Privacy policy
Last updated: 29 September 2026
1. Controller
The controller of your personal data under Regulation (EU) 2016/679 (GDPR) is:
- Company: Elite Soft Store S.R.L. (limited liability company, Romania)
- Registered office: Str. Eugen Ionesco 67, Bl. A, Sc. 1, Et. 6, Ap. 27, 400496 Cluj-Napoca, Cluj, Romania
- Trade Register number: J2024031005001
- VAT ID: RO50700760
- E-mail: support@wow-soft.eu
- Phone: +40792453121 (Monday – Friday, 12:00 – 22:00 EET)
For any question about your data or to exercise your rights, write to support@wow-soft.eu.
2. What data we process, why, and on which legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Taking and delivering orders, customer account, support | name, e-mail, phone (optional), billing address, company and VAT ID (if given), order and licence data, messages | contract, Art. 6(1)(b) |
| Invoices, accounting, VAT (including One-Stop-Shop reports and, where required, the Romanian e-Factura system) | billing data, order amounts, country, VAT ID | legal obligation, Art. 6(1)(c) |
| Payment and fraud prevention | payment data handled by Stripe (we do not see full card numbers), IP address, device data | contract and legitimate interest in preventing fraud, Art. 6(1)(b) and (f) |
| Records of your consents and withdrawal declarations | time of the checkbox confirmation, withdrawal declarations and acknowledgements | legal obligation and legitimate interest in proving compliance, Art. 6(1)(c) and (f) |
| Review invitation after an order and reminder for an unfinished order | name, e-mail, products | legitimate interest, Art. 6(1)(f); you can object at any time with the link in each e-mail |
| Newsletter | consent, Art. 6(1)(a) | |
| Website analytics and advertising measurement (cookies) | pages visited, device and browser data, online identifiers | consent, Art. 6(1)(a) and Art. 5(3) Directive 2002/58/EC; see the cookie policy |
| Website operation and security | IP address, server logs | legitimate interest, Art. 6(1)(f) |
Providing your data is necessary to conclude the contract; without it we cannot process an order. We do not use automated decision-making or profiling with legal effects for you.
3. Recipients
We share data only with service providers that process it on our behalf under a data processing agreement, or where the law requires it:
| Recipient | Purpose | Location and safeguards for transfers |
|---|---|---|
| Stripe Payments Europe Ltd. (Ireland) | payments, fraud prevention and VAT calculation (Stripe Tax) | EU; transfers to Stripe, Inc. (USA): EU-U.S. Data Privacy Framework (where certified) or Standard Contractual Clauses (Art. 46(2)(c) GDPR) |
| Vercel Inc. | website hosting and the licence key delivery system | USA: EU-U.S. Data Privacy Framework (where certified) or Standard Contractual Clauses (Art. 46(2)(c) GDPR) |
| Neon Inc. | order and customer database (also used by the licence key delivery system) | database hosted in the EU (Frankfurt); provider in the USA: EU-U.S. Data Privacy Framework (where certified) or Standard Contractual Clauses (Art. 46(2)(c) GDPR) |
| Zoho Corporation (EU data centre) | sending e-mails: order and delivery e-mails, review invitations, reminders for unfinished orders (abandoned carts), newsletter | EU |
| Oblio Software SRL (Romania) | issuing invoices | EU (Romania) |
| Google Ireland Ltd. | Google Analytics and Google Ads, only with your consent | EU; transfers to Google LLC (USA): EU-U.S. Data Privacy Framework (where certified) or Standard Contractual Clauses (Art. 46(2)(c) GDPR) |
| Meta Platforms Ireland Ltd. | Meta Pixel, only with your consent | EU; transfers to Meta Platforms, Inc. (USA): EU-U.S. Data Privacy Framework (where certified) or Standard Contractual Clauses (Art. 46(2)(c) GDPR) |
| Shoparize | advertising campaigns and conversion measurement (Managed Ads), only with your consent | see the provider's privacy policy |
| Tax authorities (ANAF) and other public authorities | where the law requires it | Romania / EU |
4. Transfers outside the EEA
Some providers (in particular Vercel, Stripe, Google and Meta) may process data in the United States. These transfers rely on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework, where the provider is certified, and otherwise on the Standard Contractual Clauses adopted by the Commission (Art. 46(2)(c) GDPR). You can ask us for a copy of the safeguards.
5. How long we keep data
- Invoices and accounting records: for the period required by Romanian tax and accounting law.
- Order data and consent and withdrawal records: for as long as claims under the contract can be made (general limitation period), then deleted or anonymised.
- Customer account: until you ask us to delete it.
- Newsletter: until you unsubscribe.
- Unfinished-order data: 30 days.
- Analytics and advertising cookies: see the cookie policy.
6. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object (Art. 21), in particular to direct marketing. Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of the processing before the withdrawal. Write to support@wow-soft.eu; we answer within one month.
You also have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State where you live or work. Our lead authority is the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Bucharest, www.dataprotection.ro.
The supervisory authority in your country (Ireland) is: Data Protection Commission, https://www.dataprotection.ie.
7. Security
Data is transmitted over encrypted connections (HTTPS). Access to customer data is limited to the people who need it for their work. Licence keys are stored encrypted.
8. Children
Our offer is aimed at adults. We do not knowingly collect data from children under 16.
9. Changes
We update this policy when our processing changes. The date of the last update is shown at the top.