Privacy Policy

This Privacy Policy ("Policy") describes how FOOD VISION ("the Controller", "we"), as a data controller, processes personal data collected through the www.dozz.eu website and associated channels. This Policy applies to all visitors, customers, and potential customers of www.dozz.eu and is supplemented by the Cookie Policy.

Controller: FOOD VISION Llc., identified with CUI 44239370, Trade Register no: J2021002881233, headquarter: Ilfov County, Voluntari, 2/III BIS Pipera Blvd., NG2 Building, 3^rd floor

Data Protection Contact Email: dpo@foodvision.ro

This notice is provided in accordance with Article 13 of Regulation (EU) 2016/679 (GDPR).

CATEGORIES OF PERSONAL DATA PROCESSED AND THEIR SOURCE

1. Data provided directly by you:
• Identification and contact: name, surname, email address, phone number;
• Delivery/billing: address, order information, returns.
2. Data collected automatically (when using the website):
• Online identifiers: IP address, cookie identifiers/similar technologies, browsing data (visited pages, session duration), device info (OS, browser). Under certain conditions, online identifiers are considered personal data by GDPR.
3. Data received from third parties (if you opted for integration/SSO/partners):
• Data from social accounts used for login (e.g., Facebook, Google), based on your choices;
• Data from business partners (e.g., for order processing/delivery/payment).

HOW DATA IS COLLECTED

Personal data is collected through the following communication channels:

• Contact forms on the www.dozz.eu website
• Checkout form on the www.dozz.eu website
• Email address: dpo@foodvision.ro

LEGAL GROUNDS FOR PROCESSING PERSONAL DATA

• Contract management: account creation, order processing/confirmation, delivery, returns, invoicing, after-sales services.
  Legal basis: Contract performance or pre-contractual steps (Art. 6(1)(b) GDPR)
• Operational communications (order/return confirmations, notifications).
  Legal basis: Art. 6(1)(b) GDPR
• Customer support and correspondence (via forms/email/phone).
  Legal basis: Art. 6(1)(b) or Art. 6(1)(f) GDPR (legitimate interest)
• Legal compliance and tax accounting.
  Legal basis: Art. 6(1)(c) GDPR
• Cybersecurity, fraud prevention, and service protection.
  Legal basis: Art. 6(1)(f) GDPR (legitimate interest)
• Statistical analysis and experience improvement (analytical cookies) – only with consent via cookie banner.
  Legal basis: Art. 6(1)(a) GDPR
• Direct marketing (newsletters, offers, personalized ads) – only with consent; you may withdraw consent at any time.
  Legal basis: Art. 6(1)(a) GDPR

Consent is freely given, specific, informed, and expressed through a clear affirmative action; it can be withdrawn at any time without affecting the lawfulness of prior processing.

Non-essential cookies (analytics/marketing) are installed only after valid consent.

RECIPIENTS AND CATEGORIES OF RECIPIENTS

• Payment service providers (online payment processors)
• Couriers and logistics providers (delivery/returns)
• IT providers (hosting, development, maintenance, security)
• Analytics/marketing partners – only with your consent (e.g., analytics/advertising tools)
• Public authorities/courts, as required by law

All processors act under GDPR-compliant contracts (Art. 28) and are bound by confidentiality obligations.

TRANSFERS OUTSIDE THE EEA

If certain services involve data transfers to third countries, we will use appropriate safeguards (e.g., Standard Contractual Clauses) and specify providers and mechanisms in the technical note/vendor annex and/or Cookie Policy. Details available upon request at dpo@foodvision.ro.

DATA RETENTION PERIODS

We retain data as long as necessary for the declared purposes:

• Contractual/billing data: according to legal archiving terms;
• Customer account data: while the account is active and afterward, as required by legal obligations or legitimate interests (e.g., legal defense), within reasonable limits;
• Marketing: until consent is withdrawn or the right to object is exercised;
• Cookie consent logs: reasonable durations (e.g., 6–24 months) for compliance.

Specific durations are available in the processing register/technical note upon request.

MANDATORY NATURE OF DATA PROVISION

Providing data necessary for contract execution (e.g., name, address, contact, delivery) is mandatory for placing and delivering orders; refusal may prevent service provision. Marketing/analytics data is optional (based on consent).

USER RIGHTS

You have the following rights regarding your personal data:

• Right to information and access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (“right to be forgotten”) (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR), including to direct marketing
• Right not to be subject to automated decision-making, including profiling
• Right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP)
• Right to seek judicial remedy if your rights are violated

You can exercise these rights by emailing dpo@foodvision.ro.

AUTOMATED DECISIONS AND PROFILING

We do not make decisions with legal effects solely through automated processing. If profiling is used (e.g., for personalized marketing), it will be based on your consent and accompanied by specific information about the logic, significance, and expected consequences, in line with GDPR.

SECURITY AND CONFIDENTIALITY

We have implemented appropriate technical and organizational measures to ensure data confidentiality, integrity, and availability (e.g., pseudonymization where applicable, access control, encryption in transit, retention policies, staff training). In case of a data breach, we notify the authority and/or affected individuals as required under Articles 33–34 GDPR.

MINORS

Our services are not intentionally directed at individuals under the applicable minimum age. If we learn that we have collected data from minors without proper legal basis, we will take steps to delete it. Where services target children, parental consent requirements will apply as per GDPR.

DEVICE DATA

We automatically collect data about your visit to our website. This may include:

• Device type (smartphone, tablet, laptop)
• Location
• IP address
• Hardware type
• Time and date of website use
• Screen resolution
• Operating system and browser

These data are collected automatically by Google and used to optimize website display across devices. The data are anonymous and cannot identify you personally.

COOKIES AND SIMILAR TECHNOLOGIES

The use of cookies is governed by the Cookie Policy, which details types, purposes, and your consent options. Non-essential cookies are installed only after valid consent.

We may update this Policy periodically to reflect legal or operational changes. The current version is available on www.dozz.eu, along with the date of the last update. Significant changes will be communicated appropriately.

Last updated: 01.09.2025