Privacy Policy

Last updated: August 20, 2026

1. Introduction

We respect the privacy of your personal data and are committed to protecting it in accordance with Regulation (EU) 2016/679 (“GDPR”) and applicable Romanian law. This policy explains what data we collect through the website openperpetualpathbook.com, why, how we use it, who we share it with, and what your rights are.

2. Data Controller

STANCIU GH. MARIUS-RADIAN PERSOANA FIZICA AUTORIZATA (Sole Trader) Sector 1, B-dul Bucureștii Noi, No. 136, Ground Floor, Apartment 5, 012366, Bucharest, Romania Email: contact@openperpetualpathbook.com

3. What Data We Collect

Identification/contact data: name, email, billing address (if requested at checkout);
Order data: the product purchased, date, amount paid, payment method (we do not store full card details — these are processed directly by the payment processors Netopia Payments and Stripe);
Minimal technical data: IP address, browser/device type — automatically collected by the server for security and proper functioning of the website. We do not currently use analytics or marketing/tracking cookies. The website loads fonts via Google Fonts, directly from Google’s servers, which means your IP address is transmitted to Google when a page is displayed;
Data from forms/support: whatever you voluntarily send us through the contact form or by email.

We do not collect sensitive data (health, religion, political opinions, etc.).

4. Purposes and Legal Bases for Processing

Order processing and electronic delivery of the product — performance of the contract (Art. 6(1)(b) GDPR);
Invoicing and accounting/tax obligations — legal obligation (Art. 6(1)(c), together with Accounting Law no. 82/1991);
Communication about your order and support by email — performance of the contract / legitimate interest (Art. 6(1)(b) and (f));
Fraud prevention and payment security — legitimate interest (Art. 6(1)(f)), ensured through the payment processors’ own mechanisms (Netopia Payments and Stripe);
Proper display of the website (including Google Fonts) — legitimate interest (Art. 6(1)(f));
Newsletter/marketing, if you subscribe — consent (Art. 6(1)(a)), which can be withdrawn at any time;
Cookies strictly necessary for the website’s operation (e.g. shopping cart, account session) — as described in the Cookie Policy. We do not currently use analytics or marketing cookies.

5. Who We Share Data With

We do not sell your data. We may share it with:

website hosting and technical maintenance providers (WordPress/WooCommerce);
the online payment processors Netopia Payments and Stripe, for secure payment processing;
Google (Google Fonts), for the correct display of the website;
our accountant/accounting service provider, for tax obligations;
public authorities, when required by law.

Some of these providers may be located outside Romania, including in third countries (e.g. the United States, in the case of Google or, where applicable, Stripe); in such cases we ensure appropriate safeguards (e.g. Standard Contractual Clauses approved by the European Commission).

6. Retention Period

Invoices/accounting documents: 10 years, as required by law;
Account data: for as long as your account is active, until you request deletion;
Consent-based data (newsletter): until consent is withdrawn;
Technical/cookie data: as described in the durations set out in the Cookie Policy.

7. Your Rights

Access, rectification, erasure (“right to be forgotten”, within the limits of legal retention obligations), restriction of processing, data portability, objection to processing, withdrawal of consent at any time, and the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP, www.dataprotection.ro) or with the competent court.

To exercise your rights: contact@openperpetualpathbook.com. We respond within 30 days at the latest.

8. Data Security

We use reasonable technical and organizational measures: secure hosting, encrypted connection (HTTPS), restricted access to personal data.

9. Minors

This website is not directed at minors under 16. If you become aware that a minor has provided us with data without a parent’s/guardian’s consent, please contact us so we can delete it.

10. Cookies

Fully detailed in the website’s Cookie Policy.

11. Changes

This policy may be updated periodically; any change will be published here, along with the update date.