Skip to content
Language: en

Privacy policy

Last updated:

1. Who we are

The figafioridiguarana.ro website belongs to S.C. ITALFOOD QUALITÀ E SCELTA S.R.L., tax ID (CUI) 18554793, registered with the Romanian Trade Register under no. J2006005689404 (J40/5689/2006), with its registered office at Calea Victoriei nr. 101, sc. B, et. 4, ap. 21, Sector 1, București, Romania. We decide how and why the data described below is processed, so we are its controller.

Contact address: Str. Ramuri Tei 17, Sector 2, București. For any question about your data, write to us at info@fi-ga.eu.

2. What data we process

This website presents fi.GÀ drinks. It has no online shop, user accounts, orders, payments or forms, so we never ask for your name, address or payment details. We only process:

  • Your cookie choice. When you choose in the cookie banner, we store in our consent log: a random identifier created in your browser, your choice (the accepted categories), the date and time, the policy version, the language and page you were on, your browser type and an irreversible fingerprint of your IP address (a keyed SHA-256 hash). We do not keep the IP address itself.
  • Browsing data, only with your consent. If you accept statistics or marketing cookies, Google Analytics 4, Google Ads and Meta Pixel are loaded through Google Tag Manager. They collect information about your visit (pages viewed, device, browser, approximate location, online identifiers). Details in the Cookie policy.
  • Messages you send us. If you email or call us, we process the data in your message (for example your name, email address or phone number) to reply.
  • Technical server logs. For security, our hosting provider automatically records the IP address, date, requested page and browser.
  • Consent log: to be able to prove your choice, a legal obligation (Art. 6(1)(c) and Art. 7(1) of Regulation (EU) 2016/679, GDPR).
  • Statistics and marketing: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
  • Replying to messages and keeping the site secure: our legitimate interest in talking to you and protecting the site (Art. 6(1)(f) GDPR).

4. How long we keep data

  • Consent log entries: 3 years, then they are deleted automatically.
  • Cookies: the duration of each one is listed in the Cookie policy.
  • Messages: as long as needed to reply, and no longer than 3 years after our last exchange, unless the law requires otherwise.
  • Server logs: a few months at most, under the hosting provider’s rules.

5. Who else can access the data

We do not sell data. We only share it with these recipients, bound by contract or by law:

  • The website’s hosting provider, whose servers hold the website and the consent log.
  • Email providers, through which we receive and send messages.
  • Google (Google Tag Manager, Google Analytics 4, Google Ads) and Meta Platforms Ireland (Meta Pixel), only with your consent for those categories.
  • Public authorities, only when the law requires it.

Google and Meta may transfer data outside the European Economic Area, including to the United States. These transfers rely on the EU-US Data Privacy Framework or on standard contractual clauses approved by the European Commission.

6. Your rights

Under the GDPR, you have the right:

  • to know what data we hold about you and get a copy (Art. 15);
  • to have incorrect data corrected (Art. 16) or erased (Art. 17);
  • to restrict processing (Art. 18) and to data portability (Art. 20);
  • to object to processing based on legitimate interest (Art. 21);
  • to withdraw your consent at any time, from the “Cookie settings” button, without affecting earlier processing;
  • to lodge a complaint with the Romanian data protection authority (ANSPDCP), www.dataprotection.ro, or with the authority in your country.

To exercise your rights, write to us at info@fi-ga.eu. We reply within one month. For requests about cookies, please include the identifier shown in “Cookie settings”, so we can find your choice in the log.

7. Security

The website only uses encrypted connections (HTTPS). Access to the CMS and the consent log is limited to administrators, with two-factor authentication.

8. Changes

We may update this policy. The current version is always on this page, with the date of the last update.