Privacy Policy

Wake Cup Coffee & Bar ("we", "our" or "the Company"), headquartered at Cluj County, Florești village, Florești commune, Urusagului str., no. 15, Tax ID 45231749, respects the privacy of our website visitors and customers. This Privacy Policy explains how we collect, use, store and protect your personal information in accordance with the General Data Protection Regulation (GDPR) and applicable Romanian legislation.

The data controller is: • Company name: WAKE CUP COFFEE & BAR S.R.L. • Headquarters address: Cluj County, Florești village, Florești commune, Urusagului str., no. 15 • Tax ID (CUI): 45231749 • Trade Registry No.: J20/1005608/2021 • GDPR contact email: office@wake-cup.ro • Location address: Str. Donath 100E, Cluj-Napoca, Romania

We collect the following categories of personal data: **Automatically collected data:** • Language preferences (saved in browser localStorage) • Anonymous technical data for website operation **Data you voluntarily provide:** • First and last name (if you contact us) • Email address (if you contact us) • Phone number (if you contact us via WhatsApp) • Content of messages sent **Data collected with your consent (Meta Pixel):** • IP address (anonymized) • Browser type and operating system • Pages visited on our website • Actions performed (page views) • Meta cookie identifiers (_fbp, _fbc) **We do not collect:** • GPS location data • Data for individual profiling without consent • Sensitive data (health, political views, religion, etc.)

We process your personal data for the following purposes: • **Website functionality**: Saving language preferences for a better experience • **Communication**: Responding to your questions and requests • **Event reservations**: Processing reservation requests for private events • **Legal obligations**: Compliance with applicable legal requirements

We process your data based on the following legal grounds: • **Consent** (Art. 6(1)(a) GDPR): For saving preferences in browser • **Legitimate interest** (Art. 6(1)(f) GDPR): To respond to communications initiated by you • **Contract performance** (Art. 6(1)(b) GDPR): For processing event reservations • **Legal obligation** (Art. 6(1)(c) GDPR): For compliance with applicable laws

We keep your personal data only as long as necessary: • **Language preferences**: Until you delete browser data or revoke consent • **Correspondence**: Maximum 2 years from last communication • **Reservation data**: According to legal archiving requirements (up to 5 years) After these periods expire, data is securely deleted.

Under GDPR, you have the following rights: • **Right of access**: You can request a copy of the personal data we hold about you • **Right to rectification**: You can request correction of inaccurate data • **Right to erasure** ("right to be forgotten"): You can request deletion of data in certain circumstances • **Right to restriction of processing**: You can request limitation of how we use your data • **Right to data portability**: You can request transfer of data to another organization • **Right to object**: You can object to data processing in certain cases • **Right to withdraw consent**: You can withdraw consent at any time To exercise these rights, contact us at: office@wake-cup.ro

Our website uses two categories of cookies: **Functional cookies (necessary, no consent required)** • **Language preferences**: We save your language choice (Romanian/English) in localStorage • **Cookie consent**: We store your cookie preferences (version, timestamp, marketing status) for a maximum of 13 months **Marketing cookies (with your consent)** • **Meta Pixel** (ID: 3382203885292795) — operated by Meta Platforms Ireland Limited - Sets _fbp and _fbc cookies on the facebook.com domain - Allows measuring the performance of our Facebook and Instagram Ads campaigns and creating retargeting audiences - Loads ONLY after you click "Accept all" in the cookie banner - Meta cookies duration: up to 90 days (managed by Meta) **How you can manage consent:** • Use the **Cookie Settings** button in the website footer — you can withdraw consent at any time • The cookie banner automatically reappears after 13 months for reconfirmation • You can also clear Meta cookies from your browser settings **We do not use:** Google Analytics, Hotjar, or other behavioral analytics tools.

We do not sell or rent your personal data. Data may be shared only with the following recipients: • **Vercel Inc.** (website hosting) — USA, under Standard Contractual Clauses (SCCs) • **Meta Platforms Ireland Limited** (Meta Pixel, only if you have granted marketing consent) — Ireland, with data transfers to Meta Platforms Inc. (USA) under SCCs and the EU-US Data Privacy Framework - Meta privacy policy: https://www.facebook.com/privacy/policy/ - Meta privacy settings: https://accountscenter.facebook.com/ • **WhatsApp/Meta** — when you contact us via WhatsApp, communication is subject to Meta's privacy policy • **Public authorities** — only when required by law All our providers are contractually obligated to protect data according to GDPR.

Our website is hosted on servers that may be located outside the European Economic Area (EEA). In such cases, we ensure adequate safeguards exist under Art. 46 GDPR, including: • Standard contractual clauses approved by the European Commission • Recognized certifications and compliance mechanisms

We implement appropriate technical and organizational measures to protect your data: • Secure HTTPS connection for the entire website • Restricted access to data on a need-to-know basis • Regular security updates • We do not store sensitive data on our own servers

Our website is not intended for persons under 16 years of age. We do not knowingly collect personal data from minors. If you are a parent or guardian and believe your child has provided us with personal data, please contact us.

We reserve the right to update this Privacy Policy. Any significant changes will be communicated by: • Posting the new policy on the website • Updating the "Last updated" date We recommend periodically checking this page.

For any questions or requests regarding personal data: • **Email**: office@wake-cup.ro • **Address**: Cluj County, Florești village, Florești commune, Urusagului str., no. 15 If you believe your data protection rights have been violated, you have the right to file a complaint with: **National Supervisory Authority for Personal Data Processing (ANSPDCP)** • Website: www.dataprotection.ro • Email: anspdcp@dataprotection.ro • Phone: +40 318 059 211