GDPR & Data Protection
Privacy Policy
We explain what data we collect, why we collect it and how we protect it, in line with EU Regulation 679/2016 (GDPR).
1. Data Controller
Munte Athos Export Import SRL, with its registered office at Drumul Gura Siriului 45-49, Building A, Floor 2, Apt. 18, Bucharest, Romania, 032596 (tax identification number 32682127, Trade Register no. J2014000563409), is the controller of personal data collected through this website. You can contact us at contact@munte-athos.ro or +40 726 632 718.
2. What Data We Collect
We collect the data you voluntarily provide through the contact form (first and last name, email address, phone number (optional), company name (optional), subject and message content) and through the "Become a distributor" form (company name and tax ID; name, role, email and phone of the contact person; county, business type, estimated volume, categories of interest and message). Only if you accept optional cookies, we also collect data about website usage and interaction with our ads (pages visited, visit source, cookie identifiers, IP address and browser type). We do not collect sensitive data such as racial origin, health data or political opinions.
3. Purpose and Legal Basis of Processing
The collected data is processed only to answer your information requests and manage commercial relationships. The legal bases are your consent and the company legitimate interest under GDPR. Traffic statistics and measuring the effectiveness of our advertising campaigns (Google Ads, Facebook / Instagram), including showing ads to people who have visited the website, are based on your consent given through the cookie banner (Art. 6(1)(a) GDPR), which you can withdraw at any time. We will not use your data for other purposes without prior notice and consent.
4. Data Retention Period
Contact form data is stored for the time needed to resolve the request, plus a maximum of 12 months afterwards if no active commercial relationship exists. Data related to commercial relationships is retained according to Romanian accounting and tax obligations.
5. Data Recipients
Your data is not sold or shared with third parties for commercial purposes. It may be accessed by company employees responsible for customer relationships, email service providers and IT service providers under GDPR-compliant processing agreements; and, only if you accepted optional cookies, Google Ireland Ltd. (Google Analytics, Google Ads) and Meta Platforms Ireland Ltd. (Meta Pixel, Conversions API; email address and phone number are sent only in irreversibly encrypted form, SHA-256 hash). These providers may transfer data to their parent companies in the USA, based on the EU-US Data Privacy Framework and the standard contractual clauses approved by the European Commission.
6. Your Rights
Under GDPR, you have the right of access, rectification, erasure, restriction of processing, data portability and objection. To exercise these rights, contact us at contact@munte-athos.ro.
7. Data Security
We implement appropriate technical and organizational measures to protect your data: HTTPS secure connection, restricted access to personal data and GDPR-compliant contracts with service providers.
8. Cookies
The website uses strictly necessary cookies and, only with your consent, analytics cookies (Google Analytics) and marketing cookies (Google Ads, Meta Pixel). For the full list, their duration and how to withdraw your consent, please consult our Cookie Policy.
9. Supervisory Authority
If you believe your rights have been violated, you have the right to file a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), headquartered in Bucharest, or through www.dataprotection.ro.
10. Policy Updates
We reserve the right to update this policy to reflect legal or operational changes. We recommend reviewing this page periodically.
Last updated: September 2026