Privacy Notice (GDPR)

1. Data Controller Identity

This Privacy Notice applies to all personal data collected and processed by LaEi across our regional portals (laei.net, laei.ro, laei.md, laei.uk).

For inquiries regarding data protection or to exercise your statutory rights, please contact our Data Protection Office at privacy@laei.net.

2. Categories of Personal Data Collected

• Account Information: Full name, email address, password hash, registration timestamp.
• Billing & Delivery Data: Shipping address, billing address, telephone number, company tax identification numbers (CIF/CUI/VAT).
• Transaction & Order History: Items ordered, payment transaction references (we do not store raw credit card numbers; payment data is processed by authorized PCI-DSS compliant PSPs), invoice records.
• Technical & Telemetry Data: IP address, browser type, device information, session identifiers, and security log events.

3. Legal Bases for Processing

We process your personal data strictly under valid legal bases set out in Article 6 of the GDPR:

• Performance of Contract (Art. 6(1)(b)): To process orders, deliver merchandise, maintain customer accounts, and provide customer support.
• Legal Obligation (Art. 6(1)(c)): To comply with mandatory European accounting, fiscal invoice retention (e-Factura in Romania, statutory accounting in the EU and UK), and fraud prevention regulations.
• Legitimate Interests (Art. 6(1)(f)): To maintain platform security, prevent abuse, improve software performance, and ensure server stability.

4. Your Statutory Data Subject Rights

Under Chapter III of the GDPR, you have the following enforceable rights:

5. Cookies & Storage

LaEi uses strictly necessary session and security cookies (CSRF verification, session continuity, cart preservation). We do not deploy invasive third-party cross-site behavioral tracking scripts without explicit user consent.