Under Regulation (EU) 2016/679 · 1 July 2026
The General Data Protection Regulation (GDPR) grants you a number of rights regarding your personal data processed by VLAD V.A. ALEXANDRU PFA through alexandruvlad.com. Below is a clear description of each right and how to exercise it.
You have the right to know whether we process personal data about you and, if so, to receive a copy. On request, we will provide:
If your data is inaccurate or incomplete, you have the right to have it corrected. You can update your name and email directly in your account, or contact us for any other correction.
You may request deletion of your personal data when:
Exception: orders, invoices and accounting records must be retained for 10 years under Romanian tax law. These cannot be deleted on request and remain in our accounting records after the account is deleted, without being linked to an active account.
You can initiate account deletion directly from Profile → Delete account.
Account deletion is not instantaneous. The moment you request it, the account is flagged for deletion and deactivated, and all active sessions are closed — you can no longer sign in.
A 30-calendar-day grace period follows, designed to protect you against accidental or hasty deletions. If you change your mind during that window, use our secure contact form and the account's email address, and we will cancel the deletion and restore your account with its data intact.
Once the 30 days have passed, account data — name, email address, password, saved addresses and newsletter preferences — is deleted permanently and irreversibly. The deletion can no longer be reversed, the account cannot be recovered, and we can no longer provide you with a copy of its data. If you want a copy, exercise your right to portability (section 5) before requesting deletion.
The only exception remains the records we are legally required to keep: the invoices and accounting documents relating to your orders, retained for 10 years under Romanian tax law.
You may request that we limit processing of your data in certain situations: you contest the accuracy of the data, processing is unlawful but you do not want erasure, or you have objected and are awaiting the outcome. During the restriction period, the data will be stored but not otherwise processed.
You have the right to receive your personal data (that you provided) in a structured, commonly used and machine-readable format (JSON or CSV), so you can transfer it to another controller. This right applies to data processed on the basis of consent or a contract.
You may object at any time to processing of your data based on our legitimate interests. We will cease processing unless we can demonstrate compelling legitimate grounds that override your rights. For direct marketing (newsletter), you can object at any time — unsubscription takes effect immediately.
Where processing is based on your consent (newsletter), you may withdraw it at any time without affecting the lawfulness of prior processing. You can unsubscribe from any email you receive or from the Profile section of your account.
If you believe the processing of your data infringes GDPR, you have the right to lodge a complaint with the competent supervisory authority:
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
www.dataprotection.ro · B-dul G-ral. Gheorghe Magheru 28–30, Bucharest
You may also lodge a complaint with the supervisory authority in your EU country of residence.
Send a written request through our secure contact form with the subject "GDPR Rights Request". We will respond within 30 calendar days. If the request is complex or numerous, this period may be extended by a further 60 days, with prior notice to you.
We do not charge fees for exercising your rights, unless requests are manifestly unfounded or excessive.