at Str. Fund\u0103tura H\u0103rmanului no. 1, Bra\u0219ov, 550240, Romania.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Should we appoint a Data Protection Officer within the meaning of Article 37 of the GDPR in the future, we will publish the DPO\u2019s contact details in this Policy and notify the Romanian National Supervisory Authority for Personal Data Processing, in accordance with Article 37(7) of the GDPR.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Data Protection Officer (DPO)<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We have appointed a Data Protection Officer (\u201cDPO\u201d) within the meaning of Article 37 of the GDPR. In accordance with Article 37(7) of the GDPR, the DPO\u2019s contact details have been communicated to the Romanian National Supervisory Authority for Personal Data Processing and are published below.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For any matter relating to the processing of your personal data or the exercise of your rights under the GDPR, you may contact the DPO directly:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>E-mail: site@gammaprint.ro<\/li>\n\n\n\n<li>Correspondence: For the attention of the Data Protection Officer, Str. Fund\u0103tura H\u0103rmanului no. 1, Bra\u0219ov, 550240, Romania.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The DPO performs the duties set out in Article 39 of the GDPR, including, in particular, informing and advising the controller and its employees, monitoring compliance with the GDPR, providing advice on data protection impact assessments, and cooperating with the supervisory authority as its contact point.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">2. Scope of this Policy<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This Policy applies equally to both Gamma Print Websites: the corporate website at www.gammaprint.ro and the online store hosted at https:\/\/gammaprint.cool-shop.eu\/ro, including all related pages and functionality, regardless of how you interact with us (browsing, forms, user account, orders, e-mail, telephone, chat, or social media).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The online store is provided and hosted through a technology platform made available by a third-party partner acting as a processor on behalf of the controller. Further information on cookies is provided in the Cookie Policy, while contractual matters are governed by the Terms and Conditions.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">3. Definitions<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The terms used in this Policy have the meanings set out below, in accordance with Article 4 of the GDPR.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Personal data<\/strong> \u2013 any information relating to an identified or identifiable natural person (the \u201cdata subject\u201d), such as a name, an identification number, location data, or an online identifier.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Processing<\/strong> \u2013 any operation performed on personal data, including collection, recording, storage, use, disclosure, deletion, and similar operations.<\/li>\n\n\n\n<li><strong>Controller<\/strong> \u2013 the person or entity that determines the purposes and means of processing; for the purposes of this Policy, Gamma Print.<\/li>\n\n\n\n<li><strong>Processor<\/strong> \u2013 the person or entity that processes personal data on behalf of the controller and in accordance with the controller\u2019s instructions.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">4. Data Processing Principles<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We process your personal data in accordance with the principles laid down in the GDPR:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>lawfulness, fairness, and transparency;<\/li>\n\n\n\n<li>purpose limitation, meaning that data is collected for specified, explicit, and legitimate purposes;<\/li>\n\n\n\n<li>data minimisation, meaning that we collect only data that is necessary and relevant;<\/li>\n\n\n\n<li>accuracy, including the updating or rectification of inaccurate data;<\/li>\n\n\n\n<li>storage limitation, meaning that data is retained only for as long as necessary for the relevant purposes;<\/li>\n\n\n\n<li>integrity and confidentiality, through appropriate technical and organisational measures;<\/li>\n\n\n\n<li>accountability and the ability to demonstrate compliance.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">5. Sources and Methods of Data Collection<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We collect your personal data from two main sources:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>directly from you \u2013 through Website forms, account creation, requests for quotations, orders, submitted files and artwork, and correspondence by e-mail, telephone, chat, or social media;<\/li>\n\n\n\n<li>automatically \u2013 through your use of the Websites, by means of technologies such as cookies, online identifiers, and security logs, to the extent permitted by law and subject to the choices you make through the cookie banner.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Where applicable, we identify mandatory fields when collecting data. If you do not provide the required information, we may be unable to perform our obligations, for example, to fulfil an order or respond to a request.