CRATERFLAME®

Privacy Policy

Last updated: 2026-05-17

Introduction

Welcome to CRATERFLAME®. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, store, and protect your information when you visit https://www.craterflame.com (the “Website”).

Data Controller

The CRATERFLAME® website is owned and operated by:

FERROBEN METALDESIGN SRL
Str. Tineretului nr. 6, 530110 Miercurea Ciuc, județul Harghita, România
CIF: RO42230803 · Registrul Comerțului: J19/59/2020
Email: contact@craterflame.com

FERROBEN METALDESIGN SRL is the data controller for all personal data processed through this Website, as defined by Regulation (EU) 2016/679 (GDPR).

For orders placed through the Website, the purchase contract is concluded between the customer and the authorised regional partner (not FERROBEN METALDESIGN SRL). The relevant partner’s identity is disclosed in the Terms and Conditions applicable to your market.

1. Information We Collect

1.1 Information You Provide

We currently do not require you to create an account or provide personal information to browse our Website. However, you may voluntarily provide:

Contact Information: If you contact us via email or contact form (name and email address)
Communication Data: Any messages, questions, or feedback you submit to us

1.2 Information Collected Automatically

When you visit our Website, we automatically collect certain technical information:

Technical Data: IP address, browser type and version, device type, operating system
Usage Data: Pages you visit, time and date of your visit, time spent on pages, referring website
Location Data: General geographic location based on your IP address (country/city level)

2. How We Use Your Information

We use your information for the following purposes:

To provide and maintain our Website
To understand how visitors use our Website and improve user experience
To analyze website traffic and usage patterns
To respond to your inquiries and provide customer support
To detect, prevent, and address technical issues
To comply with legal obligations

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

We process your personal data based on the following legal grounds (GDPR Art. 6):

Consent (Art. 6(1)(a)): For analytics cookies — obtained through our cookie consent banner. You may withdraw consent at any time.
Contract performance (Art. 6(1)(b)): For processing orders — name, address, email, and phone are necessary to fulfil your purchase and communicate about delivery.
Legal obligation (Art. 6(1)(c)): For accounting, invoicing, and regulatory compliance requirements.
Legitimate interests (Art. 6(1)(f)): For essential website functionality, security, fraud prevention, and improving our services — balanced against your rights.

4. Cookies and Tracking Technologies

We use cookies to track activity on our Website and improve your experience.

What Are Cookies?

Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work more efficiently and provide information to website owners.

Types of Cookies We Use

Language preference (locale): Stores your chosen interface language. Expires after 1 year.
Market/region preference (shop_market): Stores your detected or selected regional market (e.g. RO, HU, AT). Expires after 1 year.
Shopping cart (cart): Stores the contents of your shopping cart between page loads. Expires after 30 days.
Cookie consent (cf_cookie_consent, localStorage): Stores your cookie preferences locally in your browser. Contains no personal information. Persists until manually cleared.

Google Analytics: Collects pages visited, time on site, arrival source, general location, and device info. Data may be processed by Google outside the EU. Google Privacy Policy

We do not sell your personal data. We share data only as described below.

Google Analytics

Purpose: Website analytics and understanding visitor behaviour
Data Shared: Usage data, technical data, general location
Privacy Policy: https://policies.google.com/privacy
Data Processing Agreement: Google complies with GDPR requirements

Regional Fulfilment Partners

When you place an order, your order data (name, delivery address, email, phone, and order details) is shared with the authorised regional partner responsible for fulfilling your order. This sharing is necessary for contract performance (GDPR Art. 6(1)(b)). The partner acts as a separate data controller for the fulfilment relationship. Their identity is disclosed in the Terms and Conditions applicable to your market.

Public Authorities

We may disclose personal data to competent authorities where required by law or to defend our legal rights.

6. Data Retention

Analytics Data: Google Analytics retains data for 26 months by default
Contact Form Submissions: Retained for up to 3 years to respond to your inquiry
Order Data: Retained for 10 years to comply with Romanian accounting and tax law (Legea contabilității nr. 82/1991)
Server Logs: Typically retained for 30–90 days

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including secure HTTPS encryption, regular security updates, limited access to personal data, and secure hosting infrastructure. No method of transmission over the Internet is 100% secure.

8. International Data Transfers

Google Analytics may process data on servers located in the United States and other countries. Google participates in data protection frameworks and provides adequate safeguards in compliance with GDPR requirements.

Under GDPR (Art. 15–22), you have the following rights:

Right of access — obtain a copy of your personal data we hold
Right to rectification — correct inaccurate or incomplete data
Right to erasure — request deletion where data is no longer needed
Right to restriction — limit how we process your data
Right to data portability — receive your data in a structured, machine-readable format
Right to object — object to processing based on legitimate interests
Right not to be subject to automated decisions — including profiling with legal effect
Right to withdraw consent — at any time, without affecting prior lawful processing

To exercise any of these rights, contact us at: legal@craterflame.com. We will respond within one month.

You also have the right to lodge a complaint with the Romanian supervisory authority:

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
B-dul G-ral. Gheorghe Magheru nr. 28–30, sector 1, 010336 București
www.dataprotection.ro

10. Children’s Privacy

Our Website is not intended for children under 16. We do not knowingly collect personal information from children under 16. If you believe your child has provided us with personal information, please contact us.

11. Do Not Track Signals

Our Website does not currently respond to “Do Not Track” browser signals. You can control tracking via our cookie banner or your browser settings.

12. Links to Other Websites

Our Website may contain links to third-party websites. We are not responsible for their privacy practices. We encourage you to review the privacy policy of any external website you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last Updated” date and post the new policy on this page. For significant changes, we will display a notice on our homepage.

14. Contact Information

FERROBEN METALDESIGN SRL (Data Controller)
Str. Tineretului nr. 6, 530110 Miercurea Ciuc, județul Harghita, România
CIF: RO42230803 · Registrul Comerțului: J19/59/2020

Email: contact@craterflame.com
Contact Form: Contact page

Summary

What we collect: Basic technical data, usage patterns via Google Analytics (with consent), and contact info if you reach out.

What we DON’T do: We don’t require registration, sell your data, track you across other websites, or use advertising cookies.

Your control: You can accept or reject analytics cookies, and access, correct, or delete your data at any time.

By using our Website, you acknowledge that you have read and understood this Privacy Policy.