Privacy Policy

Version 2.0. Last updated 6 August 2026. This policy explains how Arbore handles personal data collected through arbore.world and through our dealings with clients and trade partners.

1. Who we are

Arbore is the trade name of S.C. Carel Woodworks SRL, a furniture manufacturer registered in Romania, Trade Register no. J30/29/2001, Fiscal Identification Code RO14077365, with its workshop and registered office at Str. Drumul Careiului 45, Vetis 447355, Satu Mare, Romania.

We are the controller of the personal data described in this policy. For anything relating to your data, write to sales@arbore.world.

2. What we collect

When you contact us or place an order

Your name, company name, email address, telephone number, billing and delivery address, VAT identification number where applicable, the products you are interested in, and the content of your message. If you become a trade partner we also hold the commercial terms of your account.

When you subscribe to our newsletter

Your email address, and the fact that you consented and when.

When you visit the website

Technical data such as IP address, browser and device type, pages viewed, referring page and interaction data, collected through analytics. This data is used in aggregate to understand how the site is used.

We do not collect payment card details on this website. There is no online checkout: every order is quoted and invoiced individually, and payment is made by bank transfer.

3. Why we process your data, and on what basis

• To answer enquiries, prepare quotations and perform a contract with you. Legal basis: performance of a contract, or steps taken at your request before entering into one.
• To meet legal obligations, including accounting, invoicing and tax records. Legal basis: legal obligation.
• To send you commercial communications where you asked to receive them. Legal basis: your consent, which you can withdraw at any time.
• To keep the website secure, prevent abuse and improve what we offer. Legal basis: our legitimate interest in running and protecting our business, balanced against your rights.

Providing your data is voluntary, but without the information marked as required on our forms we cannot answer an enquiry or issue a quotation.

4. Cookies and analytics

The site uses cookies and similar technologies. Strictly necessary cookies keep the site working and cannot be switched off. Analytics cookies help us understand which pages are useful; these are only set where you have agreed to them, and you can change your mind at any time through your browser settings.

Where a form on this site is protected against automated abuse, the provider of that protection may process technical data for that purpose only.

5. Who we share your data with

We do not sell or rent personal data, and we do not share it for anyone else's marketing.

We share it only with service providers acting on our instructions and bound by confidentiality: our website host, IT and email providers, transport and logistics companies where a delivery is arranged, our accountants, and professional advisers where necessary. We also disclose data to public authorities where the law requires it.

6. Transfers outside the European Economic Area

Our operations are based in Romania. Some of our service providers may process data outside the European Economic Area. Where that happens we rely on an adequacy decision of the European Commission or on Standard Contractual Clauses approved by the Commission, so that your data keeps an equivalent level of protection.

7. How long we keep it

• Enquiries that do not lead to an order: up to 3 years from our last contact.
• Client and order records, including invoices and accounting documents: 10 years, as required by Romanian accounting law.
• Newsletter subscriptions: until you unsubscribe, and a record of the withdrawal afterwards.
• Website analytics: in line with the retention period of the analytics tool, in aggregate form.

8. Your rights

Under the General Data Protection Regulation (EU) 2016/679 you have the right to be informed, to access your data, to have inaccurate data corrected, to have data erased, to restrict or object to processing, to data portability, and to withdraw consent at any time without affecting processing carried out before the withdrawal.

To exercise any of these rights, write to sales@arbore.world. We will answer within one month. We may ask you to confirm your identity before we act on a request.

9. Security

We apply appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. Access to client data inside our company is limited to the people who need it to do their work.

10. Children

Our products and services are directed at adults and at businesses. We do not knowingly collect data from children.

11. Changes to this policy

We may update this policy. The version published on this page is the one that applies. Material changes will be signalled on the page.

12. Complaints

If you believe we have handled your data incorrectly, please tell us first at sales@arbore.world so we can put it right. You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), or with the supervisory authority of the country where you live.