The information we provide below provides an overview of our approach to the processing of your personal data and your rights under the provisions of data protection legislation.

Operator data

GRIT Consultancy
Address: Bucharest, District 6 Calea Giulesti No418G groud floor
Registered at the Trade Register under . J40/1697/2021, (tax code) RO CUI 43657315
Data protection officer, E-mail: contact@gabrielagheorghe.com
1. Categories of personal data

For the purposes of the Processing mentioned in point II below, we process your personal data provided on our site – hereinafter referred to as „Personal data”, as follows:

  • Name, first name, mobile/landline phone number, e-mail, Company name (optional) (hereinafter referred to as „Personal data”);

The content of the submitted message and its subject sent to GRIT Consultancy (hereinafter referred to as „Communication data”);

  • Information regarding your use of the user account and the Site, such as the date and time you accessed the Website, including the public IP address, public ID Device and similar data about you (hereinafter referred to as „Monitoring data”).

GRIT Consultancy collects Personal data in the following ways: directly from you (provided on the site, e-mail, social networks or other means of communication), from traffic reports recorded by the servers hosting the site, from social networks, as well as through cookies or from third parties who communicate data to us in order to deliver the products to you (e.g. online sales platforms).

2. Purposes of processing

We process your personal data to the extent permitted or imposed by the applicable law for the following purposes:

for the provision of services offered by GRIT Consultancy, including the actions specific to this activity, including to allow the optimal use of the Site and in order to obtain the statistical information for the Improvement of Mega Image services (hereinafter referred to as „Purposes related to the provisions of the services and the operation of the Site”);

for the secure administration of the by GRIT Consultancy information system and in order to avoid criminal activities (hereinafter referred to as „Security and fraud prevention purposes”);

  1. to enable the carrying out of marketing activities (hereinafter referred to as „Purposes related to marketing”);

These activities may include:

    • The use of your personal data to send you news about our products and services, when you purchase a product from the online supermarket or when you set up a user account. You can unsubscribe from these marketing communications at any time, quickly and easily. All you have to do is click on the ˝Unsubscribe˝ link included in each newsletter or use the Favorites Center.


Use of your telephone number by GRIT Consultancy or a proxy, to contact you in order to improve our services or our subcontractors/partners (e.g. in the case of surveys regarding your interaction with the representatives/ GRIT Consultancy proxies)

We will use the personal data, as provided by you to GRIT Consultancy for the purposes mentioned in this policy.

3. The basis for the processing of your personal data

In general, the processing of personal data is necessary in order to carry out the activity specific to the purposes of the processing.

In general, you are required to provide your personal data in a mandatory manner, except in limited situations where we inform you that certain information is optional. If you do not provide us with the data required to be provided, the process may be delayed or even impossible.

In order to process your personal data, GRIT Consultancy relies on various legal grounds, as follows:

1. Consent:

  1. a) We may rely on your consent to use your personal information for certain direct marketing purposes, consent being the legal basis for the collection, processing and use of your personal data, as permitted by applicable law. You can withdraw your consent at any time by contacting us at the addresses at the end of this privacy policy.
  2. Legitimate interests:

We may use the information for our legitimate interests, such as providing the most appropriate content of the website, marketing, to improve and promote our services, as well as the content on our website, and for administrative and fraud detection purposes.

  1. Legal obligations:

The processing of data is necessary for the fulfilment of our legal obligations, such as obligations provided by the accounting and fiscal legislation or requests of the public authorities.


Purposes of processing Categories of personal data involved Basis of processing
Purposes related to the provision of services and the operation of the website Personal data

Communication data

Execution of a contract;

Based on a legal obligation; or

Based on legitimate interest.

Purposes related to marketing Personal data

Data regarding the order
(order history)

Based on consent;

Based on legitimate interest.

4. Data transfers, recipients and the legal basis of these transfers

4.1. Recipients

Third parties: GRIT Consultancy may transfer data to government and regulatory agencies, courts and other governmental authorities, in compliance with the provisions of applicable law, pursuant to Art. 6 (1) (c) GDPR, and to external consultants as data operators (for example, lawyers, accountants, auditors, etc.) pursuant to Art. 6 (1) (f) GDPR.

5. Retention periods

Personal data processed for the purposes mentioned herein will be kept only as necessary, during the existence of your account and subsequently, during a transition period (for example, for receiving a response to your request, for delivery of goods, issuing invoices) or for any other longer period in which GRIT Consultancyhas the legal obligation to archive the personal data.
If a legal action is initiated, the personal data may be kept until the end of this action, including any appeal periods, and then it will be deleted or archived, according to the provisions of applicable law.

In principle, we will keep your personal data for the period required or permitted by applicable law. Subsequently, we will remove/delete your personal data from our systems and records and/or take steps to anonymize it so that you can no longer be identified based on them. In all cases, the personal data in the contracts, communications and other identified documents may be subject to legal retention requirements, which require, in principle, the retention for up to 10 years. Any other personal data will be deleted, in principle, within 6 months from the deletion of your user account or from their collection through the website, except for the related order data which may be kept for up to 3 years from the date of the transaction or, as the case may be, for a period necessary for the fulfilment of legal obligation (including if we are obliged to do so by a court decision) or if necessary for security reasons, fraud prevention, litigation or abuse.

