Privacy Policy
PRIVACY POLICY
Last updated: 02 September 2026
This Privacy Policy explains how HDDHEROES S.R.L. ("HDD Heroes", "we", "us") processes your personal data when you visit www.hddheroes.com, create an account, place an order, enter a giveaway, or otherwise interact with our website.
Data Controller:
HDDHEROES S.R.L.
Strada Unirii nr. 37
Băicoi, Prahova, Romania
CUI: 55168207
VAT No.: RO55168207
Trade Registry No.: J2026043632002
Email: info@hddheroes.com or info@hddheroes.com
1. Categories of Personal Data We Collect
HDD Heroes may process the following categories of data provided directly by you, for example in the following situations:
Creating an HDD Heroes account: your email address, first name and last name;
On your account page, you can add additional information such as your phone number, shipping address, etc.;
When you use the website (e.g. giveaway entries), you may provide us with photos, your name, text and other similar information about yourself for the purpose of participating in giveaways or having your story featured; you guarantee that you have full rights to this data;
When you place an order, you provide information such as: first name, last name, shipping address, billing details, payment method, phone number, and email address (we do not collect or store your card details — these are processed directly by our payment provider, Netopia).
We may also collect certain information about your behaviour on our website (e.g. pages visited) in order to understand how the site is used, where you have given your consent via our cookie banner. See our Cookie Policy for details.
We do not collect or process sensitive data as defined by the GDPR (special categories of personal data), and we do not knowingly collect or process data from minors under 18.
2. Principles We Follow
HDD Heroes processes personal data in accordance with the following principles:
protection of the fundamental rights and freedoms of data subjects;
lawfulness, fairness and transparency;
specific, explicit and legitimate purposes, with no further incompatible processing;
a well-defined legal basis for every processing activity (law, consent, contract performance, or our legitimate interest, balanced against your rights);
purpose and data minimisation — we only process what is adequate, relevant and necessary;
storage limitation — we keep data only as long as necessary for the purpose and for legal compliance;
accuracy — we take reasonable steps to keep data accurate and up to date;
security — we take ongoing technical and organisational measures to protect the data we hold.
3. Why We Process Your Data (Purposes and Legal Bases)
a) To provide our services to you
Creating and managing your account;
Processing orders — receiving, validating, shipping and invoicing them;
Resolving cancellations or issues related to an order or a product;
Processing returns in accordance with legal provisions (see our Returns & Cancellation Policy);
Providing customer support and answering questions about your order.
This is necessary for the performance of a contract between you and HDD Heroes, and certain related processing (e.g. invoicing) is required by Romanian tax and accounting law.
b) To improve our services
We may analyse purchasing behaviour or invite you to complete satisfaction surveys, based on our legitimate interest in running and improving our business, always with respect for your rights and freedoms.
c) For marketing purposes (only with your consent, where required)
We may send you offers, product updates, or information about promotions relevant to you. You can withdraw consent at any time by:
using the "unsubscribe" link in any marketing email; or
contacting us using the details above.
d) To protect our legitimate interests
Protecting the website and its users against fraud, abuse or cyberattacks;
Detecting and preventing fraud, including reporting to relevant authorities where required;
General business risk management.
4. How Long We Keep Your Data
As a general rule, we keep your account data for as long as you maintain an account with us. Photos or other material you upload for a giveaway entry are kept as part of the entry record for the duration of that competition and any period required to select and announce winners, after which they may be deleted. You may request deletion of your account or specific data at any time (see Section 7), subject to information we are legally required to retain (e.g. for tax/invoicing purposes).
5. Who We Share Your Data With
We may disclose personal data to the following categories of recipients, only as necessary:
courier / shipping providers, to deliver your order;
payment providers (Netopia), to process payments — we never see or store your full card details;
IT and hosting service providers, who process data on our behalf under contract;
public authorities, where required by law or to protect a legitimate interest.
We do not sell your personal data.
6. International Data Transfers
We currently store and process your personal data within the European Union.
7. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
Right to information — to know what data we process, why, for how long, and who it's shared with;
Right of access — to obtain confirmation of whether we process your data, and a copy of it;
Right to rectification — to correct inaccurate or incomplete data;
Right to erasure — to request deletion of your data in the situations provided by law;
Right to restriction of processing, within the limits provided by law;
Right to data portability, right to object to processing (including profiling), and right to withdraw consent at any time where processing is based on consent;
Right to lodge a complaint with the supervisory authority.
To exercise any of these rights, contact us at info@hddheroes.com or info@hddheroes.com, or by post at: Strada Unirii nr. 37, Băicoi, Prahova, Romania — marked "Attention: Data Protection".
We ask that you contact us first so we can try to resolve any concern directly — but this does not affect your right to contact the supervisory authority at any time:
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
28-30 Gen. Gheorghe Magheru Blvd., Sector 1, 010336 Bucharest, Romania
Phone: +40 318 059 211 / +40 318 059 212
Email: anspdcp@dataprotection.ro
8. How We Protect Your Data
We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, disclosure or unauthorized access, including:
restricted, credential-protected access to systems holding personal data, limited to staff who need it for their role;
secure hosting infrastructure;
periodic review of access and security practices.
Online card payments (where available) are processed entirely on our payment provider's own secure servers — HDD Heroes never requests or stores your card details.
While we take data security seriously, no transmission over the internet is completely secure, and we cannot guarantee absolute security of information you transmit to us.
9. Cookies
Our website uses cookies and similar technologies. Full details of what we use and why are in our Cookie Policy.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be published on this page together with its update date.