Privacy Policy

Last updated: 15 October 2026

This policy explains how BY COTTAGE S.R.L. ("we"), which operates the Coopmade brand, processes personal data on coopmade.com and in our apps, in line with the EU General Data Protection Regulation (GDPR).

Data controller

BY COTTAGE S.R.L., CUI 36929964, Str. Marginii nr. 2, Sc. Corp 7, Et. 9, Ap. 35, Timișoara, Timiș, Romania. Contact:

What data we process

  • Website: our hosting provider records technical data (IP address, browser type, date and time of the request) in server logs, for security and to keep the site running. We do not use analytics or advertising tools.
  • Email: when you write to us, we process your email address and the content of your message to reply.
  • Apps: each app collects only the data needed for its features. The data types are listed on the app's App Store page under "App Privacy". If an app needs additional data, it will tell you inside the app before collecting it.

Why and on what legal basis

  • To answer your messages and provide support: our legitimate interest (Art. 6(1)(f) GDPR) or steps before a contract (Art. 6(1)(b)).
  • To provide app features you request: performance of a contract (Art. 6(1)(b)).
  • To keep the website and apps secure: our legitimate interest (Art. 6(1)(f)).
  • To meet legal obligations, such as accounting: Art. 6(1)(c).

Cookies

coopmade.com does not set cookies and does not use tracking, analytics or marketing tools. If this changes, we will update this policy and ask for your consent where required.

Sharing

We do not sell personal data. We share it only with providers that help us run our services (hosting, email), under data processing agreements, or with authorities when required by law. If data is transferred outside the European Economic Area, we rely on adequacy decisions or the European Commission's Standard Contractual Clauses.

Retention

Email correspondence is kept for up to 3 years after the last contact. Server logs are kept for up to 90 days. Accounting records are kept for the period required by Romanian law. App data is deleted when you delete your account or ask us to delete it.

Your rights

You have the right to access, rectify, erase, restrict or object to the processing of your data, the right to data portability, and the right to withdraw consent at any time. To exercise them, contact us at the email address above. We reply within one month.

You can also file a complaint with the Romanian data protection authority, ANSPDCP (dataprotection.ro).

Children

Our services are not directed at children under 16, and we do not knowingly collect their data.

Changes

We may update this policy. The date at the top shows the latest version.