Privacy policy
Last updated: 18 September 2026
Data controller
The controller of your personal data is SEBASTIAN FOREST S.R.L. (CUI 47360391), with its registered office at Răchitova nr. 137, Județul Hunedoara, România, which runs the Doar Lemn workshop and brand. For any question about data processing, message us on WhatsApp or call 0786 023 065.
What data we collect
The site has no forms and collects no data. When you message us on WhatsApp or call, we receive your phone number, your profile name and the content of your messages. For an order we also ask for what invoicing and delivery need: name, address, phone and, where relevant, company details.
Purpose of processing
We use the data to answer your questions, prepare a quote, carry out, invoice and deliver your order, and honour the warranty. We do not sell or rent your data to third parties and we do not send marketing messages without your consent.
Legal basis
We process data on the basis of pre-contractual steps and contract performance (the quote and the furniture order), our legitimate interest in running the workshop, and legal obligations (for example, accounting and tax records).
Who we share data with
We may share data with providers who help us operate the workshop and this website: the messaging service WhatsApp (Meta), our website host (Cloudflare), the courier or haulage companies that deliver your order, and our accountant. We do not currently use analytics or advertising services. We may also disclose data to public authorities where the law requires it.
International transfers
Some providers (for example, WhatsApp/Meta) may process data outside the European Economic Area. In those cases the transfer relies on safeguards provided by the GDPR, such as the European Commission's standard contractual clauses or an adequacy decision.
Retention
We keep data only as long as necessary for the purposes above or as required by law, then delete or anonymise it. Conversations that do not end in an order are deleted within 12 months; order data is kept for the warranty period, and accounting records for the periods required by Romanian law.
Security
We take reasonable technical and organisational measures to protect your data against unauthorised access, loss or disclosure. Access is limited to the team members who need it to manage orders.
Cookies
This website uses only essential cookies and your browser's local storage. Details are in the Cookie Policy.
Your rights (GDPR)
You have the right of access, rectification, erasure, restriction, portability and objection regarding your data, and the right to withdraw consent at any time. To exercise these rights, message us on WhatsApp or call 0786 023 065. We will respond within one month and may ask you to confirm your identity. You also have the right to lodge a complaint with the Romanian supervisory authority, ANSPDCP (www.dataprotection.ro).
Changes to this policy
We may update this policy from time to time. The current version is the one published on this page, with the date of the last update shown above.