Privacy Policy

Last updated: October 9, 2026

This Privacy Policy explains how personal data is processed when you visit EuroBeverage.com (the "site"), read our stories and recipes, create an account, subscribe to Premium, or write to us. We have written it to be read, not skimmed past: if anything is unclear, ask us at contact@eurobeverage.com.

Who is responsible for your data

The controller of your personal data is Beau Romania SRL, a company registered in Romania with the fiscal code (CUI) 50630070, Trade Register number J2024027087006, and its registered office at Doftaneț 201, Buștenari, jud. Prahova, Romania. Beau Romania SRL publishes EuroBeverage.com.

You can reach us about anything in this policy at contact@eurobeverage.com or by post at the address above. We have not appointed a data protection officer, because the law does not require one for our activities; privacy requests are handled directly by the company.

What data we collect

We collect as little as we can. You can read much of the site without an account. If you create one or subscribe to Premium, we process the data described below.

Data you send us. When you email us, we receive your email address, your name if you give it, and whatever you write. We use it only to reply and to keep a record of the conversation.

Your account. When you create a free account we process your email address, your name if you give it, a securely hashed version of your password (never the password itself), whether and when you confirmed your email, and your sign-in sessions. If you choose Google sign-in, Google tells us your email address, your name and a Google account identifier; we do not receive your Google password. We also keep the recipes you save and the lists you create.

Your subscription and payments. If you subscribe to Premium, Stripe collects your card details directly; we never see them. We store an identifier for you at Stripe, your country (from your billing address) and whether you have already used the free trial. Stripe tells us your billing name and address, your subscription and plan, the trial and renewal dates, and whether each payment succeeded. We keep the country to apply the correct VAT rules.

Invoices. For each payment we issue a fiscal invoice through SmartBill, with your billing name, address, country, email address, the amount and the VAT.

Wholesale requests. If you ask us for a wholesale offer through our wholesale page, we process your company's name, its VAT or CUI number if you give it, its country, your name, your work email address, your phone number if you give it, the products, quantities and delivery details you ask about, your message, and the time you agreed to this policy. We use them only to answer your request and prepare an offer. We usually send you a confirmation email, and our team receives a copy of the request by email.

Advertisers. If you book an ad on our advertising page, we process your account's name and email address, your company's name, address, country and VAT or CUI number, the ad itself (the image, the link and the image description), the placement and dates you chose, and the payment reference. We use them to review and run the campaign, to show you its results, to issue the invoice and to keep our accounts. Stripe handles the payment and collects your card details directly; we never see them. If your company is established in another EU member state, we check its VAT number in the European Commission's VIES system when you book, and keep the result with the booking and the invoice: the VAT number, whether it is valid, the date of the check, the consultation number and the company name VIES returns.

Ad measurement. The ads on EuroBeverage are not personalised and do not use cookies or any other storage on your device. We count how many times each ad was shown and clicked, per day, without identifying you: the count is tied to the ad, not to you. To keep automated traffic out of the count, our server looks at the browser type of each request at the moment it arrives and does not store it. Readers with a Premium membership see no ads.

Sponsored article clients. When a company orders a sponsored article, we process the account holder's name and email, the company's name, address and VAT number, the article and its images, the editors' comments and the payment reference. We use them to review and publish the article, to issue the invoice and to keep our accounts. The legal bases are the contract (GDPR art. 6(1)(b)) and our legal obligations (art. 6(1)(c)). Invoices and payment records are kept for 10 years, as Romanian tax law requires; articles that are never published, and the review history, for 3 years after the order closes. The published article and its author name stay public for as long as the article is online. Payments are handled by Stripe and invoices by SmartBill.

Technical data. Like every website, our servers receive your IP address, browser type, the page you asked for, the referring page and the time of the request. Our hosting provider processes this data to deliver pages, keep the site secure and detect abuse.

Cookies and similar technologies. We set a small number of cookies and use your browser's local storage. The full list, with durations, is in our Cookie Policy. In short:

eb_age_ok remembers that you confirmed you are of legal drinking age.
eb_consent remembers the choice you made in our cookie banner.
theme (in your browser's local storage, not a cookie) remembers whether you prefer the light or the dark design. It never leaves your device.
Google Analytics 4 cookies (_ga, _ga_<ID>) are set only if you accept analytics in the cookie banner. They help us understand which stories and recipes are read, in aggregate.
eb_session and eb_signed_in keep you signed in to your account, and eb_oauth protects Google sign-in while it runs. They are set only when you sign in.

