Privacy policy
PRIVACY POLICY AND PERSONAL DATA PROTECTION FOR CUSTOMERS
General Information
OFFICE MAX SRL acts as a data controller according to GDPR and, therefore, we are responsible for the data processing described below.
This document informs you about the processing of your personal data and your rights related to this processing, in accordance with the General Data Protection Regulation ("GDPR") and applicable local legislation.
By visiting the website, creating an account, or completing contact or product information request forms, each Member or Customer expresses their consent for OFFICE MAX SRL to process their personal data in accordance with the purposes declared in this Privacy and Personal Data Protection Policy, respecting the provisions of Regulation No. 679 of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), respecting the provisions of Law No. 190/2018 regarding measures for the implementation of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) and any other applicable legal provisions.
OFFICE MAX SRL processes data lawfully, fairly, and transparently. Data processing is carried out for determined, explicit, and legitimate purposes. Data processing is adequate and limited, only to the extent necessary for the purpose for which they were collected. Personal data will be retained only for the period necessary to fulfill the purposes for which they are processed, and processing will be carried out in an appropriate manner to ensure the security and integrity of the data. No data transfer will occur without adequate precautionary measures.
OFFICE MAX SRL has implemented the necessary organizational and security measures to protect against unauthorized access, use, alteration, or destruction of personal data in accordance with current international and national legal provisions. For protecting the information collected for the purposes mentioned from the Member or Customer.
OFFICE MAX SRL will not disclose personal data collected through the omax.ro website, except to authorized employees and contractors/partners who act as authorized persons (accounting) for whom this data is necessary to process on behalf of OFFICE MAX SRL, or if the disclosure obligation is a legal obligation of OFFICE MAX SRL or its employees or contractors/partners. OFFICE MAX SRL, together with its collaborators (authorized persons), assumes responsibility for implementing appropriate technical and organizational measures regarding the protection of the confidentiality and security of personal data.
OFFICE MAX SRL processes personal data for the following purposes and legal bases:
- for the purpose of contract execution: to ensure customer access to the service, for the validation, dispatch, and invoicing of orders or for resolving cancellations or problems of any nature related to an order or contract, to the services or products purchased by them;
- based on the website user's consent, to contact them, to offer information regarding Office Max activities and/or commercialized products, upon their voluntary request;
- based on the express consent of the website user for marketing purposes, for sending newsletters, exclusively in electronic format;
- in the legitimate interest of the Operator, to improve the services offered to Customers or Members, including but not limited to contacting them for product evaluation, for sending personalized communications periodically, based on the appropriate relationship between OFFICE MAX SRL and the CUSTOMER/MEMBER, in compliance with applicable legal provisions regarding data protection.
For requests related to data processing, you can contact us at any time by email at data.protection@officemax.ro.
Information about collected data, processing basis for Customers, Suppliers, Other Business Partners
Marketing and Customer Analysis
We will process your personal data for commercial, financial, and logistical transactions necessary for contract execution and for customer relations, obtaining special offers, and data analysis.
This includes market research, customer opinion surveys, customer analysis, customer segmentation, and profiling of the legal entity to determine purchasing behavior and customer activity, repeat purchases of certain goods, and purchase data.
We may also contact you for this purpose by email, SMS, phone, or postal/courier service. For the purposes mentioned above, your data will be stored in our database and enriched with data collected from public sources (e.g., Trade Register, ANAF, public registers).
Data Recipients
The processing of personal data may also involve other service providers such as courier services or other business services, on-site services, support reports, manufacturer price/warranty assistance, logistics services, maintenance, etc.), all of whom are processors as defined in Article 28 GDPR.
Through contractual regulations, Office Max ensures that these service providers process personal data in accordance with European data protection legislation, to guarantee a high level of data protection, even if personal data is transferred to a country where a different level of data protection is commonly used and for which there is no adequacy decision from the EU Commission. Data transfers can only be made to legal partners and beneficiaries, and no other transfers of personal data are made to other recipients, unless Office Max is legally obliged to do so.
Mandatory/Voluntary Data Provision and Storage Duration
OFFICE MAX SRL collects, based on the voluntary provision by the data subject, personal data, and the types of data collected depend on the nature of how the website visitor wishes to interact with omax.ro. Thus, for registering a new account, the name, surname, email address, and phone number are collected, data subsequently used for completing and transmitting the order; to be contacted by OFFICE MAX SRL for any questions or information regarding the products sold, the name, surname, and email address are collected; for marketing purposes, the name, surname, and email address are collected.
After concluding a contract with you for customer registration processing, the following data are required: customer name (= your company name), industry, legal form, registered office address, tax address, delivery address, business phone/fax numbers, VAT registration code, identification data of authorized persons for purchases, technical contacts, collection, services, delivery, other specific obligations/services, as applicable, and for financial and legal relationships, the functions of these persons, proof of your company's existence.
OFFICE MAX SRL may also involuntarily collect other data that do not lead to the unique identification of the data subject (time of visit, access location, internet browser name and version, operating system, including other technical parameters) provided by the internet browser through which access to the site is made and may be used by OFFICE MAX SRL to improve the services offered to its Customers or Users.