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">6. Categories of Personal Data Processed<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Depending on how you interact with us, we may process the following categories of personal data:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Identification and contact data:<\/strong> first name, surname, e-mail address, telephone number, delivery address, and correspondence address.<\/li>\n\n\n\n<li><strong>Order and quotation data:<\/strong> requested products and services, specifications, files, artwork and uploaded content, order history, returns, warranties, complaints, and designated user details.<\/li>\n\n\n\n<li><strong>Billing data:<\/strong> billing address, company name, unique registration code (CUI), Trade Register number, bank account details for refunds, and any other information required under tax and accounting legislation.<\/li>\n\n\n\n<li><strong>Communication data:<\/strong> message content, communication history, questions, notifications, and complaints.<\/li>\n\n\n\n<li><strong>Online technical data:<\/strong> IP address, cookie identifiers, device and browser data, pages visited, actions performed on the Websites, and visit duration, depending on your cookie settings and consent choices.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">7. Purposes, Legal Bases, and Retention Periods<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We process your personal data only where a legal basis under Article 6 of the GDPR applies. The table below sets out the relevant purposes, legal bases, and retention periods:<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><td><strong>Purpose of processing<\/strong><\/td><td><strong>Categories of personal data<\/strong><\/td><td><strong>Legal basis (GDPR)<\/strong><\/td><td><strong>Retention period<\/strong><\/td><\/tr><\/thead><tbody><tr><td>Browsing and operation of the Websites; ensuring security and preventing fraud, including the use of CAPTCHA tools<\/td><td>IP address, online identifiers, device and browser data, security logs, browsing behaviour<\/td><td>Legitimate interests \u2013 Article 6(1)(f): network and information security<\/td><td>Security logs: up to 12 months, unless a longer period is required to investigate an incident<\/td><\/tr><tr><td>Creating and administering a user account in the online store<\/td><td>First name, surname, e-mail address, username, encrypted password, order history, preferences<\/td><td>Performance of a contract \u2013 Article 6(1)(b); consent \u2013 Article 6(1)(a) for optional features<\/td><td>For the duration of the account; deletion upon request or after three years of inactivity following the last login<\/td><\/tr><tr><td>Requests for quotations, questions, appointments, and management of communications through contact forms, e-mail, telephone, or chat<\/td><td>First name, surname, e-mail address, telephone number, company name, message content, and any data provided voluntarily<\/td><td>Steps taken at your request before entering into a contract \/ performance of a contract \u2013 Article 6(1)(b); legitimate interests \u2013 Article 6(1)(f)<\/td><td>Up to two years after the most recent correspondence, unless a contract is concluded or another legal basis requires continued retention<\/td><\/tr><tr><td>Placing, confirming, and fulfilling orders; product customisation; uploaded files; print approval (\u201cBun de Tipar\u201d); operational communications<\/td><td>Identification and contact data, specifications, files and artwork, correspondence content, designated user details<\/td><td>Performance of a contract \u2013 Article 6(1)(b); compliance with a legal obligation \u2013 Article 6(1)(c); legitimate interests \u2013 Article 6(1)(f)<\/td><td>For the duration of the contract and thereafter for the applicable statutory archiving periods, generally ten years for supporting documents<\/td><\/tr><tr><td>Invoicing, financial, accounting, and tax records; debt recovery<\/td><td>Name or company name, billing address, unique registration code (CUI) \/ Trade Register number, bank account details for refunds, invoice data<\/td><td>Compliance with a legal obligation \u2013 Article 6(1)(c); legitimate interests \u2013 Article 6(1)(f) for debt recovery<\/td><td>Ten years after the end of the financial year, in accordance with accounting and tax rules<\/td><\/tr><tr><td>Delivery of products by courier or collection from our place of business<\/td><td>First name, surname, delivery address, telephone number, and e-mail address, as disclosed to the courier company<\/td><td>Performance of a contract \u2013 Article 6(1)(b)<\/td><td>For the period necessary to complete delivery and resolve any complaints, and thereafter for the applicable archiving periods<\/td><\/tr><tr><td>Processing online payments by card or PayPal and payments by bank transfer<\/td><td>Payment data required to confirm the transaction; payer identification data. Full card details are processed by the payment processor<\/td><td>Performance of a contract \u2013 Article 6(1)(b); compliance with a legal obligation \u2013 Article 6(1)(c)<\/td><td>For the periods required by the legal obligations applicable to transactions and accounting records<\/td><\/tr><tr><td>Statutory guarantee of conformity, returns, and complaints, where applicable<\/td><td>Identification and contact data, product