Editorial staff. If you work on EuroBeverage and sign in to our content management system, we process your email address, roles and sign-in data (session and authentication details) to give you access and to keep the system secure.

Why we use your data, and on what legal basis

Purpose	Data	Legal basis (GDPR)
Delivering the site and keeping it secure	Technical data	Our legitimate interest in running a safe, working website (Art. 6(1)(f))
Remembering your age confirmation	`eb_age_ok`	Our legitimate interest in presenting alcohol content only to adults (Art. 6(1)(f)); the cookie is strictly necessary for this
Remembering your cookie choices	`eb_consent`	Our legal obligation to respect and document your consent (Art. 6(1)(c), together with Romanian Law 506/2004)
Remembering your design preference	`theme` in local storage	Strictly necessary for a feature you asked for; the value stays on your device
Measuring how the site is used	Google Analytics data	Your consent (Art. 6(1)(a)), which you can withdraw at any time
Answering your messages	Your email and message	Our legitimate interest in replying, or steps before a contract you asked for (Art. 6(1)(f) and (b))
Answering wholesale requests and preparing an offer	Wholesale request data	Steps taken at your request before entering into a contract (Art. 6(1)(b)); where you act for a company, our legitimate interest in answering the business you represent (Art. 6(1)(f))
Reviewing and running ad campaigns, and showing the advertiser its results	Advertiser data	The advertising contract (Art. 6(1)(b)); where you act for a company, our legitimate interest in dealing with the business you represent (Art. 6(1)(f))
Counting how often each ad is shown and clicked	Technical data, used at the moment of the request only; the counts themselves identify no one	Our legitimate interest in reporting accurate results to advertisers (Art. 6(1)(f))
Giving editorial staff access	Staff account data	The employment or service contract with that person, and our legitimate interest in securing our systems (Art. 6(1)(b) and (f))
Running your free account, saved recipes and lists	Account data	The contract you enter into when you create an account (Art. 6(1)(b))
Signing you in with Google, if you choose it	Google account identifier, email, name	The contract for your account (Art. 6(1)(b))
Selling and managing your Premium subscription, including the trial and renewals	Subscription and payment data	The subscription contract (Art. 6(1)(b))
Issuing and keeping invoices, and applying VAT	Invoice data, country	Legal obligation under Romanian tax and accounting law (Art. 6(1)(c))
Checking an EU advertiser's VAT number in VIES and keeping the result as evidence for the VAT treatment of the invoice	The company's VAT number; the VIES result (validity, date, consultation number, registered name)	Legal obligation under EU and Romanian VAT law (Art. 6(1)(c); Art. 18 of Council Implementing Regulation (EU) No 282/2011)
Sending account and subscription emails (confirmation, password reset, invoices)	Email address	The contract (Art. 6(1)(b))
Meeting legal duties such as accounting and answering authorities	Data required by law	Legal obligation (Art. 6(1)(c))

We do not use your data for automated decisions that have legal or similarly significant effects on you, and we do not sell personal data.

Who processes data for us

We use a few trusted providers. Most process data on our behalf under data processing agreements; Stripe (for its own fraud-prevention and legal duties) and Google (for Google sign-in) also act as independent controllers under their own privacy policies.

Vercel Inc. hosts the site and delivers it through its global network. Technical data about your visit passes through its infrastructure.
Supabase Inc. runs our database and file storage in its EU region in Frankfurt, Germany. It stores our content, staff and member accounts, saved recipes and lists, subscription records and invoice records.
Google Ireland Limited / Google LLC provides Google Analytics 4, which loads only after you accept analytics. We use Google's Consent Mode, so no analytics cookies are set before you agree.
Stripe Payments Europe, Ltd. (Ireland) processes subscription and advertising payments. It receives your card details, billing name and address, and email, and keeps the customer and payment records.
SmartBill (Intelligent IT SRL, Romania) issues our fiscal invoices from your billing name, address, country, email address and the amount, and transmits them to the Romanian tax authority's e-Factura system where required.
Resend (Resend, Inc.) sends our account, invoice, wholesale request and ad campaign emails, so it receives your email address and the content of the message.
European Commission (VIES, the VAT Information Exchange System) receives the VAT number of an advertiser established in another EU member state, together with our own VAT number, when that advertiser books an ad, and answers whether the number is valid (with the consultation number and, where the member state discloses it, the registered name). The Commission acts under its own legal mandate, not on our behalf.
Google provides Google sign-in, only if you choose "Continue with Google". It tells us your email address, your name and your Google identifier; we send it nothing about you beyond the sign-in request.

