Privacy policy

Privacy Policy and Personal Data Protection (GDPR)

Fresh Bites, Happy Vibes! - this motto reflects both our passion for preparing and serving our products, as well as the responsibility with which we handle the confidentiality of our customers, partner and suppliers data.

In accordance with Regulation (EU) 2016/679 and the national legislation in force, we inform you that the data made available to ROLL MASTER will be processed in compliance with the legal provisions regarding personal data protection and the confidentiality principles that govern our company's activity.

1. Types of personal data collected

The data collected may include:

- Personal information (first and last name)

- Contact information (phone number, delivery address, billing address)

- User identification and authentication data (email address, password)

2. Purpose of personal data processing

The data is collected and processed for the following purposes:

- Creating a user account on the sushimaster.ro website

- Delivery of ordered products

- Granting bonus points to customers

- Sending offers and promotions (only with your consent)

- Contacting for customer satisfaction evaluation (only with your consent)

3. Rights of data subjects

In accordance with the legislation in force, you have the following rights:

- Right to access personal data;

- Right to request the update, correction, or deletion of data;

- Right to restrict or object to the processing of data for the mentioned purposes;

- Right to data portability;

- Right to be informed about a security incident that may affect you;

- Right to file a complaint with the National Authority for the Supervision of Personal Data Processing.

To exercise the above-mentioned rights, you can contact us at: dpo@sushimaster.ro

4. Data provision and consequences of refusal

Providing personal data is voluntary. However, refusing to provide such data or providing incomplete/inaccurate data may result in the inability to create an account and/or deliver the products.

5. Categories of data recipients

Personal data may be disclosed to contractual partners such as: BoogIT, Syrve, WooCommerce, for the purpose of fulfilling orders, issuing invoices, or managing customer bonus points.

6. Data storage

Data will be stored as long as your account is active. Once the account is deleted, all personal data will be removed from our database.

If no order is placed using the user account for a period of 6 months, the account and related data will be automatically deleted.

7. Data security

The confidentiality, integrity, and availability of information are our priorities. We commit to processing data in compliance with GDPR provisions, ensuring:

- Data confidentiality: access only for authorized persons, access control, data encryption, staff training;

- Data integrity: control over modifications and maintenance of internal/external consistency;

- Data availability: through IT backup solutions, avoiding service interruptions.