Privacy Policy

Last updated: 01.29.2026

This Privacy Policy explains how Genius Nutrition SRL (Drink Factory) (“Company”, “we”, “us”, “our”) collects, uses, discloses, and protects personal data when you visit or interact with our website (“Website”) or contact us through our communication channels.

We are committed to protecting your privacy and processing personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

1. Who We Are (Data Controller)

Data Controller: Genius Nutrition SRL (Drink Factory)

Business Logistic Center 6A, Tamasi 20, Buftea, Ilfov, Romania, European Union. VAT: RO35355847. Contact: via the contact form on the Website

2. Scope of This Policy

This Privacy Policy applies to:

visitors of our Website,
individuals who contact us via forms, email, or other communication methods,
business representatives (B2B inquiries, quote requests, partnerships).

We do not sell products online through this Website.

3. Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Data you provide directly

When you contact us or request a quotation, you may provide:

name and surname,
company name,
business email address,
phone number,
country / location,
message content (including product ideas and project details),
any other data you choose to share.

3.2 Data collected automatically

When you browse the Website, we may collect:

IP address,
browser type and settings,
device information,
pages visited and time spent,
referring URL,
approximate location (city/country),
cookies and similar technologies.

4. How We Use Your Personal Data

We process personal data for the following purposes:

4.1 Responding to inquiries

To communicate with you and respond to messages, quote requests, and partnership inquiries.

4.2 Business relationship management

To evaluate and manage potential cooperation, prepare quotations, and maintain B2B communication.

4.3 Website operation and security

To ensure the Website functions properly, prevent fraud or misuse, and maintain security.

4.4 Analytics and improvement

To analyze Website usage and improve content, performance, and user experience.

4.5 Legal compliance

To comply with legal obligations and defend our rights in case of disputes.

5. Legal Bases for Processing (GDPR)

We process personal data under one or more of the following legal bases:

Legitimate interests (Art. 6(1)(f) GDPR): to respond to inquiries, manage B2B communications, secure and improve the Website.
Consent (Art. 6(1)(a) GDPR): where required (e.g., non-essential cookies or marketing communications).
Contract / pre-contractual steps (Art. 6(1)(b) GDPR): when processing is necessary to provide a quotation or prepare cooperation.
Legal obligation (Art. 6(1)(c) GDPR): where applicable.

6. Cookies and Tracking Technologies

Our Website may use cookies and similar technologies to:

enable essential Website functionality,
improve performance and security,
measure traffic and user behavior.

You can control cookies through your browser settings and, where applicable, through cookie consent settings on the Website.

For more information, please see our Cookie Policy (if available).

7. Data Sharing and Disclosure

We do not sell your personal data.

We may share personal data only when necessary and only with:

IT and hosting providers,
website analytics providers (e.g., traffic measurement tools),
professional advisors (legal, accounting), where required,
authorities or regulators, where legally required.

All third parties are required to process data securely and only for the purposes specified by us.

8. International Data Transfers

If we use service providers located outside the European Economic Area (EEA), personal data may be transferred internationally.

Where required, we ensure appropriate safeguards, such as:

EU Standard Contractual Clauses (SCCs),
processing agreements and security measures aligned with GDPR.

9. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Policy, including:

responding to your inquiry,
maintaining business communication,
fulfilling legal obligations,
protecting our legal rights.

Typical retention periods may vary depending on the nature of communication and legal requirements.

10. Security Measures

We implement appropriate technical and organizational measures to protect personal data against:

unauthorized access,
loss, misuse, or alteration,
accidental disclosure.

However, no online system is 100% secure. You share data at your own risk.

11. Your Rights Under GDPR

If GDPR applies to you, you have the following rights:

Right of access to your data
Right to rectification (correction)
Right to erasure (“right to be forgotten”)
Right to restriction of processing
Right to data portability
Right to object to processing
Right to withdraw consent at any time (where processing is based on consent)
Right to lodge a complaint with a data protection authority

To exercise your rights, please contact us using the contact form on the Website.

12. Children’s Privacy

Our Website and services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children.

13. External Links

Our Website may contain links to third-party websites. We are not responsible for the privacy practices or content of those third parties.

14. Updates to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be published on this page and become effective immediately upon posting.

15. Contact

If you have any questions about this Privacy Policy or how we process personal data, please contact Genius Nutrition SRL (Drink Factory) via the contact form available on this Website.