Skip to main content Scroll Top

Privacy Policy

BALZIK
Privacy Policy

This Privacy Policy explains how BALZIK S.R.L. collects, uses and protects your personal data when you visit balzikoilshop.com, create an account, place an order, register as a business customer or contact us. It is written to comply with Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”) and Romanian Law no. 190/2018.

1. Who we are

BALZIK S.R.L. is a company registered in Romania, Trade Register no. J20250867840006, tax identification number (CUI) RO52885339, with its registered office at Calea Călărașilor 214, Office 5, Brăila 810274, România. We operate the online shop at balzikoilshop.com and we are the data controller for the personal data described in this policy.

For any question or request about your personal data, write to us at info@balzikoilshop.com.

2. What data we collect

We collect only the data needed to run the shop and to respond to you:

  • Customer account: your name, email address and password, plus the billing and shipping addresses and phone number you save in your account.
  • Orders: your name, billing and shipping address, email address, phone number, the products you order, the payment method you choose and your order history. Our shop software also records the IP address and browser used to place the order.
  • Business (B2B) registration: the name and address of your organisation, contact person details and your VAT number, if you have one. Business accounts are reviewed and approved manually by us.
  • Contact form and email: your name, email address, the subject and the content of your message.
  • Technical data: when you open a page, your browser automatically sends technical information (such as your IP address, browser type and the page requested) that our web server needs in order to deliver the page to you.
  • Cookies: see section 8 and our Cookie Policy.

3. Why we use your data and on what legal basis

  • Processing and delivering your order, managing your account, handling returns and warranty requests — necessary for the performance of our contract with you (Article 6(1)(b) GDPR).
  • Issuing invoices and keeping accounting and tax records — necessary to comply with our legal obligations under Romanian accounting and tax law (Article 6(1)(c) GDPR).
  • Reviewing and approving business (B2B) registrations, including checking the VAT number you provide in the VIES system of the European Commission — steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) and compliance with VAT rules (Article 6(1)(c) GDPR).
  • Answering your messages sent through the contact form or by email — our legitimate interest in responding to enquiries (Article 6(1)(f) GDPR) or, where your message concerns an order, performance of the contract (Article 6(1)(b) GDPR).
  • Keeping the website and the shop secure and preventing fraud and abuse — our legitimate interest (Article 6(1)(f) GDPR).
  • Non-essential cookies — your consent (Article 6(1)(a) GDPR), which you can withdraw at any time as described in our Cookie Policy.

We do not use your data for automated decision-making or profiling.

4. Who we share your data with

We share personal data only with the service providers and authorities needed to run the shop:

  • Payment service provider: when you pay by card, your card details are entered on the payment form and processed by our card payment provider (WooPayments). Card numbers are not stored on our website. We also accept bank transfer and, for deliveries in Romania, cash on delivery.
  • Courier companies: your name, delivery address and phone number are passed to the courier that delivers your order.
  • Invoicing and the tax authority: invoicing data is processed in the Oblio invoicing service (oblio.eu) and transmitted to the Romanian tax authority (ANAF) through the national e-Factura system, as required by Romanian law.
  • Hosting: our website is hosted on servers located in the European Union.
  • VAT number check: for business registrations, the VAT number you provide is checked in the VIES system operated by the European Commission.
  • Google Fonts: the fonts used on our website (Inter and Roboto) are loaded from Google servers (fonts.googleapis.com). When a page loads, your browser requests these files from Google, which means your IP address is transmitted to Google. Google’s privacy policy applies to that processing: policies.google.com/privacy.

We do not sell your personal data and we do not share it with anyone for advertising purposes. Where a provider processes data outside the European Economic Area, the GDPR requires that the transfer is covered by appropriate safeguards (Chapter V of the GDPR).

Analytics and advertising

We do not currently use third-party analytics or advertising trackers on our website. If this changes, we will update this policy and our Cookie Policy and, where the law requires it, ask for your consent first.

5. How long we keep your data

  • Orders and invoices: for the period required by Romanian accounting and tax law.
  • Customer and business accounts: for as long as your account exists. You can ask us to delete your account at any time; order and invoicing records that we must keep by law are retained for the legal period.
  • Contact form messages and emails: for as long as needed to deal with your enquiry and any follow-up.
  • Cookies: for the periods stated in our Cookie Policy.

6. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you;
  • rectification of inaccurate or incomplete data;
  • erasure of your data, except where we are required by law to keep it;
  • restriction of processing in the cases provided by the GDPR;
  • data portability — receive the data you gave us in a structured, commonly used, machine-readable format;
  • object to processing based on our legitimate interests;
  • withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, email us at info@balzikoilshop.com. We may need to confirm your identity before acting on your request. We will reply within one month; if a request is complex, this period may be extended by up to two further months, and we will tell you if that is the case.

If you believe your data is being processed unlawfully, you have the right to lodge a complaint with the Romanian supervisory authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), www.dataprotection.ro. If you live in another EU country, you may also contact the supervisory authority of that country. You also have the right to seek a remedy before the courts.

7. Security

Our website is served over an encrypted connection (HTTPS), and requests over plain HTTP are redirected to HTTPS. Card details are processed by our payment provider and are not stored on our website. We restrict access to personal data to the people who need it for the purposes described in this policy. If a personal data breach occurs, we will notify the supervisory authority and, where the GDPR requires it, the people affected.

8. Cookies

Our website uses cookies. Some are necessary for the shop to work, for example to keep the products in your cart and to keep you logged in to your account. Non-essential cookies are used only with your consent. The list of cookies we use and how to manage your choices are described in our Cookie Policy.

9. Changes to this policy

We may update this policy when our services or the law change. The current version is always published on this page, and the date of the latest update is shown below.

10. Contact

BALZIK S.R.L.
Calea Călărașilor 214, Office 5
Brăila 810274, România
Email: info@balzikoilshop.com

Last updated: 8 September 2026.