Privacy policy
Last updated: 21 October 2026
This policy explains what personal data we process when you visit www.soculent.ro, order from the online shop or contact us, why we process it and what rights you have under Regulation (EU) 2016/679 (“GDPR”).
1. Data controller
FERMENTIT S.R.L., registered office at Str. Viitorului nr. 88-90, Floor 4, Ap. E4-A3, Sector 2, 020616 Bucharest, Romania, Trade Register no. J2025004603006, VAT number RO51178399. For any question about your data, write to contact@fermentit.ro or call +40 732 010 010.
2. What data we process, why and on what legal basis
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| You place an order | name, email, phone, delivery and billing address, company name and VAT number if applicable, products ordered, order value, payment information (without full card details) | processing, delivering and collecting payment for the order, order communications, returns and complaints | performance of the contract (art. 6(1)(b) GDPR) |
| We issue the invoice and keep accounts | billing and order data | compliance with tax and accounting obligations | legal obligation (art. 6(1)(c) GDPR) |
| You write to us or call us | name, contact details, content of the message | replying to you | our legitimate interest in answering requests or, where applicable, performance of the contract |
| You leave a review | name, city, email, rating and comment | publishing the review (name, city, rating and comment; the email is not published) and, if needed, contacting you about it | your consent, given by ticking the box in the form |
| You browse the website | IP address, browser and device type, pages visited, cookies and similar technologies | operation and security of the website and cart, fraud prevention | our legitimate interest in keeping the shop working and secure |
| You accept analytics or marketing cookies | online identifiers, interactions with the website | traffic statistics (Google Analytics) and campaign measurement (Meta) | your consent, which you can withdraw at any time |
Providing your order data is necessary to conclude the contract; without it we cannot deliver your order. We do not make decisions based solely on automated processing that produce legal effects concerning you.
3. Who we share data with
We do not sell your data. We only share it as necessary with:
- Shopify (Shopify International Limited, Ireland, and its affiliates), the platform the shop runs on, including online payment processing;
- the courier company delivering your order (name, address, phone);
- our invoicing and accounting providers (the Keez invoicing app and our accountant);
- Google (Google Ireland Limited): Google Analytics and Google Tag Manager, only with your consent, and Google Workspace, where we receive reviews sent through the form;
- Meta (Meta Platforms Ireland Limited): the Meta pixel, only with your consent;
- Stockist, the service showing the map of locations on the Where to buy page, and Google Maps, used by that map;
- public authorities, where the law requires us to.
Some of these providers may transfer data outside the European Economic Area (for example, to the USA or Canada). Such transfers rely on a European Commission adequacy decision (including the EU–US Data Privacy Framework) or on standard contractual clauses approved by the Commission.
4. How long we keep data
- order data and invoices: for as long as needed to perform the contract and then for the period required by accounting law (currently up to 10 years);
- messages and complaints: up to 3 years after they are resolved;
- reviews: as long as they are published on the website or until you withdraw your consent;
- cookies: for the periods shown below.
5. Cookies
We use cookies and similar technologies. When you first visit the website, we ask for your consent to cookies that are not strictly necessary. You can accept them, reject them or choose by category, and you can change your choice at any time using the “Cookie settings” link in the website footer.
- Strictly necessary (no consent needed): shopping cart, checkout, security, remembering your language and your cookie choices. Set by Shopify; they expire at the end of the session or within 1 year at most.
- Analytics (only with your consent): Google Analytics, loaded through Google Tag Manager, shows us how many visitors we have and which pages they read; Shopify statistics. Duration: up to 2 years.
- Marketing (only with your consent): the Meta (Facebook/Instagram) pixel, for measuring and showing ads. Duration: up to 1 year.
Google Tag Manager is only loaded after you accept analytics or marketing cookies. The website’s fonts are hosted on the shop’s own servers, not by third parties. The Where to buy page shows the Stockist / Google Maps map, which may set its own cookies; if you prefer to avoid this, you can use the list of locations on the same page.
6. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability, the right to object to processing based on legitimate interest and the right to withdraw your consent at any time, without affecting the lawfulness of earlier processing. To exercise your rights, write to contact@fermentit.ro; we reply within one month at the latest.
If you are not satisfied, you can lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, Bucharest, www.dataprotection.ro, or with the data protection authority in your country of residence.
7. Security
The website uses an encrypted connection (HTTPS), and payments are processed by PCI DSS certified providers. Order data is only accessible to the people who need it to process orders.
8. Minors
The online shop is not intended for people under 18 to place orders, and we do not knowingly collect data about children.
9. Changes
We may update this policy; the current version is always published on this page, with the date of the last update.