and order data, bank account details for refunds, report or record of findings<\/td><td>Performance of a contract \u2013 Article 6(1)(b); compliance with a legal obligation \u2013 Article 6(1)(c)<\/td><td>For the duration of the guarantee and the applicable limitation periods<\/td><\/tr><tr><td>Newsletters and commercial communications by e-mail<\/td><td>E-mail address; optionally, name and preferences for personalisation<\/td><td>Consent \u2013 Article 6(1)(a), read together with Romanian Law No. 365\/2002<\/td><td>Until consent is withdrawn or you unsubscribe; thereafter, limited retention on a suppression list<\/td><\/tr><tr><td>Cookies and analytics, marketing, and remarketing technologies, including Google Analytics 4, Google Ads, and Meta Pixel<\/td><td>Cookie identifiers, IP address, pages visited, events, and interaction data<\/td><td>Consent \u2013 Article 6(1)(a), provided through the cookie banner<\/td><td>For the duration specified for each cookie in the Cookie Policy; generally no longer than 12 months<\/td><\/tr><tr><td>Competitions, promotional prize draws, and promotional campaigns<\/td><td>First name, surname, e-mail address, postal address, telephone number, CNP only for prizes exceeding RON 600, public social media profile data<\/td><td>Consent \u2013 Article 6(1)(a); compliance with a legal obligation \u2013 Article 6(1)(c), subject to the safeguards set out in Article 4 of Romanian Law No. 190\/2018<\/td><td>Two years, or the period prescribed by law for tax obligations relating to prizes. The statutory period for supporting tax documents applies separately from the two-year period for other competition data<\/td><\/tr><tr><td>User-generated content, including reviews, comments, photographs, and posts<\/td><td>Name, e-mail address, photographs, submitted content, public social media profile data<\/td><td>Consent \u2013 Article 6(1)(a); legitimate interests \u2013 Article 6(1)(f)<\/td><td>Until consent is withdrawn or deletion is requested<\/td><\/tr><tr><td>Recruitment, where you submit a CV<\/td><td>Data included in the CV and recruitment correspondence<\/td><td>Steps taken before entering into a contract \u2013 Article 6(1)(b); consent \u2013 Article 6(1)(a)<\/td><td>Until the selection process is completed. If no employment relationship is established, deletion after three months, unless you consent to a longer retention period<\/td><\/tr><tr><td>Establishing, exercising, or defending legal rights; resolving disputes; responding to requests from public authorities<\/td><td>Any data relevant to supporting our legal position<\/td><td>Legitimate interests \u2013 Article 6(1)(f); compliance with a legal obligation \u2013 Article 6(1)(c)<\/td><td>For the duration of the applicable limitation periods and proceedings<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Legitimate interests.<\/strong> Where processing is based on our legitimate interests under Article 6(1)(f) of the GDPR, those interests include, in particular, ensuring Website security and preventing fraud, improving our services, managing the commercial relationship, recovering debts, and establishing, exercising, or defending our legal rights.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In these circumstances, we have assessed that our interests are not overridden by your rights and freedoms. You have the right to object, as described in Section 18.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">8. Special Categories of Personal Data<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Gamma Print\u2019s services do not ordinarily involve the processing of special categories of personal data (sensitive data) within the meaning of Article 9 of the GDPR.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If, exceptionally, you voluntarily provide us with such data, for example in a message or a file submitted for customisation, we will process it only where an applicable legal basis under Article 9 of the GDPR and Article 3 of Romanian Law No. 190\/2018 exists, generally your explicit consent.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We recommend that you do not provide us with sensitive data unless this is strictly necessary.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Processing of national identification numbers (CNP).<\/strong> In the limited circumstances provided by law, particularly for awarding prizes exceeding RON 600 in competitions or promotional prize draws and for complying with the related tax obligations, we may process the Romanian personal numerical code (CNP) or other national identification numbers. Such processing is based on compliance with a legal obligation under Article 6(1)(c) of the GDPR and is carried out subject to the safeguards required by Article 4 of Romanian Law No. 190\/2018, namely:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>the implementation of appropriate technical and organisational measures to comply with the principle of data minimisation and to ensure the security and confidentiality of processing, in accordance with Article 32 of the GDPR;<\/li>\n\n\n\n<li>the establishment of retention periods based on the nature of the data and the purpose of processing, together with specific time limits for deletion or periodic review with a view to deletion;<\/li>\n\n\n\n<li>periodic training on applicable obligations for persons processing such data under our authority or for processors engaged by us.