Policy on Cookies and Similar Technologies

Operator details

• Operator: PEROMA HUMAN RESOURCES SRL
• CUI: 45080395
• Trade Register No.: J2021001969330
• EUID: ROONRC.J2021001969330
• Registered office: Str. Mihail Sebastian 31 Bl. S8 Sc. 1 Ap. 27, Sector 5, Bucharest
• Postal code as provided: 05077

Preamble

Information about the storage of and access to information on the devices of RA DELIVERY users

RA DELIVERY does not activate optional cookies for analytics, personalization, or marketing before consent. Strictly necessary cookies are used only for the requested functions, security, and service continuity.

Public document prepared for use on the RA DELIVERY website and applications. Mandatory rights provided by law prevail over any contrary contractual provision.

1. The Operator and the Scope of the Policy

This policy applies to the radelivery.com website, the web application, the account and ordering pages, as well as other RA DELIVERY interfaces that use cookies, local storage, device identifiers, SDKs, or similar technologies.

The operator of the Platform and, for the data processed through these technologies, the data controller is PEROMA HUMAN RESOURCES SRL, with the identification details presented on the first page.

Questions regarding cookies and privacy: [email protected]

Data protection contact: [email protected]

2. What Cookies and Similar Technologies Are

Cookies are small text files stored by the browser on a computer, phone, tablet, or other device. They allow a website to recognize a session, retain a preference, secure authentication, or measure how the service operates.

Similar technologies include local storage, session storage, application identifiers, mobile SDKs, pixels, tags, and technical tokens. In this policy, the term "cookie" includes them when they have a comparable function.

Some technologies are placed directly by RA DELIVERY, and others by providers that supply technical, authentication, mapping, security, payment, analytics, or communication services.

3. The Principles Applied by RA DELIVERY

Refusing optional cookies does not prevent access to the Platform's basic functions. Some optional preferences, measurements, or integrations may become unavailable.

• clear information before optional cookies are stored or accessed;
• separate options for acceptance, rejection, and customization, without optional categories being enabled by default;
• the ability to withdraw consent as easily as it was given;
• limiting duration and data to what is necessary for the stated purpose;
• protecting authentication, orders, and payments against fraud and unauthorized access;
• updating the technical inventory when the Platform or the providers change.

4. The Legal Basis for the Use of Cookies

Cookies that are strictly necessary for the transmission of a communication or for the provision of a function expressly requested may be used without consent, within the limits provided by Law no. 506/2004 and the applicable legislation.

Cookies for non-essential preferences, analytics, measurement, advanced personalization, and marketing are activated only after the User's consent. If the information collected constitutes personal data, the processing also complies with the GDPR.

Consent is recorded together with the version of the options, the date, the time, and the technical identifiers necessary to demonstrate the preference and to prevent the unjustified reappearance of the banner.

5. The Categories Used

• Category: Strictly necessary — Main purposes: Session, authentication, security, fraud prevention, cart, checkout, order, remembering the cookie preference, and traffic balancing. — Examples of functions: Session token, CSRF protection, consent identifier, order status, technical payment token. — Duration and control: Session up to 12 months, depending on the function. Cannot be disabled from the cookie center.
• Category: Preferences — Main purposes: Remembering the language, area, display options, and non-essential choices. — Examples of functions: Language, last selected area, filter order, interface preferences. — Duration and control: Session up to 12 months. Activated with consent when not necessary for the requested function.
• Category: Analytics and performance — Main purposes: Measuring traffic, errors, speed, feature usage, and conversion in order to improve the service. — Examples of functions: Pages visited, aggregated events, visit source, browser/application version, error reports. — Duration and control: Generally up to 24 months. Only with consent.
• Category: Personalization — Main purposes: Adapting content, the order of results, and recommendations based on interactions and preferences. — Examples of functions: Preferred restaurants or categories, local recommendations, options kept between sessions. — Duration and control: Generally up to 12 months. Only with consent, unless part of a requested function.
• Category: Marketing and measurement — Main purposes: Campaign attribution, frequency capping, offer measurement, and displaying relevant communications. — Examples of functions: Campaign parameters, conversions, audiences, interactions with promotions. — Duration and control: Generally up to 24 months. Only with consent.

6. First-Party and Third-Party Cookies

First-party cookies are set by the RA DELIVERY domain or by the technical infrastructure used on behalf of the Operator. Third-party cookies are controlled by a separate provider, which may independently determine some of the purposes and means of the processing.

Depending on the functions used and the active configuration, the Platform may interact with the following categories of providers:

The fact that a provider is mentioned does not mean that all of its services or all of its cookies are active. The technology is initiated only when the corresponding function is available and used, and consent is requested when the law requires it.

For the operations strictly necessary for a requested payment, the payment provider may use security and anti-fraud technologies indispensable to the transaction. For the provider's own analytics or marketing, that provider's options and policy apply.

• Google, when the User chooses to sign in with Google or uses map, geocoding, or routing functions;
• NETOPIA Payments, EuPlatesc, PayU, Revolut Business, and Stripe, when one of these providers is displayed and used for a transaction;
• providers of hosting, security, content delivery, e-mail, notifications, technical monitoring, and fraud prevention;
• app stores and operating system providers, for installation, updates, notifications, and the application's native functions.

