Privacy and cookie notice
This notice explains how we handle your personal data when you visit our shop, create an account, place an order or contact us. We process personal data in accordance with the GDPR (Regulation (EU) 2016/679) and applicable Romanian law.
Who is responsible for your data
The data controller is SC MILITARY SURPLUS SRL, registered office Calea Borșului 45H4, Oradea, Bihor, 410605, Romania (Trade Register no. J5/1495/2018). For any privacy matter, write to contact@militarysurplus.ro or call/WhatsApp +40 751 798 585.
What data we collect
Depending on how you use the shop, we may collect: your name and contact details (e-mail, phone); billing and delivery address; order and payment information (what you bought, amounts, payment method — we do not store full card numbers); account login data if you register; your messages to us; and technical data (IP address, device and browser information, and data from cookies and similar technologies).
Why we use it, and our legal basis
- To perform your order — processing purchases, payment, delivery and returns (performance of a contract).
- To meet legal obligations — invoicing, accounting and tax (legal obligation).
- To run and protect the shop — fraud prevention, security, and improving our service (legitimate interests).
- To send marketing such as our newsletter, and to set non-essential cookies — only with your consent, which you can withdraw at any time.
Cookies and similar technologies
We use cookies that are strictly necessary for the site to work, and — with your consent — cookies for statistics, preferences and marketing. You can accept, reject or change your choices at any time from the cookie banner. Blocking some cookies may affect how the site works.
Who we share data with
We share data only as needed to run the shop: couriers (to deliver your parcel), payment providers (to take payment), and our IT, hosting, accounting and marketing service providers, who act as our processors under contract. We may disclose data to public authorities where the law requires it. We do not sell your personal data.
Transfers outside the EEA
We keep your data within the European Economic Area wherever possible. If a provider processes data outside the EEA, we ensure appropriate safeguards required by the GDPR (such as the European Commission’s standard contractual clauses).
How long we keep it
We keep your data only as long as necessary for the purposes above and for the periods required by law — for example, accounting and tax records are kept for the periods set by Romanian law. Marketing data are kept until you unsubscribe or withdraw consent.
Your rights
You have the right to access your data and to request rectification, erasure, restriction or portability, to object to processing based on our legitimate interests, and to withdraw consent at any time (without affecting processing already carried out). To exercise any right, contact us at contact@militarysurplus.ro. You also have the right to lodge a complaint with the Romanian supervisory authority, ANSPDCP (www.dataprotection.ro), or the authority in your country of residence.
Security and changes
We take appropriate technical and organisational measures to protect your data. We may update this notice; the current version is always the one published here. Last reviewed: 2026.