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">We do not collect CNPs for any other purpose and do not use them as a general identifier in our relationship with you.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">9. Processing of Minors\u2019 Personal Data<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Our Websites and services are intended for legal entities, professionals, and, exceptionally, adult consumers; they are not intended for minors. We do not knowingly collect minors\u2019 personal data on the basis of their own consent. Where information society services are offered directly to a child, consent-based processing is lawful only if the child is at least 16 years old. Below that age, consent must be given or authorised by the holder of parental responsibility.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If we become aware that we have inadvertently processed a minor\u2019s personal data without an appropriate legal basis, we will delete it as soon as reasonably possible.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">10. Cookies and Similar Technologies<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The Websites use cookies and similar technologies, including pixels, identifiers, and browser notifications. Cookies that are strictly necessary for Website operation are used on the basis of our legitimate interests. All other cookies, including analytics, marketing, remarketing, and personalisation cookies, are used only with your consent, provided through the cookie banner in accordance with Article 6(1)(a) of the GDPR.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">You may change your choices at any time through the cookie banner or your browser settings. Full details of the types of cookies used, their providers, and their duration are available in the Cookie Policy.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>CAPTCHA and anti-fraud measures.<\/strong> To prevent automated access and abuse, we may use CAPTCHA validation tools and technical security measures that may involve processing your IP address and certain interaction data, based on our legitimate interest in protecting the security of the Websites under Article 6(1)(f) of the GDPR.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">11. Commercial Communications to Existing Customers (the \u201cSoft Opt-In\u201d Exception)<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">As an exception to the general requirement for prior consent, and on the basis of our legitimate interests under Article 6(1)(f) of the GDPR, we may send you commercial e-mails concerning our own products or services that are similar to those you have previously purchased from us, provided that all of the following conditions are met:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>we obtained your e-mail address directly from you in connection with the sale of a product or service;<\/li>\n\n\n\n<li>the communications concern only our own products or services that are similar to those you have already purchased;<\/li>\n\n\n\n<li>when your e-mail address was collected, you were clearly offered a free and straightforward opportunity to object to this use; and<\/li>\n\n\n\n<li>every subsequent communication provides a simple and free means of objecting, such as an unsubscribe link.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">In all other circumstances, we send commercial e-mails only with your prior and express consent, in accordance with Article 6(1)(a) of the GDPR and Article 6 of Romanian Law No. 365\/2002. You may object to direct marketing at any time, without giving reasons, and we will honour your objection.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">12. Recipients of Personal Data. Processors and Sub-processors<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">For the purposes described above, we may disclose your personal data, on a need-to-know basis and subject to appropriate contractual safeguards, to the following categories of recipients:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>the provider of the online store platform hosted at gammaprint.cool-shop.eu;<\/li>\n\n\n\n<li>providers of web hosting, maintenance, backup, IT security, and anti-spam services;<\/li>\n\n\n\n<li>courier and transport service providers;<\/li>\n\n\n\n<li>payment processors and financial service providers, including providers of online card and PayPal payment services;<\/li>\n\n\n\n<li>e-mail marketing, newsletter, chat, and SMS service providers;<\/li>\n\n\n\n<li>online analytics and marketing service providers, such as Google Analytics 4, Google Ads, Google Tag Manager, and Meta Pixel, depending on your consent choices;<\/li>\n\n\n\n<li>accounting and audit service providers, consultants, and lawyers;<\/li>\n\n\n\n<li>subcontractors involved in production, customisation, printing, engraving, embroidery, and packaging, where required to fulfil an order;<\/li>\n\n\n\n<li>public authorities and institutions, where disclosure is required by law or necessary to protect our legitimate rights and interests.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Service providers that process personal data on our behalf act as processors under data processing agreements that comply with Article 28 of the GDPR and impose confidentiality and security obligations. We may engage sub-processors under the general authorisation arrangements set out in the Terms and Conditions, while remaining responsible to you for compliance with our data protection obligations.