Privacy Policy — Coffee Cart Events

1

Data Controller

The data controller responsible for your personal data is:

Coffee Cart Events
Timișoara, Romania
Email: office@coffeecart.events
Website: coffeecart.events

2

Data We Collect

When you submit an instant quote request on our website, we collect the following personal data:

First name and last name
Email address
Phone number
Company name (optional)
Event details: date, location, number of guests, duration
Selected services and options

We do not collect sensitive personal data (special categories under Art. 9 GDPR), payment card data, or data from minors under 16.

3

Purpose & Legal Basis

We process your data for the following purposes:

Generating and sending your quote — legal basis: performance of a pre-contractual measure (Art. 6(1)(b) GDPR)
Following up on your request — legal basis: legitimate interest (Art. 6(1)(f) GDPR)
Compliance with legal obligations (e.g. invoicing) — legal basis: legal obligation (Art. 6(1)(c) GDPR)
Saving your data in our CRM / Google Sheets — legal basis: legitimate interest and your explicit consent provided via the GDPR checkbox

            We will never use your data for unsolicited marketing without your separate, explicit consent.
        

4

Data Retention

We retain your personal data for the following periods:

Quote requests: 3 years from the date of submission (for contract follow-up purposes)
Invoicing data (if a contract is concluded): 10 years as required by Romanian accounting law
Email correspondence: 3 years

After the retention period expires, your data is permanently deleted or anonymized.

5

Data Sharing

We do not sell your personal data. We may share it with the following processors, strictly for the purpose of providing our services:

Google LLC — email (Gmail), document storage (Google Sheets, Drive). Google is certified under the EU–US Data Privacy Framework.
Hostinger International Ltd — website hosting provider.

All processors are bound by data processing agreements and are required to protect your data in accordance with GDPR.

6

Your Rights (GDPR)

Under the General Data Protection Regulation, you have the following rights regarding your personal data:

Right of Access

You can request a copy of all personal data we hold about you.

Right to Rectification

You can ask us to correct inaccurate or incomplete data.

Right to Erasure

You can ask us to delete your data ("right to be forgotten"), where no legal obligation prevents it.

Right to Restriction

You can ask us to restrict the processing of your data in certain circumstances.

Right to Portability

You can receive your data in a structured, machine-readable format.

Right to Object

You can object to processing based on legitimate interest at any time.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw it at any time without affecting prior processing.

Right to Lodge a Complaint

You have the right to lodge a complaint with the Romanian supervisory authority (ANSPDCP).

To exercise any of these rights, contact us at office@coffeecart.events. We will respond within 30 days.

7

Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:

HTTPS encryption for all data transmitted via our website
Access controls limiting who can view personal data
Regular review of our data processing practices

8

Cookies

Our website uses only essential technical cookies required for the site to function (e.g. session management). We do not use tracking cookies, advertising cookies, or third-party analytics cookies without your explicit consent.

The map feature on our quote page uses OpenStreetMap and Nominatim, which may set their own cookies subject to their respective privacy policies.

9

Contact & Complaints

For any questions about this privacy policy or to exercise your rights, please contact us:

Coffee Cart Events
Email: office@coffeecart.events
Website: coffeecart.events

If you believe your rights have been violated, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing:

ANSPDCP — Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal
Website: www.dataprotection.ro
Email: anspdcp@dataprotection.ro