1. Data controller
The data controller is VIANOVEX S.R.L., with registered office at Aleea Slt. Carstea Adrian 13, Bl. 37, Scara 2, Etaj 8, Ap. 141, 031838, Bucharest, Romania. For any request regarding your data, contact us at support@oferex.ro.
Legal
Privacy Policy
Last updated: September 28, 2026
VIANOVEX S.R.L. ("Oferex", "we", "our") respects the privacy of your data. This policy explains what data we collect, why we use it, how we protect it, and what rights you have under the General Data Protection Regulation (GDPR, EU Regulation 2016/679) and Romanian Law no. 190/2018.
2. Data we collect
We collect: (a) account data: your phone number and/or email address (used to sign in with one-time codes; we do not use passwords), first and last name, display name and username, and date of birth (to confirm you are at least 18); (b) profile data you choose to add: profile photo, bio, anniversary date, cuisine preferences and dietary restrictions; (c) activity data: offers you save and redeem, reservations (date, time, party size and any notes you write for the restaurant), reviews (star rating and text), points, streaks, stamp cards and invites you send to friends; (d) location data, described in section 3; (e) technical data: IP address, device type, operating system and app version, a random installation identifier generated by the app and, if you allow notifications, a push notification token; (f) crash reports and performance data, described in section 7; (g) if you work for a partner restaurant and use Oferex Business: your name, email address, phone number, the locations you work at and the actions you record in the app (codes scanned, reservations confirmed or declined). The Oferex Business camera is used only to scan customer codes: images are processed on your device and only the scanned code is sent to us. We do not collect your contacts, calendar or payment data, we do not use the advertising identifier and we do not track you across other companies' apps or websites. Search terms are used only to answer your search and are not stored.
3. Location
If you allow location access, the Oferex app uses your device's precise location (GPS) while you are using the app, to show offers and restaurants near you and sort them by distance. Coordinates are sent with each request for nearby offers. They are not saved to your account and we do not keep a history of your locations. They can appear in our technical server logs, which are deleted automatically after 30 days. We also store your home region (city or area) for regional leaderboards and, when you collect a stamp at a restaurant, your distance from that restaurant, to help us detect misuse. The app never uses your location in the background. If you do not allow location access, you can choose a city manually.
4. How we use the data
We use your data to: (a) provide the service: nearby offers and restaurants, codes for redeeming offers, reservations, the loyalty program, reviews, and notifications about your reservations and redemptions; (b) sign you in and keep your account secure: one-time codes sent by SMS or email, fraud and abuse prevention; (c) improve the product: crash reports, performance monitoring and aggregated statistics; (d) communicate with you: account, reservation and redemption emails and notifications, technical support and, only with your consent, marketing messages; (e) comply with legal obligations: accounting records, fraud prevention and requests from public authorities.
5. Legal basis
Processing is based on: contract performance (art. 6(1)(b) GDPR) for the app's operation; your consent (art. 6(1)(a)) for location access, push notifications, marketing messages and optional website cookies, which you can withdraw at any time in your device settings, in the app or from the Cookies link on this website; legitimate interest (art. 6(1)(f)) for security, fraud prevention, crash reporting and product improvement; legal obligation (art. 6(1)(c)) for tax and accounting compliance.
6. Who we share data with
We share data only with: (a) partner restaurants: when you redeem an offer, staff see your first name and the last 4 digits of your phone number; when you make a reservation, the restaurant receives your full name, phone number and the booking details, including any notes you write; (b) other Oferex users: your name and profile photo appear next to reviews you publish, and your username and display name can appear on leaderboards; (c) the service providers listed in section 7, who process data only on our instructions; (d) public authorities, only when legally required. We never sell your data and we do not share it for advertising.