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">We do not sell or rent your personal data to third parties.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">13. Gamma Print as Data Controller and Data Processor<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">As a rule, Gamma Print acts as the controller of personal data collected from users, customers, and visitors.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For certain orders, the files, artwork, or databases you provide for customisation may contain personal data relating to third parties, for which you, as the customer, determine the purposes and means of processing. In such cases, Gamma Print acts as a processor and processes the data solely on the basis of your documented instructions and only for the purpose of fulfilling the order, in accordance with Article 28 of the GDPR and the provisions of the Terms and Conditions, which include the applicable Data Processing Agreement.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As the customer and controller, you warrant that you have a valid legal basis for disclosing such personal data to us.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">14. Transfers Outside the European Economic Area (EEA)<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">As a rule, your personal data is processed within the EEA. However, some of the service providers we use, for example for analytics, marketing, e-mail, or digital infrastructure, may process data outside the EEA, including in the United States.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Where such transfers take place, we ensure that appropriate safeguards are in place in accordance with Chapter V of the GDPR, in particular: (i) an adequacy decision adopted by the European Commission, such as the EU-U.S. Data Privacy Framework for certified providers; (ii) the Standard Contractual Clauses adopted by the European Commission; or (iii) another safeguard or derogation available under Article 49 of the GDPR. You may request further information about the applicable safeguards by contacting office@gammaprint.ro.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">15. Business Transfers<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">In the event of a merger, demerger, sale of the business or shares, reorganisation, insolvency, or similar transaction or event, personal data may be transferred to a successor in title, subject to applicable law and the maintenance of an equivalent level of protection.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">16. External Links and Social Media<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The Websites may contain links to third-party websites and social media plug-ins. Those third parties have their own privacy policies, for which we are not responsible. If you sign in through a social media account, information will be shared in accordance with that platform\u2019s privacy settings. Content that you post publicly on our social media pages or blog becomes publicly visible; we therefore recommend that you exercise caution regarding the personal data you disclose.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">17. Automated Decision-Making and Profiling<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Gamma Print does not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you. Should we introduce such processing in the future, we will inform you and update this Policy in accordance with Article 22 of the GDPR.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">18. Rights of Data Subjects<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Subject to the conditions set out in the GDPR, you have the following rights:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>the right to be informed about the processing of your personal data;<\/li>\n\n\n\n<li>the right of access to your personal data and to obtain a copy of it;<\/li>\n\n\n\n<li>the right to rectify inaccurate or incomplete personal data;<\/li>\n\n\n\n<li>the right to erasure, also known as the \u201cright to be forgotten\u201d, in the circumstances provided by law;<\/li>\n\n\n\n<li>the right to restriction of processing in the circumstances set out in Article 18 of the GDPR;<\/li>\n\n\n\n<li>the right to data portability where processing is based on consent or a contract and is carried out by automated means;<\/li>\n\n\n\n<li>the right to object to direct marketing, which we will honour;<\/li>\n\n\n\n<li>the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal;<\/li>\n\n\n\n<li>the right not to be subject to automated decision-making, in accordance with Article 22 of the GDPR.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">19. Exercising Your Rights. Complaints<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">You may exercise your rights by submitting a request to office@gammaprint.ro or to our place of business at Str. Fund\u0103tura H\u0103rmanului no. 1, Bra\u0219ov. To protect your personal data, we may request additional information reasonably necessary to verify your identity. We will generally respond within one month of receiving your request. This period may be extended by a further two months where justified, in which case we will inform you. Exercising your rights is, in principle, free of charge.