Privacy policy

This policy explains what personal data we process through the retragere.ro website and the withdrawal form, for what purpose, and what rights you have.

1. Who we are

Retragere.ro is a service of EANmatch, CVR DK-39223090, Hesteskoen 9, 9480 Løkken, Denmark. Data protection contact: [email protected].

2. Two different roles

• For website visitors (checker, demo, messages sent to us) we are the controller: we decide why and how the data is processed.
• For the customers of shops that use the withdrawal form, the controller is the shop. We are the processor and process the data only on the shop’s instructions, under the data processing agreement. For questions about a withdrawal request, contact the shop you bought from.

3. What data we process as controller

Situation	Data	Purpose and legal basis	How long we keep it
The shop checker	the address of the checked shop, the detected platform, the result; the IP address only in irreversibly hashed form	running the checker and preventing abuse; legitimate interest (Art. 6(1)(f) GDPR)	12 months
The demo form	the data entered (name, email, order number and the optional fields), date and time	sending the demo confirmation email; legitimate interest	at most 30 days
Creating a form (shop account)	shop name, website address, platform, email for requests, company name, country and CUI (tax ID) or VAT / registration number, return address, appearance preferences; the IP address only irreversibly hashed	providing the service to the shop (Art. 6(1)(b) GDPR) and preventing abuse (point f); we check the CUI in the public ANAF register, and the VAT number of companies from other EU countries in the EU VIES register, to confirm the company exists	for as long as the form is active, plus legal archiving periods; unconfirmed forms are deleted after 30 days
The Pro plan launch list	email address, shop address (optional), the plan you are interested in, sign-up date; the IP address only irreversibly hashed. Shops with a free form appear on the same list, with the plan “Free”	announcing the launch of the Pro plan: consent, for those who sign up (Art. 6(1)(a) GDPR); legitimate interest, for shops already using the service (point f). You can unsubscribe from any email	until you unsubscribe, or at most 12 months after launch
Messages sent through the contact form or by email	name, email address, shop address (optional) and the message; the form does not store them on the site, they only reach our inbox	replying to the request and, if you become a customer, entering into the contract (Art. 6(1)(b))	for as long as the conversation or contractual relationship lasts, plus legal archiving periods

4. Cookies

We do not use analytics or advertising cookies and we do not track visitors. The anti-bot protection (Cloudflare Turnstile) may use strictly necessary mechanisms to tell people apart from automated programs.

5. Who we share data with

• Cloudflare, Inc.: hosting of the website and the database (stored in the European Union) and anti-bot protection.
• Resend (Plus Five Five, Inc.): sending the confirmation emails (servers in the European Union).

Both companies are based in the USA. Any transfers outside the EEA take place on the basis of the standard contractual clauses approved by the European Commission. We do not sell or rent personal data.

6. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection. You can write to us at [email protected]; we reply within one month. For data in a withdrawal request, we will coordinate with the shop, which is the controller.

You can lodge a complaint with a supervisory authority: in Denmark, where the company is based, Datatilsynet (datatilsynet.dk), or in Romania, ANSPDCP (dataprotection.ro).

7. Security

Connections are encrypted (HTTPS), access to data is restricted, and IP addresses are stored only as an irreversible hash.