Privacy Policy for Gassali.com

Effective Date: July 30, 2026

At Gassali.com, operated by Aligencia S.R.L. , we are committed to protecting your privacy and ensuring transparent data processing practices. This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you visit our online pet store and purchase our products, in strict compliance with the EU General Data Protection Regulation (GDPR), Romanian Law 190/2018, and Law 365/2002 regarding e-commerce.

1. Data Controller Information

Under the GDPR, the data controller responsible for your personal data is:

• Company Name: Aligencia S.R.L.

• Establishment Date: March 20, 2026

• Main Domain: Business and management consultancy activities (CAEN Code 7020)

• Website: www.gassali.com

• Registration Number (ONRC): 54306964

• VAT Number: RO54505193

• Physical Address: Str. Țincani, Nr. 5, Sector 6, București, Romania

• Contact Email: contact@aligencia.com

2. Personal Data We Collect

We collect personal data that you voluntarily provide to us when you create an account, place an order, or contact our support team. The categories of data we process include:

• Identity and Contact Data: Name, surname, billing address, shipping address, email address, and personal phone number.

• Financial and Transaction Data: Payment details (processed securely via our PCI DSS-compliant payment gateways) and order history.

• Technical and Usage Data: IP address, browser type, device information, and navigation data collected through cookies.

3. Legal Basis and Purposes of Processing

We process your personal data only where we have a valid legal basis under GDPR Article 6. Our purposes include:

• Contract Performance (Article 6(1)(b)): To process and deliver your pet product orders, manage your account, and provide customer support.

• Legal Obligation (Article 6(1)(c)): To comply with mandatory Romanian tax, commercial, and accounting requirements.

• Legitimate Interests (Article 6(1)(f)): To detect and prevent fraud, ensure platform security, and improve our website’s performance.

• Consent (Article 6(1)(a)): To send marketing communications or use non-essential tracking cookies. You can withdraw your consent at any time.

4. Data Sharing and Disclosure

To fulfill your orders and operate our store, we may share necessary data with trusted third parties under strict data processing agreements. These include:

• Fulfillment and Dropshipping Partners: To pick, pack, and ship your pet products directly to you.

• Courier and Delivery Services: To deliver your orders to your specified address.

• Payment Processors: To securely facilitate your transactions.

• IT and Hosting Providers: To maintain the security and functionality of gassali.com.

5. Data Retention

We store your personal data only for as long as necessary to fulfill the purposes for which it was collected.

• Financial and Accounting Data: Retained for the mandatory period required by Romanian accounting law (Law 82/1991).

• Customer Support and Communications: Retained for 3 years.

• Usage Data and Analytics: Retained for up to 24 months before being anonymized or deleted.

6. Data Security Measures

We implement rigorous technical and organizational measures to protect your data against unauthorized access, loss, or destruction, in accordance with GDPR Article 32. These measures include:

• End-to-end SSL/TLS encryption for all data in transit.

• Secure password hashing and access controls.

• In the unlikely event of a data breach posing a risk to your rights, we will notify you and the Romanian data protection authority (ANSPDCP) within 72 hours, as mandated by GDPR Article 33.

7. Your Rights Under GDPR

As a data subject, you have the following rights regarding your personal information:

• Right of Access: To request confirmation of data processing and obtain a copy of your data.

• Right to Rectification: To request the correction of inaccurate or incomplete data.

• Right to Erasure (“Right to be Forgotten”): To request the deletion of your data, subject to legal retention exceptions.

• Right to Restriction of Processing: To block or limit the processing of your data.

• Right to Data Portability: To receive your data in a structured, commonly used format.

• Right to Object: To object to processing based on legitimate interests or for direct marketing.

To exercise any of these rights, please contact us at contact@aligencia.com.

Right to Lodge a Complaint (Article 77): If you believe your data protection rights have been violated, you have the right to file a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) in Romania.

8. Cookies and Tracking Technologies

Our website uses strictly necessary cookies to ensure the platform functions properly (e.g., maintaining your shopping cart and session security) without requiring prior consent. We also use non-essential cookies for analytics and marketing purposes, which are only activated if you provide explicit consent through our cookie banner.