Privacy Policy

This page explains what this website collects today: waitlist signups, and nothing else. When Ordela launches, it will be replaced by the full policy. It translates the Romanian version; if the two differ, the Romanian version prevails.

The data controller is THRIVEWAYS S.R.L., registered office at Str. Iordachi Lozonschi nr. 4, bl. B2, et. 4, ap. 10, camera nr. 3, Mun. Iași, jud. Iași, Romania, Trade Register No. J2020000108221, tax ID (CUI) RO42114272. For any question about your data, write to us at suport@ordela.ro.

When you join the waitlist: your name, your email address, your bakery's name and the date you signed up.

The site sets no cookies and uses no analytics, advertising pixels or third-party scripts. As with any website, the server receives your browser's IP address in order to send you the page; we keep no log of visits.

We use waitlist data to contact you about Ordela and to send you an access code when your turn comes. The legal basis is art. 6(1)(b) GDPR: steps taken at your request before entering into a contract.

To block automated signups, we limit how many signups can come from the same IP address. The address is held only temporarily in the server's memory and is not saved. The legal basis is our legitimate interest in protecting the form (art. 6(1)(f) GDPR).

We do not sell your data or use it for advertising. It reaches only the providers the waitlist runs on: Fly.io (hosting for the site and for the server that receives the signup, in Frankfurt), Neon (the database the signup is saved in), Resend (sends us an email with the signup) and Google Workspace (the mailbox we receive it in and write to you from).

We also maintain the service with tools from Anthropic, which can access the database while we look for and fix a problem.

Some of these providers are US companies. Those transfers rely on the EU–US Data Privacy Framework or on the standard contractual clauses in their agreements.

We keep a signup for at most 12 months from its date, and delete it sooner if you ask us to. When we delete it, we also delete the email with the signup from our mailbox. After deletion, the data may remain for up to 30 days in the encrypted backups of the database, in Resend's logs and in the mailbox's trash.

You have the right of access, rectification, erasure, restriction of processing and portability, and the right to object to processing based on our legitimate interest. Write to us at suport@ordela.ro; we answer free of charge within one month.

You can also lodge a complaint with the Romanian data protection authority, Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru nr. 28-30, sector 1, 010336 Bucharest, Romania; email: anspdcp@dataprotection.ro; www.dataprotection.ro.

When what the site does changes, we update this page and the date at its top.