Some services are not active yet. We list them now so that you know what to expect, and we will update this policy before they are switched on:

Google AdSense (third-party advertising), only if we add it, and only if you accept advertising cookies. Our own ads, described above, do not use it.
Cloudflare Turnstile (Cloudflare, Inc.), an anti-spam check on our forms, when it is enabled. It processes technical data about your browser and device to tell people from automated programs; it does not use cookies for advertising.

We may also disclose data where the law requires it, for example to a court or a public authority.

International transfers

Supabase stores our data in the European Union. Vercel, Google, Stripe and Resend may process data in the United States or other countries outside the European Economic Area. Where they do, the transfer relies on the EU–U.S. Data Privacy Framework for providers certified under it, or on the European Commission's Standard Contractual Clauses, together with the additional safeguards those providers apply. You can ask us for more information about these safeguards.

How long we keep data

Technical data is kept by our hosting provider for a limited period, for security and operations.
Emails are kept for up to three years after our last exchange, unless we need them longer to establish, exercise or defend a legal claim.
Wholesale requests are kept for three years after our last correspondence about them, unless they lead to a contract, in which case the accounting and contract records are kept for as long as the law requires.
Ad campaigns. The invoice and payment records of a campaign, including the VIES check of an EU advertiser's VAT number, are kept for 10 years, as Romanian tax law requires. The placement, dates and amounts stay with those payment records. The link, the image description, our review notes and the campaign's results are kept for three years after the campaign ends. The ad image is deleted once the campaign has ended, been rejected or been canceled, and at the latest three days after a booking that was never paid has expired.
Cookies last for the periods listed in the Cookie Policy. The theme preference stays in your browser until you clear it.
Google Analytics data: we configure Google Analytics to keep event-level data for no longer than 14 months.
Staff accounts are kept while the person works with us, and deleted or anonymised afterwards.
Member accounts are kept until you delete your account from your account page, or until we close it. Deleting your account erases your profile, saved recipes and lists at once.
Invoices are kept for 10 years, as Romanian accounting and tax law requires, even after you delete your account. Our invoice records contain your billing name and address, country, the email address the invoice was sent to and the amounts, but no password, saved recipes or lists.
Payment records. Deleting your account does not delete your customer record at Stripe (email, name, billing address and payment history). Stripe and we keep it for as long as payment, anti-fraud and accounting law requires.
Accounting records are kept for the periods required by Romanian accounting and tax law.

Your rights

Under the General Data Protection Regulation you have the right to:

access the personal data we hold about you and receive a copy;
have inaccurate data rectified;
have data erased when there is no longer a reason to keep it;
restrict processing in certain cases;
data portability, for data you gave us and that we process by automated means on the basis of consent or contract;
object to processing based on our legitimate interests;
withdraw your consent at any time, without affecting processing done before. For cookies, use "Cookie settings" in the footer of any page.

To exercise a right, write to contact@eurobeverage.com. We will answer within one month, which the law allows us to extend by two further months for complex requests. We may ask you to confirm your identity before acting on a request.

If you believe we have not respected your rights, you can complain to the Romanian supervisory authority, the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 Bucharest, Romania, www.dataprotection.ro, anspdcp@dataprotection.ro, or to the authority of the EU country where you live or work. We would appreciate the chance to resolve your concern first.

Children

EuroBeverage is a site about alcoholic drinks and is intended only for adults of legal drinking age, and at least 18. We ask every visitor to confirm their age, and we do not knowingly collect data from anyone under 18. If you believe a minor has sent us personal data, tell us and we will delete it.

Security

We protect data with encryption in transit (HTTPS), access controls that limit our systems to the people who need them, and providers that follow recognised security practices. No system is perfectly secure, but we take care to reduce the risks and will act promptly if something goes wrong, including notifying the authority and you where the law requires it.

Changes to this policy

We will update this policy when our services or the law change, for example before we enable advertising. The date at the top of the page shows the latest version. If a change is significant, we will say so clearly on the site.

Contact

Beau Romania SRL, CUI 50630070, Trade Register number J2024027087006, Doftaneț 201, Buștenari, jud. Prahova, Romania. Email: contact@eurobeverage.com.