6. Security procedures

In compliance with European data protection legislation, we use reasonable procedures to prevent the unauthorized access and the misuse of personal data.

We use appropriate systems and procedures to protect and secure the personal data you transmit to us. We also use security procedures and technical and physical restrictions on accessing and using personal data on our servers. Only authorized personnel can access personal data while working.
7. Your rights

If you have given your consent to certain processing activities, you may withdraw this consent at any time with future effects. Such withdrawal shall not affect the lawfulness of the processing prior to the withdrawal of consent.

Based on the conditions provided by the applicable legislation (GDPR), you have the following rights:

  1. The access right: You have the right to be notified, upon request, if your personal data are processed, and if so, you have the right to request access to it. The information includes, among other, the purposes of the processing, the categories of personal data affected and the recipients or categories of recipients to whom your personal data has been or will be disclosed.

You have the right to obtain a copy of the processed personal data. For additional copies, we may charge a reasonable fee based on administrative costs.

  1. Right to rectification: You have the right to obtain from us the rectification of your incorrect personal data. Depending on the purposes of the Processing, you have the right to complete incomplete personal data, including through an additional statement.
  2. The right to delete („the right to be forgotten”): You have the right to ask us to delete your personal data, by sending an email to contact@gabrielagheorghe.com
  3. The right to restriction: You have the right to request the restriction of the processing of your personal data. In this case, the respective data will be marked and can be processed by us only for certain purposes.
  4. The right to data portability: You have the right to receive your personal data that you have provided to us, in a structured, common format that can be read by devices and you have the right to transmit this data to another entity without objections from us.
  5. The right to object:

You have the right to object, for reasons related to your situation, at any time, to the processing of your personal data by us, and we may be asked not to process your personal data. If you have the right to object and exercise it, we will no longer process your personal data for that purpose. There is no cost for exercising this right. This right may be invalidated in particular if the processing of your personal data is necessary for the formalities related to the conclusion of a contract or for the fulfilment of a contract already concluded.

The rights mentioned above will be exercised by formulating a written request at the email address contact@gabrielagheorghe.com  In the application, you can indicate if you want the information to be communicated to a certain address, which can also be by e-mail, or through a correspondence service that ensures that the delivery will be made only to you personally. Please note that before accepting any such request, we reserve the right to verify your identity to ensure that the request comes from you.

GRIT Consultancy will communicate the requested information, within 30 days from the date of receiving the request, in compliance with the request expressed by you regarding the communication method.

Please note that the above rights may be limited under applicable national data protection legislation. Mega Image, as a data operator, remains the central point of contact in order to exercise these rights.

You also have the right to file a complaint with the National Authority for the Supervision of Personal Data Processing.

8. How do we process children’s personal data?
The services offered by the website www.gabrielagheorghe.com are not intended for minors.
9. Cookies

This section on Cookies applies to all users of this website. By the term „cookies” we mean cookies and similar technologies through which information can be collected automatically.

Cookies are used to provide you with a better browsing experience and services tailored to the needs of customers: improving browsing, including by identifying any errors that occur during its visit/use by users; anonymous statistics on how the website is used; the anticipation of possible services/goods that will be provided/made available to users in the future.

Cookies send us information about how this website is used, so that there is a possibility to improve the efficiency and accessibility of the website for users.

Types of cookies and their purpose:

Cookies for registration

When you register on this site, cookies are generated that store the registration.

Performance cookies:

By this type of cookies it is stored the user’s preferences for this website, so that setting the preferences again in the event of a subsequent visit to the website is no longer necessary.

User analysis cookies

These cookies inform us if a certain user of the website has visited/used this website before. These cookies are used only for statistical purposes.

Geotargetting cookies

These cookies are used by a software that determines the country of origin of the user of the website. The same ads will be received regardless of the language selected.

Advertising cookies

These cookies allow us to find out if you have viewed an online advertisement, its type and the time elapsed since the moment of viewing. These cookies are anonymous, they do not store data about users.

In addition to the cookies set by GRIT Consultancy, necessary for the proper functioning of the website, we use cookies set through third parties. The third party cookie providers must also comply with the data protection rules and privacy policy available on this website.


No Name (key) Use and purpose Validity period

The complete list of third party cookies is in the following table:

Disabling and refusing to receive cookies can make this website difficult to visit, leading to limitations in its use.

The users can configure their browser to reject the cookies or to accept cookies from a specific website.

All modern browsers offer the ability to change cookie settings. These settings can be accessed, as a rule, in the „options” section or in the „preferences” menu of your browser.

You can also disable cookies (except those strictly necessary for the operation of this website) as follows:



Internet Explorer


10. Final provisions

Please address any questions to GRIT Consultancy at the email contact@gabrielagheorghe.com