Also, OFFICE MAX SRL may involuntarily collect information that could lead to the identification of omax.ro visitors such as the IP address. OFFICE MAX SRL will not use such information to identify website visitors and will not make such information public, otherwise than under the conditions described in this Privacy Policy;
OFFICE MAX SRL may obtain data from the financial institution through which purchases are made on omax.ro, if payment is made online by bank card or bank transfer;
Data Archiving Period
Personal data processed by OFFICE MAX SRL are retained for a period between 3 and 10 years, depending on the purpose of data collection, as follows: data provided through the order form will be stored for a period of 10 years from the time of collection, data provided for creating an account will be retained for a period of 3 years from the Member's last login, data provided by completing the contact form or product information request for a period of 3 years from the time of collection, data processed for marketing purposes based on the explicit consent of the data subject until consent is withdrawn, and data processed for marketing purposes in the legitimate interest of the Operator for a period of 5 years calculated from the time of the last purchase on omax.ro.
*Except for contracts explicitly concluded with different archiving durations.
This duration may change with legislative amendments regarding the archiving of fiscal-accounting or legal documents.
Your Rights
As a data subject, you have the following rights in relation to OFFICE MAX SRL, the personal data controller:
- Right of access means the right of the Member or Customer to obtain confirmation from OFFICE MAX SRL whether personal data concerning the data subject is being processed or not and, if so, to access that data and information regarding how the data is processed.
- Right to data portability refers to the right to receive personal data in a structured, commonly used, and machine-readable format and the right to transmit this data directly to another controller, but only if this is technically feasible.
- Right to object refers to the right of the Member or Customer to object to the processing of personal data when the processing is necessary for the performance of a task carried out in the public interest or when it concerns a legitimate interest of the controller. When the processing of personal data is for direct marketing purposes, the Member or Customer has the right to object to processing at any time.
- Right to rectification refers to the correction, without undue delay, of inaccurate personal data. Rectification will be communicated to each recipient to whom the data has been disclosed, unless this proves impossible or involves disproportionate efforts on the part of OFFICE MAX SRL.
- Right to erasure ("right to be forgotten") means the right of the Member or Customer to request the erasure of personal data, without undue delay, if one of the following grounds applies: they are no longer necessary for the purposes for which they were collected or processed; the data subject decides to withdraw their consent and there is no other legal ground for processing; the data subject objects to the processing and there are no overriding legitimate grounds; personal data has been unlawfully processed; personal data must be erased for compliance with a legal obligation; personal data has been collected in relation to the offer of information society services. If you wish to exercise this right, please contact us via the following link: https://omax.ro/pages/gdpr.
- Right to restriction of processing can be exercised if the Member or Customer contests the accuracy of the data processed by OFFICE MAX SRL, for a period enabling the verification of the data's accuracy; the processing is unlawful, and the data subject opposes the erasure of the personal data and requests instead the restriction of their use; where OFFICE MAX SRL no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise, or defense of legal claims; where the data subject has objected to processing pending the verification whether the legitimate grounds of OFFICE MAX SRL override those of the Member or Customer.
- Right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP). If it is considered that the rights provided in Regulation No. 679/2016 have been violated, any data subject has the possibility to address the ANSPDCP by submitting a complaint.
The contact details of ANSPDCP are as follows:
Bucharest, B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, postal code 010336;
Phone: +40.318.059.211/+40.318.059.212; Fax: +40.318.059.602;
E-mail: anspdcp@dataprotection.ro; Website: www.dataprotection.ro.
To exercise your rights under GDPR, you can contact us at any time and free of charge, by sending a notification to the email address: data.protection@officemax.ro.
Due to ongoing legislative changes, it may become necessary to amend these data protection notices. In this case, you will find the changes in the GDPR section, available online. To the extent that the changes affect processing based on your consent, we will request your new consent, if necessary.
Individuals:
We use your data for fiscal and legal reporting purposes, or in a legitimate interest, only with your consent, depending on its nature.
For example:
Email Address
If you have provided your email address, we will use it to send you information regarding orders, parcel tracking in integrated applications/courier companies, informative emails about our products and services, as well as articles and resources published periodically on this site.
In the case of online payments, your email address will be transmitted to the online payment processor. The email address will be used for e-marketing campaigns on social networks to promote the website only if you agree to this type of use.
First Name and Last Name
If you have provided your first and last name, we will use this data to process orders and issue invoices, for courier services, to personalize the emails you receive from us.
Phone Number
If you have provided your phone number, we will use this data to contact you quickly, by phone, messages, or via WhatsApp for the purpose of fulfilling and delivering your order. The phone number will be used for e-marketing campaigns on social networks to promote the website, as well as to send you SMS messages and WhatsApp messages with promotional offers, news, and events, if you have opted in for this.
Billing Information
If you have provided billing information (including VAT ID, Company Registration Number, registered office address, bank account, bank name, legal representative's name, legal representative's position), we will use this data to issue the invoice for the order placed on our website. This data will be saved in our ERP system and will be correlated with the fiscal data available in the public fiscal register.
Sharing of Personal Data
We have not sold, do not sell, and will never sell your data to third parties.
Please set your cookie options independently for maximum representativeness and confidentiality of your data.
We have taken all technical measures so that you are not obliged to provide us with any unnecessary information. It is good to know that without this minimal information, certain parts of our website might not function correctly, we might not be able to collaborate, or we might not be able to inform you about our services and products that might interest you, or process your placed orders.
For any questions in this context or clarifications, do not hesitate to contact us at data.protection@officemax.ro.
The platform's privacy policy is available in the footer of the page and maintained automatically via server-side injection.
20.05.2026