Privacy Policy
Privacy policy and information on data processing
Last Updated: April 18, 2026
This Privacy Policy describes how we process and protect your personal data.
1. Controller
SC Euro Clothing SRL
Str. Primăverii 55
507190 Sat. Sânpetru, Brașov
Romania
E-mail: support@softwarebay.de
Phone: +40 741 933 764
2. Data Protection Contact
Data protection enquiries can be addressed to the following contact:
SC Euro Clothing SRL
E-mail: dsb@softwarebay.de
3. General Information on Data Processing
We process personal data exclusively in accordance with applicable data protection law, in particular the GDPR.
4. Access Data and Server Log Files
When you visit our website, technically required data is processed, including IP address, date and time of access, content accessed, referrer URL, browser type and operating system.
Processing is based on our legitimate interest in ensuring the stability, security and functionality of the website pursuant to Art. 6(1)(f) GDPR.
Server log files are generally deleted after 7 to 14 days, unless a longer retention period is required to investigate specific security incidents.
5. Orders and Contract Processing
When processing orders we collect in particular: name, billing data, e-mail address, order data, payment information and, where applicable, data relating to the customer account or guest portal.
Processing is based on Art. 6(1)(b) GDPR for contract performance, provision of digital products, invoicing, complaints handling and customer support.
Data subject to commercial and tax law retention obligations is generally stored for 10 years.
6. Customer Account and Guest Portal
If you create a customer account or use the guest portal, we process the necessary data to provide these functions pursuant to Art. 6(1)(b) GDPR.
Account data is generally stored until the customer account is deleted, unless statutory retention obligations apply.
7. Contact
When you contact us by e-mail or form, we process your data to handle your enquiry and possible follow-up questions.
The legal basis is Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.
Contact enquiries are generally deleted after up to 3 years, unless a longer retention period is required for contract processing or legal defence.
8. Payment Service Providers
For payment processing, we pass the required data to the payment service provider selected during the ordering process.
- Stripe Payments Europe Ltd. for credit card payments via Stripe,
- Banks and payment service providers for bank transfers.
The legal basis is Art. 6(1)(b) GDPR.
9. Hosting and Technical Service Providers
For the hosting, technical provision, maintenance and security of our website, we use processors and technical service providers, particularly in the areas of hosting, e-mail dispatch, shop system, payment processing and IT security.
Hosting providers: netcup GmbH (Karlsruhe, Germany) and UltaHost Inc. (USA; third-country transfer on the basis of EU Standard Contractual Clauses pursuant to Art. 46 GDPR).
10. No Physical Shipping
As we generally sell digital products, delivery addresses are not routinely passed to shipping service providers for physical goods delivery.
11. Cookies and Consent Management
Our website uses technically necessary cookies that are required for the operation of the website, shopping cart, login, customer account or ordering process.
Beyond these, we only use optional cookies or comparable technologies where you have consented.
The legal basis for necessary cookies is Art. 6(1)(f) GDPR; for optional cookies, Art. 6(1)(a) GDPR.
12. Live Chat / Support Chat
Our website operates a self-developed live chat service that allows visitors to contact our support team directly. No external chat provider is used; processing takes place exclusively on our own servers.
Personal data processed via the chat may include name, e-mail address, IP address and the content of the chat communication.
The legal basis is Art. 6(1)(b) GDPR (initiation/performance of a contract) or Art. 6(1)(f) GDPR (legitimate interest in customer support).
Chat logs are deleted after the matter concerned has been resolved, unless a statutory retention obligation applies.
13. Analytics and Tracking Services
We currently do not use any third-party analytics or tracking services on this website.
Should this change in future, we will update this Privacy Policy accordingly and – where required by law – obtain your consent.
14. Third-Country Transfers
Where personal data is transferred to countries outside the EU or EEA, this takes place only in compliance with the applicable legal requirements.
Appropriate safeguards may include an adequacy decision by the European Commission or the EU Standard Contractual Clauses.
15. Your Rights
You are entitled in particular to the following rights:
- Right of access,
- Right to rectification,
- Right to erasure,
- Right to restriction of processing,
- Right to data portability,
- Right to object,
- Right to withdraw consent with effect for the future,
- Right to lodge a complaint with a supervisory authority.
16. Automated GDPR Data Access
You can request a copy of your personal data stored with us at any time via our GDPR data access function. Simply enter your e-mail address and postcode – we will provide you with a complete data report as a PDF.
Request my data (GDPR Art. 15)
17. Supervisory Authority
The competent supervisory authority for the controller established in Romania is in principle:
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
B-dul G-ral. Gheorghe Magheru 28-30
Sector 1, 010336 Bucharest
Romania
Notwithstanding the above, pursuant to Art. 77 GDPR you may also lodge a complaint with another competent supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement.
18. Obligation to Provide Data
The provision of certain personal data is required for the conclusion and performance of the contract. Without these data, an order or contract processing may not be possible.
19. Updates to this Privacy Policy
We reserve the right to update this Privacy Policy if required due to changes in the legal situation, technical changes or new services.