Last updated: July 24, 2026
Who we are
The ATMA online shop (shop.bhaktimarga.ro) is owned and administrated by Telstra SRL, CUI (tax ID) RO 17156323, Trade Register no. J32/87/2005, registered office at Str. 24 Ianuarie 1859, Nr. 12, postal code 557260, Șelimbăr, Romania (hereinafter “we”). The shop operates the ATMA brand in collaboration with and for Bhakti Marga Romania. Within the meaning of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (“GDPR”), Telstra SRL is the controller of the personal data collected through this shop.
You can reach us at contact@bhaktimarga.ro, and for any data-protection matter at gdpr@bhaktimarga.ro. For questions about orders, write to hello@bhaktimarga.ro.
Our principles
- We collect personal data only for specified, explicit and legitimate purposes and do not process it in a manner incompatible with those purposes.
- We process data lawfully, fairly and transparently.
- We keep data accurate and, where necessary, up to date.
- We keep data confidential and store it in a manner that ensures appropriate security.
- We do not share data with third parties except where necessary to provide the services you ordered or where the law requires us to.
What data we collect
- Account data: name, email address and password (stored encrypted), if you choose to create an account.
- Order data: first and last name, email address, delivery and billing address, phone number, the products ordered and your order history.
- Newsletter data: your email address, only if you have explicitly subscribed.
- Cookies and technical data: information collected automatically through cookies (see the dedicated section below).
Important: we never collect or store your card details. Payment is handled directly by the payment processor Stripe.
Why we process your data
- processing, validating and delivering your orders, including communicating with you about their status (legal basis: performance of the contract);
- issuing invoices and fulfilling our tax and accounting obligations (legal basis: legal obligation);
- handling cancellations, returns or any other issues related to an order (legal basis: performance of the contract and our legitimate interest);
- sending email newsletters, only if you have given your explicit consent; you can unsubscribe at any time via the link in every message (legal basis: consent);
- responding to requests from public authorities (prosecutors, police, courts and other competent bodies), within the limits set by law.
Who we share data with (processors and third parties)
To deliver your orders we work with a limited number of service providers, each receiving only the data strictly necessary for its role:
- Woot (woot.ro) — the shipping platform through which we arrange deliveries, an integrator working with multiple courier companies (for example DPD, Cargus, Sameday): the platform and the courier performing the delivery receive your name, delivery address, phone number and, where needed, email address, strictly for delivery purposes.
- Stripe — the card payment processor: you enter your card details directly into Stripe’s secure form; we never see or store your card number.
- FGO — the platform we use to issue fiscal invoices: receives your billing details.
- Mailchimp — the platform we use to send our newsletter, if you have subscribed.
- Brevo — the service we use for transactional emails (order confirmations, shipping notifications).
- WordPress.com / Automattic — the hosting provider of the shop.
These providers process data on our behalf under contractual confidentiality commitments and in compliance with the GDPR. Some of them may process data outside the European Economic Area; in such cases the transfer takes place under appropriate safeguards (for example standard contractual clauses approved by the European Commission).
How long we keep your data
We use personal data only for the purpose it was collected for and store it only as long as necessary. Account data is kept for as long as your account is active. Order and invoice data is kept for the period required by tax and accounting legislation. Your newsletter email address is kept until you unsubscribe or withdraw your consent.
Security of processing
We apply and maintain appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction or loss, alteration, unauthorised disclosure or access — in particular where processing involves transmitting data over a network — and against any other unlawful form of processing. The connection to the shop is encrypted (HTTPS).
Your rights
Under the GDPR you have the following rights, which you may exercise at any time, free of charge:
- the right of access to the data we process about you;
- the right to rectification of inaccurate or incomplete data;
- the right to erasure (“right to be forgotten”), under the conditions set by law;
- the right to restriction of processing;
- the right to data portability;
- the right to object to processing, including direct marketing;
- the right to withdraw your consent at any time, without affecting the lawfulness of prior processing.
To exercise these rights, write to us at gdpr@bhaktimarga.ro. To help us keep your data accurate, please let us know about any changes.
Complaints
Any question or complaint about the processing of your data can be sent to gdpr@bhaktimarga.ro; we will handle it promptly, in line with our internal procedures. If you believe we have not resolved your request properly, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) — www.dataprotection.ro.
Cookies
The shop uses essential cookies that are necessary for the site to work: keeping your session, your shopping cart and the checkout process. These do not require consent, as they are indispensable to the service you request. If we ever use analytics or marketing cookies, they will be activated only with your prior consent, requested through a dedicated banner, and you will be able to withdraw that consent at any time. You can also control and delete cookies in your browser settings.
Changes to this policy
This policy may be updated from time to time, for example following changes in relevant legislation or in the activity of Telstra SRL. In the event of significant changes, we will notify you by email or through the website before the changes take effect. We encourage you to check this page periodically.