Privacy Policy

Last updated: February 24, 2026

1. Who We Are

BHAZAR S.R.L. ("Bhazar", "we", "us", or "our") is a company registered in Romania under the Trade Registry number J2026005179006, with the Unique Registration Code (CUI) 53489103.

Registered Address: București, Sectorul 4, Bulevardul METALURGIEI, Nr. 61A, Lot 1, Camera 1, Bl. 1, Etaj 2, Ap. 15, Romania.

Main Activity: CAEN 4690 — Non-specialized wholesale trade.

Data Protection Contact: gdpr@bhazar.com

2. What Data We Collect

We may collect and process the following categories of personal data:

• Identity Data: Name, username, company name
• Contact Data: Email address, phone number, postal address
• Technical Data: IP address, browser type/version, time zone, operating system, device information
• Usage Data: Pages visited, links clicked, timestamps, session duration
• Transaction Data: Products purchased, payment history, delivery details
• Communication Data: Correspondence via email, contact forms, or other channels
• Cookie Data: Information collected through cookies and similar technologies (see our Cookie Policy)

3. How We Use Your Data

We use your personal data for the following purposes:

• To provide, maintain, and improve our services and platform
• To process transactions and send related information
• To respond to your inquiries and provide customer support
• To send promotional communications (with your consent)
• To analyze usage patterns and improve user experience
• To ensure security and prevent fraud
• To comply with legal obligations

4. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your data based on:

• Consent (Article 6(1)(a)) — For marketing communications and optional cookies
• Contract Performance (Article 6(1)(b)) — To fulfill orders and provide services
• Legal Obligation (Article 6(1)(c)) — Tax, accounting, and regulatory requirements
• Legitimate Interest (Article 6(1)(f)) — To improve our platform, ensure security, and prevent fraud

5. Data Sharing

We do not sell your personal data. We may share your data with:

• Service providers who assist us in operating our platform (hosting, payment processing, shipping)
• Legal authorities when required by law or to protect our rights
• Business partners with your explicit consent for specific collaborations

6. International Data Transfers

As we operate across multiple regions, your data may be transferred to countries outside the European Economic Area (EEA). In such cases, we ensure adequate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Account data: Duration of your account plus 3 years
• Transaction data: 10 years (Romanian fiscal law requirement)
• Communication data: 2 years from last contact
• Cookie data: As specified in our Cookie Policy

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your data ("Right to be forgotten")
• Restriction: Request limitation of data processing
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interest
• Withdraw consent: Withdraw consent at any time without affecting prior processing

To exercise any of these rights, please contact us at gdpr@bhazar.com. We will respond within 30 days.

9. Right to Lodge a Complaint

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Romanian Data Protection Authority:

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANPD)
Website: anpd.gov.ro

10. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption, access controls, regular security audits, and secure hosting infrastructure.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

For any questions about this Privacy Policy or your personal data:

• Data Protection: gdpr@bhazar.com
• General Contact: contact@bhazar.com
• Registered Office: București, Sectorul 4, Bulevardul METALURGIEI, Nr. 61A, Lot 1, Camera 1, Bl. 1, Etaj 2, Ap. 15, Romania