7. Service providers
We use these providers to run Oferex: Amazon Web Services (servers, database, file storage, hosting of this website and transactional email through Amazon SES, in the Frankfurt, Germany region); Twilio (sending SMS verification codes to your phone number); Google (maps in the Oferex app through Google Maps, and push notifications on Android through Firebase Cloud Messaging); Apple (push notifications on iOS through the Apple Push Notification service); Sentry (crash and error reports, stored in the EU; when an error occurs, a report can include a short replay of the screen in which text and images are masked); New Relic (server performance monitoring, EU region); ImageKit (delivering images such as profile photos and restaurant pictures); Bunny.net (delivering restaurant videos); Anthropic (suggesting offer text for partner restaurants in the tools they use to create offers; no data about Oferex users is sent); PostHog (usage analytics for the partner restaurants' web dashboard, EU region); on this website, Plausible (cookieless visitor statistics) and, only if you accept analytics cookies, Google Analytics and Microsoft Clarity.
8. International transfers
Our core infrastructure (servers, database, file storage and email) runs on Amazon Web Services in Frankfurt, Germany, and Sentry, New Relic and PostHog store our data in the EU. Some of the providers in section 7 may process data outside the European Economic Area, including in the United States: Twilio, Google, Apple, Microsoft, ImageKit and Anthropic, as well as the content delivery networks that serve images and videos from locations close to you. When that happens, the transfer is protected by the European Commission's standard contractual clauses or, for providers certified under it, the EU-U.S. Data Privacy Framework.
9. How long we keep the data
We keep your account data while your account is active. When you delete your account, deletion takes effect immediately (see section 10). Other data is kept for fixed periods: one-time sign-in codes, 90 days; expired sessions and unused push tokens, 90 days; records of emails we send, 180 days; server logs, 30 days; security audit logs, 18 months. Earlier copies of a deleted profile photo are removed from storage within 90 days.
10. Deleting your account
You can delete your account at any time in the Oferex app: Account → Account settings → Delete account, then confirm with the one-time code we send you. Deletion takes effect immediately and cannot be undone: we irreversibly erase your name, username, display name, phone number, email address, date of birth, anniversary date, bio, preferences and profile photo, and we delete your sessions, push tokens and saved offers. Your reviews are no longer shown and upcoming reservations are cancelled. We keep your past redemptions, reservations and points, and the rating and text of your reviews, linked only to the anonymized account, not to your name or contact details, together with consent and security records. If your account manages a restaurant, transfer or remove that role first. If you cannot access the app, follow the steps at oferex.ro/en/support#delete-account or email support@oferex.ro from the email address on the account, or tell us the phone number on the account so we can confirm it is yours. You can also download a copy of your data from Account settings → Download my data.
11. Your rights
Under GDPR, you have the right to: access your data, rectification, erasure ("right to be forgotten"), restriction of processing, portability (you can download a copy of your data in the app, under Account settings → Download my data), objection to processing, withdrawal of consent at any time, and lodging a complaint with the Romanian Data Protection Authority (ANSPDCP). To exercise your rights, email support@oferex.ro. We reply within 30 days.
12. Cookies and similar technologies
The Oferex apps do not use the advertising identifier and do not track you. On this website we use strictly necessary cookies (for example, to remember your language and your cookie choice), cookieless statistics from Plausible and, only if you accept them, Google Analytics and Microsoft Clarity cookies, to understand how the site is used. You can change your choice at any time from the Cookies link at the bottom of every page. The partner restaurants' web dashboard uses only the cookies it needs to work, such as keeping you signed in and remembering your layout.
13. Data security
We apply appropriate technical and organizational measures: TLS encryption in transit, sign-in with one-time codes instead of passwords, encryption at rest for sensitive data, multi-factor authentication for internal staff, periodic security audits, principle of least privilege. No system is perfect. In case of incident, we will notify authorities and affected users per GDPR.
14. Minors
Oferex is only for people aged 18 or over. We ask for your date of birth when you create an account and do not allow anyone under 18 to sign up. We do not knowingly collect data about minors. If you learn that a minor has created an account, please contact us. We will delete the account and associated data.
15. Policy changes
We may update this policy to reflect legislative or product changes. We notify active users by email at least 30 days before any material change. The current version is always available at oferex.ro/privacy.
16. Contact
For any question or request regarding your data: support@oferex.ro · +40 787 742 536 · VIANOVEX S.R.L., Aleea Slt. Carstea Adrian 13, Bl. 37, Scara 2, Etaj 8, Ap. 141, 031838, Bucharest, Romania.