Privacy Policy
Last updated: 23 October 2026
This policy explains what personal data West Packaging Distribution SRL collects through the wepadi.com website, why we use it, how long we keep it and what rights you have. It applies to contact persons of companies that write to us or ask us for a quote.
1. Data controller
- West Packaging Distribution SRL
- VAT number (CUI): RO28063335 · EUID: ROONRC.J2011000370356
- Registered office: Calea Aradului 48A, 300290 Timișoara, Romania
- Data protection email: gdpr@wepadi.com
- Phone: +40 732 274 247
2. What data we collect
Data you send us directly, through the quote request form, email, phone or WhatsApp:
- the name of the contact person and the company you represent;
- phone number and email address;
- the details of your request: product, quantity, dimensions, message;
- attached files (photos, technical drawings);
- your choice to receive the newsletter, if you tick it.
Data collected automatically, through cookies and similar technologies: IP address, browser and device type, pages visited. Statistics and marketing cookies are used only with your consent. Details in our Cookie Policy.
Data from public sources, to verify companies: the Trade Register and other public registers.
We do not collect sensitive data (for example about health, religion or political opinions), nor do we collect payment data through the website.
3. Why we use the data and on what legal basis
| Purpose | Data used | Legal basis |
|---|---|---|
| Responding to your quote request and preparing the quote | Identification, contact details, request details, files | Steps taken prior to entering into a contract; legitimate interest |
| Fulfilling orders and managing the business relationship | Identification, contact details, order data | Performance of a contract |
| Tax and accounting obligations | Billing and order data | Legal obligation |
| Sending the newsletter | Name, email | Consent (form tick box) |
| Website usage statistics | Technical and usage data | Consent (statistics cookies) |
| Measuring Google Ads advertising | Technical data, conversions | Consent (marketing cookies) |
| Website security and spam prevention | IP address, technical data | Legitimate interest |
4. Newsletter
We send the newsletter only if you have ticked the option in the form. You can unsubscribe at any time using the link in each email or by writing to us at gdpr@wepadi.com.
5. Who we share the data with
We do not sell or rent personal data. The following recipients may receive it, only to the extent necessary:
- web hosting, email and IT service providers;
- Google (Google Analytics and Google Ads), only with your consent to cookies;
- courier and transport companies, to deliver orders;
- our advisers (accountant, lawyer, auditor);
- public authorities, where the law requires us to.
All these recipients process the data only in accordance with our instructions and with appropriate security measures.
6. Transfers outside the European Union
Some Google services may transfer data to the United States. These transfers are made on the basis of the EU-U.S. Data Privacy Framework or the standard contractual clauses approved by the European Commission.
7. How long we keep the data
- Quote requests that do not become orders: 1 year from the last communication, after which we delete them.
- Order and billing data: for the period required by tax and accounting legislation.
- Newsletter subscription: until you unsubscribe.
- Cookie data: for the duration stated in the Cookie Policy.
8. Security
We apply technical and organisational measures to protect the data against loss, unauthorised access or disclosure. Only employees and collaborators who need the data, and who are bound by confidentiality, have access to it.
9. Your rights
Under Regulation (EU) 2016/679 (GDPR), as a data subject you have the right:
- of access to your data;
- to rectification of inaccurate data;
- to erasure of your data;
- to restriction of processing;
- to data portability;
- to object to processing;
- to withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
To exercise your rights, write to us at gdpr@wepadi.com. We respond within one month at the latest. We may ask for additional information to confirm your identity.
10. Complaints
If you have a concern, please contact us first. You also have the right to lodge a complaint with the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), the Romanian Data Protection Authority, B-dul Gral. Gheorghe Magheru 28-30, Sector 1, Bucharest, www.dataprotection.ro.
11. Changes
We may update this policy. The version in force is the one published on this page, with the date of the last update.