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Complaint to the supervisory authority.<\/strong> If you believe that your rights have been infringed, you may lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP):<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>28-30 General Gheorghe Magheru Boulevard, District 1, 010336 Bucharest, Romania;<\/li>\n\n\n\n<li>Telephone: +40 318 059 211 \/ +40 318 059 212;<\/li>\n\n\n\n<li>E-mail: anspdcp@dataprotection.ro; Website: www.dataprotection.ro.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">You also have the right to an effective judicial remedy against the controller or a supervisory authority, in accordance with applicable law.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">20. Security Measures<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We implement appropriate technical and organisational measures in accordance with Article 32 of the GDPR to protect personal data against unauthorised access, loss, destruction, alteration, or disclosure. Depending on the circumstances, these measures include access controls and restrictions to authorised personnel, securing our IT infrastructure, password protection and, where appropriate, encryption or pseudonymisation, internal operating procedures, confidentiality undertakings, staff training, and physical access controls at our premises.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The transmission of information over the internet cannot be guaranteed to be completely secure. Although we use reasonable efforts to protect your personal data, we cannot guarantee the absolute security of information transmitted online.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">21. Personal Data Breaches<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ANSPDCP without undue delay and, where feasible, within 72 hours of becoming aware of the breach, in accordance with Article 33 of the GDPR. Where the breach is likely to result in a high risk, we will also inform you in accordance with Article 34 of the GDPR.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">22. Updating Your Personal Data<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">If the personal data you have provided changes, or if you become aware that the data we hold is inaccurate or incomplete, please contact us at office@gammaprint.ro so that we can update it.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">23. Changes to this Policy<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We may update this Policy from time to time to reflect changes in our practices, the services we use, or applicable legal requirements. The version published on the Websites is the version applicable at the time you access it. We recommend that you review this Policy periodically.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">24. Contact<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">For any question or request concerning the processing of your personal data, you may contact us:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>by e-mail at office@gammaprint.ro;<\/li>\n\n\n\n<li>by telephone at 0785 550 096;<\/li>\n\n\n\n<li>by post at our registered office at Str. Cosmos no. 1, bl. 24, sc. B, 4th floor, apt. 10, Bra\u0219ov County, Bra\u0219ov, or at our place of business and correspondence address at Str. Fund\u0103tura H\u0103rmanului no. 1, Bra\u0219ov, 550240, Romania.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Last updated: June 2026<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>PREAMBLE This Privacy Policy (the \u201cPolicy\u201d) explains how MMAX Distribution S.R.L. (\u201cGamma Print\u201d, \u201cwe\u201d, \u201cus\u201d, \u201cour\u201d, or the \u201cdata controller\u201d) collects, uses, discloses, and safeguards the personal data of individuals who use our websites and services, in accordance with Regulation (EU) 2016\/679 (the \u201cGDPR\u201d), Romanian Law No. 190\/2018, Romanian Law No. 365\/2002 on electronic commerce,&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_kad_blocks_custom_css":"","_kad_blocks_head_custom_js":"","_kad_blocks_body_custom_js":"","_kad_blocks_footer_custom_js":"","_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"_kad_post_classname":"","footnotes":""},"class_list":["post-10","page","type-page","status-publish","hentry"],"taxonomy_info":[],"featured_image_src_large":false,"author_info":{"display_name":"Gamma Print","author_link":"https:\/\/gammaprint.ro\/en\/author\/mktmngpr2039\/"},"comment_info":0,"_links":{"self":[{"href":"https:\/\/gammaprint.ro\/en\/wp-json\/wp\/v2\/pages\/10","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/gammaprint.ro\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/gammaprint.ro\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/gammaprint.ro\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/gammaprint.ro\/en\/wp-json\/wp\/v2\/comments?post=10"}],"version-history":[{"count":1,"href":"https:\/\/gammaprint.ro\/en\/wp-json\/wp\/v2\/pages\/10\/revisions"}],"predecessor-version":[{"id":513,"href":"https:\/\/gammaprint.ro\/en\/wp-json\/wp\/v2\/pages\/10\/revisions\/513"}],"wp:attachment":[{"href":"https:\/\/gammaprint.ro\/en\/wp-json\/wp\/v2\/media?parent=10"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}