Your privacy matters

The data controller is Optima Distillery S.R.L., with its registered office at Calea Martirilor 1989 no. 36, Timișoara, Timiș County, 300724, Romania, registered with the Trade Register under No. J2026040579009, Tax ID (CUI) 54972113. You can contact us at office@zemos.ro, on +40 778 987 987 or at the registered office. We answer data requests within the time limit set by Article 12 GDPR: as a rule within one month of receipt.

For data protection questions, contact office@zemos.ro. This notice does not determine whether appointing a data protection officer is mandatory.

Depending on your interaction, we may process:

• Contact form – name, email address, chosen subject and message, to reply to your request for information or a quote. The form does not ask for a phone number.
• Usage statistics – We do not currently use Google Analytics or collect usage statistics through that service.
• Security and abuse prevention – a pseudonymous HMAC identifier derived from the IP address is used to limit form requests; this is not anonymous data.
• Technical delivery data – the hosting provider, Spatiul.ro (cPanel), processes IP addresses, HTTP requests and browser information to deliver pages and for security. The website and email servers are in Romania.

For browser storage, see the Cookie Policy. We use no advertising pixels or behavioural profiling.

We use the data to reply to requests for information or quotes, communicate with you, secure the site and meet applicable legal obligations. Any purchase is handled through a separate contract, as explained in the Terms & Conditions. We do not currently use Google Analytics or collect usage statistics through that service.

The lawful basis depends on the purpose: pre-contractual steps requested by you (Article 6(1)(b) GDPR) for a quote; legitimate interest (Article 6(1)(f)) for general correspondence, security and abuse prevention; legal obligation (Article 6(1)(c)) for records required by law; and performance of a contract (Article 6(1)(b)) if a separate contract is concluded. Analytics is inactive. Any future optional statistics processing would require prior information and consent.

Hosting: Spatiul.ro, managed through cPanel. The site and the form email service use this hosting, with servers in Romania; hosting does not move data outside the EEA. Messages reach the controller’s contact mailbox; sending a request does not conclude a purchase contract.

Form protection: the form currently uses no external verification service; abuse is limited on our own server (honeypot fields, a minimum fill time, request limits). If we enable Cloudflare Turnstile, Cloudflare, Inc. (USA) will process the IP address and technical browser data, never your name, email or message, for security only; the transfer to the USA will rely on Cloudflare’s certification under the EU-U.S. Data Privacy Framework and on standard contractual clauses. We will update this page before enabling it. See the Cloudflare Privacy Policy.

Analytics: We do not currently use Google Analytics or collect usage statistics through that service. No current Analytics transfers to Google are described as active. Before any activation, this notice must specify the actual provider, data flows and applicable safeguards.

We do not sell or rent your data. The site does not integrate a payment processor.

• Messages and correspondence – we keep messages sent through the form, and the related correspondence, for at most 2 years after the last exchange, then delete them. If a request leads to a contract, we keep the correspondence for the term of the contract and then for the statutory limitation periods.
• Accounting and tax documents – created only if a request leads to a sale. Accounting registers and supporting documents (invoices, contracts and the other documents behind the entries) are kept for 5 years, starting on 1 July of the year after the financial year ends (Romanian Accounting Law No 82/1991, Article 25). Annual financial statements are kept for 10 years (Article 35(3)). Messages that do not lead to a sale do not fall into this category.
• Google Analytics – We do not currently use Google Analytics or collect usage statistics through that service. No property retention setting is presented as verified.
• Abuse prevention – anti-spam files hold only pseudonymous identifiers (HMAC) and request times, never message content; files older than 24 hours are deleted automatically by the server.
• Hosting logs – the server’s access logs (IP, date, requested page, browser) are not archived: they are deleted automatically after daily processing, within 24 hours at most. Account backups at Spatiul.ro, which may contain them, are kept for at most 30 days. We use them only for security and troubleshooting, never for profiling or marketing.

You can ask us at any time to delete your messages sooner by writing to office@zemos.ro.

Under the GDPR, you have the right to:

• Access – request a copy of your data
• Rectification – correct inaccurate information
• Erasure – ask us to delete your data (“the right to be forgotten”)
• Portability – receive your data in a machine-readable format, where applicable
• Objection – object to processing based on legitimate interest
• Restriction – limit how we process your data in the cases set out by the GDPR
• Withdrawal of consent – at any time, for processing based on consent
• Complaint – lodge a complaint with the Romanian supervisory authority, ANSPDCP

For details, see the dedicated GDPR page.

Security measures include:

• HTTPS (TLS) connections
• Rate limiting and HMAC identifiers to prevent form abuse
• Validation and filtering of data before emails are sent

Access to the hosting account and the mailbox is limited to the controller’s authorised persons.

We update the revision date only when the page is actually revised. If the purposes or legal bases of processing change, we will update this notice and, where necessary, ask for new consent for optional operations.