Privacy policy

Vibe your life! — it's about excellence, style, uniqueness, and ingredients carefully selected to deliver a supreme taste.

We appreciate the interest you have shown in us and we want to be transparent about how we process your personal data when you use the poki-woki.ro website. Our goal is to provide you with a secure online experience in which the information you share with us is used exclusively for the purposes for which it was provided.

In accordance with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data ("GDPR"), we undertake the responsibility of managing the personal data you provide safely and in compliance with the GDPR.

1. Data Controller

The poki-woki.ro website is operated locally by several companies, each serving a specific city or geographical area. The controller of your personal data is the company that processes your order, depending on the delivery city you select.

All companies operating the website apply the same data protection standards and comply with the provisions of the GDPR. For any request regarding your personal data, you may contact us at info@poki-woki.ro, and your request will be forwarded to the relevant controller.

2. Categories of Personal Data Collected

In order to provide our services, we collect the following categories of data:

• Personal data: first name and last name;

• Contact data: phone number, delivery address, billing address;

• Identification and authentication data: email address, password (stored in encrypted form).

3. Purposes of Processing and Legal Basis

We process your personal data for the following purposes:

• Creating a user account on the poki-woki.ro website — legal basis: performance of a contract;

• Processing and delivery of orders — legal basis: performance of a contract;

• Issuing fiscal documents (invoices, receipts) — legal basis: legal obligation;

• Awarding loyalty bonus points to customers — legal basis: performance of a contract / legitimate interest;

• Sending offers, promotions, and newsletters — legal basis: your consent;

• Customer satisfaction surveys and service improvement — legal basis: your consent.

4. Your Rights

As a data subject, you have the following rights:

• Right of access — to obtain, upon request, confirmation that we process your data and access to such data;

• Right to rectification — to request the updating or correction of inaccurate or incomplete data;

• Right to erasure ("right to be forgotten") — to request the deletion of your data under the conditions provided by law;

• Right to restriction of processing — in the situations provided by the GDPR;

• Right to data portability — to receive your data in a structured, commonly used, and machine-readable format;

• Right to object — to object to the processing of your data at any time;

• Right to withdraw consent — where processing is based on consent, without affecting the lawfulness of processing carried out before the withdrawal;

• Right to be notified as soon as possible in the event of a security incident with a significant impact on the data provided;

• Right to lodge a complaint with the competent supervisory authority — in Romania, the National Supervisory Authority for Personal Data Processing (www.dataprotection.ro).

To exercise these rights, please send a written request to info@poki-woki.ro. We will respond to your request within 30 days of receipt.

5. Voluntary Nature of Providing Data

Providing personal data is voluntary. However, refusal to provide such data, or the provision of incomplete or inaccurate data, may result in the inability to create a customer account and/or to process and deliver orders.

6. Recipients of the Data

In order to provide our services, your personal data may be transmitted to the following categories of recipients, strictly within the limits necessary to fulfill the purposes mentioned above:

• Partner companies operating the poki-woki.ro website — where orders are processed in different cities, data may be transferred between the controllers referred to in Section 1, exclusively for the purpose of order processing;

• Technical and platform service providers: BoogIT, Syrve, WooCommerce;

• Couriers and delivery companies — for transporting orders to the address provided;

• Accounting and tax service providers — for issuing financial documents;

• Public authorities — where there is a legal obligation to do so.

All our partners are carefully selected and are contractually committed to ensuring data protection in accordance with the GDPR.

7. Data Retention Period

The data you provide as a customer will be stored for as long as the account created on poki-woki.ro remains active. Upon deletion of the account, the associated personal data will be removed from our database, with the exception of data we are required to retain under legal obligations (for example, invoice data — 10 years, in accordance with tax legislation).

If no orders are placed through the account for a period of 6 months, the account will be automatically deleted, together with all associated data.

8. Data Security

The confidentiality, integrity, and availability of information are essential to us. We are committed to processing the data provided in accordance with Regulation (EU) 2016/679, through the following measures:

Confidentiality. Access to data is permitted only to authorized persons, through an access control system. Data is encrypted, and our employees receive ongoing training regarding data confidentiality and information security. Any personal data entered on the website is encrypted during transfer using a secure protocol (SSL/TLS).

Integrity. Changes to data are strictly controlled and permitted only to authorized persons, thereby ensuring the internal and external consistency of the information and the programs used.

Availability. We use backup IT systems that ensure permanent availability of data and prevent service interruptions.

9. Cookies

The poki-woki.ro website uses cookies to provide you with an optimal browsing experience. For details about the types of cookies used and how you can manage them, please consult our Cookie Policy.

10. Protection of Minors

Our services are not directed to persons under the age of 16. We do not knowingly collect personal data from minors. If you become aware of such a situation, please contact us so we can delete the information.

11. Changes to the Privacy Policy

We reserve the right to periodically update this Privacy Policy to reflect legislative changes or changes to our services. The updated version will be published on this page, with the date of the last revision indicated below.