Privacy policy

Last updated: 19 October 2026 · English translation; in case of any discrepancy, the Romanian version prevails.

1. Controller

ROSTO SRL, VAT number RO5801425, 166 Știrbei Vodă St., 010121 Bucharest, Romania, is the controller of the personal data processed through rosto.ro and its services. Data protection contact: office@rosto.ro.

2. What data we process and why

• Contact and billing details of clients and their contact persons (name, email, phone, address, billing details) — to conclude and perform contracts and for invoicing (legal basis: the contract and legal obligations).
• Payment data (amount, currency, invoice number, transaction result, last digits of the card, as reported by the processor) — to keep records of payments received. Full card details are processed exclusively by euPlătesc.ro.
• Messages sent by email or phone — to answer requests (legal basis: legitimate interest).

3. Who we share data with

Providers that help us deliver our services: the payment processor (euPlătesc.ro), the e-invoicing provider, hosting and email providers, and public authorities where required by law. We do not sell personal data.

4. How long we keep data

Financial and accounting documents are kept for the period required by accounting law; other data for the duration of the contractual relationship and afterwards for as long as necessary to defend our rights.

5. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, as well as the right to lodge a complaint with the Romanian data protection authority, ANSPDCP. To exercise them, write to us at office@rosto.ro.

6. Cookies

The rosto.ro website does not use marketing or analytics cookies.