Privacy

Data controller

OPERATOR

DAYRO DISTRIBUTION SRL

CUI

RO25673185

REGISTERED OFFICE AND WAREHOUSE

Str. Prof. Ion Cosmoiu nr. 99, Bobolia, Prahova, Romania

CONTACT PERSON

Tudor Șerban, company administrator, responsible for personal data requests

Questions about the processing of personal data can be sent to the contact details above.

Processing of quote requests

The request form composes the message only in the user’s browser. Its contents are not sent to the website server and are not stored by the form. The copy function places the message in the device clipboard. When the message is sent on WhatsApp, the data passes to the WhatsApp application before the message is sent to Dayro Distribution. Users are advised to include only the information needed for the request and to avoid sensitive information.

The quote list (the chosen items and their quantities) is kept in the browser’s local storage (localStorage) on the visitor’s device and is not sent to the website server. The list stays on the device until it is cleared on the quote page or the website data is deleted from the browser. The company and contact details entered in the form are not saved.

Following a request, Dayro Distribution may receive the name, contact details, company name, town and any other details included in the message. This data is used to answer the request and to discuss a quote. For persons representing a company, the legal basis is Dayro Distribution’s legitimate interest in managing the business relationship. Where the data subject is the contracting party, steps taken at their request before entering into a contract may apply. Billing data has a separate purpose and retention period under the applicable legal obligations.

The website can be browsed without sending a request. Without sufficient details, it may not be possible to prepare a quote. A request for information is not an order and does not automatically form a contract.

Hosting and security

The website runs on the server administered for Dayro Distribution and uses Cloudflare for HTTPS delivery and access protection. These services process technical data, including the IP address, the requested page address, the time and browser information, to deliver and secure the website. The legal basis is the legitimate interest in keeping the website available and protected. Cloudflare processes this data on behalf of Dayro Distribution under the Cloudflare Data Processing Addendum, which includes the EU standard contractual clauses for transfers outside the European Economic Area. Personal data should not be entered in the URL.

The warehouse map on the “About us and contact” page loads from Google only after the “Show the Google map” button is pressed. Until then, the page sends no request to Google. Once loaded, Google receives technical data, such as the IP address and browser information, and processes it under its own privacy notice. The “Open the map” link opens Google Maps in a new tab.

Analytics tools

Dayro Distribution uses PostHog Cloud EU only after the user selects “Accept analytics”. Page type and address, language, visit time and clicks on contact channels or request preparation are measured, using a random identifier for the browser-tab session. Search text, URL parameters, company names, contact details and request contents are not sent. Screen recordings, automatic interaction capture and person profiles are not used.

The legal basis is consent. PostHog necessarily receives technical connection data when the browser sends an event; geolocation is disabled. The accept/reject choice, notice version and date are kept in the browser’s local storage for up to 180 days. The session identifier is kept in tab storage and deleted when analytics is rejected. No analytics cookies are used. Events are kept in PostHog for up to one year.

Consent can be withdrawn at any time using “Analytics preferences” in every page footer. Rejection stops future events and does not affect access to the website or quote requests. Withdrawal does not affect processing carried out before it.

Recipients and external providers

Data from sent requests is accessible to the staff handling requests and to the providers of the chosen communication channels. The company email service is provided by Yahoo. WhatsApp, Yahoo and Cloudflare have their own data processing notices. International providers may also process data outside the European Economic Area. Dayro Distribution has no separate data processing agreements with Yahoo or WhatsApp; the standard terms of each service apply.

• CloudflareHTTPS delivery and access protectionProvider notice ↗ Cloudflare
• YahooThe company email serviceProvider notice ↗ Yahoo
• WhatsAppCommunication channel, at the user’s choiceProvider notice ↗ WhatsApp
• Google MapsWarehouse map, loaded only when the button is pressedProvider notice ↗ Google Maps
• PostHogAnalytics, only with the user’s consentProvider notice ↗ PostHog

Retention and data subject rights

Order and billing data is managed in SAGA on a company computer. Accounting records are generally kept for 5 years from 1 July of the year following the financial year. After this period, the company checks with its accountant whether other legal obligations or ongoing matters require further retention.

Customer emails and Yahoo and WhatsApp conversations are reviewed once a week. We delete them manually when there are no remaining enquiries or activities to handle with that company. This rule covers correspondence; accounting records and information needed for disputes, audits or warranties follow the periods applicable to those circumstances.

Recovery copies and exported files are reviewed separately. When a copy is restored, deletions already validated are reapplied before the data is used. Deletion can be requested by WhatsApp, email or phone. Tudor Șerban reviews each request and informs the data subject of any obligations that prevent immediate deletion.

Since 14 September 2026, new website application and tunnel logs are kept in private files with daily rotation and about 31 days of history. Older logs are in the server’s shared technical journal and do not yet have a separate deletion period for Dayro Distribution. Data processed by Cloudflare follows its own retention terms; the period applied to the company’s own logs does not automatically extend to the provider.

Under the conditions set by the GDPR, the data subject may request access, rectification, erasure, restriction of processing or portability, and may object to processing based on legitimate interest. Requests are sent to the contact details above. A reply is normally given within one month; in complex cases the period may be extended within the limits allowed by law, and the data subject is informed. The data subject has the right to lodge a complaint with ANSPDCP.

The website does not make automated decisions that produce legal effects on the data subject.