Legal document

Privacy policy

Last updated: 19 July 2026 · Compliant with Regulation (EU) 2016/679 (GDPR)

This is a translation provided for convenience. In the event of any discrepancy, the Romanian version of this document prevails.

1. Who processes your data

We have not appointed a data protection officer (DPO), as this is not mandatory for our activity. For any request concerning your data, write to the address above.

2. What data we collect and why

a) When you visit the site

The site is presentational and has no registration, account or order forms. We do not ask you for your name, address or payment details.

We do, however, collect the following through cookies and similar technologies:

• Strictly necessary technical data — IP address (truncated), device and browser type, age confirmation. Legal basis: our legitimate interest in delivering a working site and in complying with the legal obligation regarding access by minors (Article 6(1)(f) and (c) GDPR).
• Traffic analytics data (Google Analytics 4) — pages visited, visit duration, the source you arrived from. Legal basis: your consent (Article 6(1)(a) GDPR), given through the banner.
• Marketing data (Meta Pixel, Google Ads) — interaction with our ads, clicks on the WhatsApp and directions buttons. Legal basis: your consent.

Analytics and marketing data are not collected at all until you press “Accept all” in the cookie banner. If you decline, those scripts are not loaded.

b) When you message us on WhatsApp

We process your phone number, profile name and the content of your messages, in order to reply to you and, where applicable, prepare a quote for you. Legal basis: steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR).

Please note: WhatsApp is a service operated by Meta Platforms Ireland Ltd., with its own privacy policy, over which we have no control.

c) When you buy in the shop

A sale with a till receipt does not involve collecting personal data. If you request an invoice, whether for a company or an individual, we process the billing data on the basis of our legal tax obligation (Article 6(1)(c) GDPR).

3. Who we share data with

We do not sell or rent anyone's data. The following providers may access it, either as processors or as independent controllers:

Transfers to the USA are carried out under the EU–US Data Privacy Framework and the standard contractual clauses approved by the European Commission.

4. How long we keep data

• Analytics and marketing data: 14 months at most, according to Google and Meta settings.
• Age confirmation: 30 days, stored locally in your browser.
• WhatsApp conversations: up to 12 months from the last interaction.
• Accounting documents: 10 years, as required by tax law.

5. Your rights

Under the GDPR, you have the right to:

• access — to find out what data we hold about you;
• rectification — to correct inaccurate data;
• erasure (“the right to be forgotten”);
• restriction of processing;
• portability — to receive your data in a structured format;
• objection to processing based on legitimate interest;
• withdrawal of consent at any time, without affecting the lawfulness of processing carried out beforehand.

You exercise these rights by writing to contact@4drinks.ro. We reply within 30 days at the latest.

6. Security

The site is served over an encrypted HTTPS connection. We apply reasonable technical and organisational measures to protect data, but no system is absolutely secure.

7. Minors

The site is not directed at persons under 18 and we do not knowingly collect data from minors. If you become aware that a minor has sent us personal data, let us know and we will delete it.

8. Changes

We may update this policy. Changes take effect when published on the site, with the update date shown at the top.