7. The Duration of Cookies

Session cookies are generally deleted when the browser is closed or when the session expires. Persistent cookies remain until their expiry date, until they are deleted by the User, or until consent is withdrawn, as applicable.

The durations in the table are general limits. The inventory displayed in "Cookie Preferences" indicates, for the technologies active at that time, the name, the provider, the purpose, the category, and the exact duration. In the event of a technical difference, the current inventory prevails for identifying the actual cookie, and this policy prevails for the general legal rules.

RA DELIVERY periodically reviews cookies and removes identifiers that have expired, are unused, or no longer correspond to a legitimate purpose.

8. The Banner and the "Cookie Preferences" Center

On the first visit and whenever the options need to be renewed, the User may:

The reject button is available at the same level of interaction as acceptance, and the optional checkboxes are not pre-selected. Closing the banner without an affirmative action is not treated as consent for optional cookies.

The preferences can be reopened at any time through the "Cookie Preferences" link in the Platform's footer or, when the function is available, from the privacy section of the account.

• accept all optional categories;
• reject all optional categories and continue with the strictly necessary cookies;
• select the desired categories separately and save the choice;
• consult the information about providers, purposes, and durations before deciding.

9. Withdrawal of Consent

Withdrawal takes effect for the future and does not affect the lawfulness of the processing carried out before the withdrawal. After saving, RA DELIVERY stops initiating the optional technologies and requests the providers controlled by the Operator to respect the new choice.

Some cookies already placed must be deleted from the browser for immediate removal. The preferences center will attempt to delete them where the technology allows; the User may also use the browser or device settings.

If the User deletes the cookie that stores the choice, the banner may reappear, because the Platform can no longer recognize the previous preference.

10. Browser and Device Settings

Most browsers allow viewing, blocking, and deleting cookies from the "Privacy", "Security", or "Site data" sections. The exact instructions differ between Chrome, Safari, Firefox, Edge, Opera, and their mobile versions.

Blocking all cookies in the browser may prevent authentication, keeping the cart, securing the checkout, remembering consent, and other essential functions. It is recommended to use the RA DELIVERY center for the optional categories and the browser for additional control.

In the mobile applications, permissions for location, notifications, identifiers, and storage access are managed from the iOS or Android settings. Disabling a permission may limit the function that depends on it.

11. The Data Collected Through Cookies

Depending on the category, cookies may process the IP address, the session identifier, the account ID in pseudonymized form, the device type, the browser, the operating system, the language, the time zone, the pages and events used, the campaign reference, errors, response times, and the consent options.

Cookies are not designed to store the password or the full card number in clear text. Sensitive payment data is entered and processed in the secure environment of the payment provider, when the checkout is configured this way.

The information may be combined with account data only if there is a legal basis and if this use is explained in the Privacy Policy or in the relevant interface.

12. Transfers, Recipients, and Security

Technical providers may receive data only to the extent necessary for their service. RA DELIVERY uses contracts, access controls, encryption in transit, privilege limitation, and other appropriate measures to protect the information.

If a provider processes data outside the European Economic Area, the transfer is carried out on the basis of a mechanism recognized by the GDPR, such as an adequacy decision, standard contractual clauses, and supplementary measures, as applicable.

Third-party policies apply to the processing that those parties carry out as independent controllers. RA DELIVERY does not control the cookies placed on a third-party website after the User leaves the Platform.

13. Users' Rights

When the data obtained through cookies constitutes personal data, the User may request access, rectification, erasure, restriction, portability, objection, and withdrawal of consent, under the conditions of the GDPR. The rights and the procedure are fully described in the RA DELIVERY Privacy Policy.

Requests regarding personal data: [email protected]

Data protection contact: [email protected]

The User may lodge a complaint with the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (the Romanian national supervisory authority for personal data processing), without losing the right to other remedies.

14. Amendment of the Policy

RA DELIVERY may update this policy to reflect technical, legal, or provider-related changes. The date of the version is displayed on the first page. If a change materially affects the purposes for which consent was given, the Platform requests a new choice before activating the relevant technologies.

15. Contact

Operator: PEROMA HUMAN RESOURCES SRL

Registered office: Str. Mihail Sebastian 31, Bl. S8, Sc. 1, Ap. 27, Sectorul 5, București, postal code 05077

Website: https://radelivery.com/

Privacy: [email protected]

Data protection: [email protected]

General support: [email protected]

Version history: Version: 1.0 — Date: 17 July 2026 — Description: Initial consolidated version for the RA DELIVERY website and applications.

Main normative references:

The list is for information purposes and does not limit the application of other national or European Union rules relevant to the services offered through RA DELIVERY.

• Law no. 506/2004 on the processing of personal data and the protection of privacy in the electronic communications sector;
• Regulation (EU) 2016/679 on the protection of personal data (GDPR);
• Law no. 190/2018 on measures implementing the GDPR;
• the relevant guidelines of the European Data Protection Board and of the competent authorities regarding consent and tracking technologies.