Legal documents
Privacy Policy
Last updated: July 2026
Data controller
InfinityFeedback, a company with a VAT number registered in Romania (operational site in Cluj-Napoca), is the Data Controller for the personal data collected through this website, pursuant to Regulation (EU) 2016/679 (GDPR).
Data collected and purposes
We collect the data you voluntarily provide during configuration and purchase: business name, city, company logo, Google Business profile link, e-mail, phone, billing details and shipping or pickup information. This data is used exclusively to produce and deliver the ordered products, issue EU-compliant invoices and send order-related communications.
Legal basis and retention
Processing is based on the performance of the sales contract (art. 6.1.b GDPR) and on the tax and accounting obligations required by European and national law. Data is retained for the periods required by law and in any case no longer than 10 years for tax documents.
Your rights
As a data subject you may exercise at any time the rights of access, rectification, erasure, restriction, portability and objection by writing to us via the contact details on the site. You also have the right to lodge a complaint with the competent supervisory authority.
Security and payments
Payments are handled entirely by Stripe: InfinityFeedback never sees or stores your payment card data. Uploaded images and logos are used solely for the production of the ordered product.
Customer Care form (end customers of businesses)
The NFC/QR cards lead to a feedback page that includes an optional form to contact the business management directly. The data voluntarily entered (name, contact, message) is transmitted by email exclusively to the owner of the reviewed business, who acts as an independent data controller to respond to the report. Submission occurs only after explicit consent (mandatory checkbox). InfinityFeedback does not use this data for any other purpose and retains it only for security and abuse-prevention purposes.