1. General information

The confidentiality of your personal data is one of the main concerns of the[website owner],based in [websiteowner],as a data controller. This document is intended to inform you about the processing of your personal data in the context of using the website [domain name / website name]. (the “Site”)

1. Categories of personal data processed

[Note: to be kept only if applicable] II.1. If you are a customer of the Site, [the owner of the website] will process your personal data, such as your first and last name, telephone, e-mail address, billing address, delivery address, data regarding your use of the Site, for example your behavior/preferences/habits within the [website owner], as well as any other categories of data that you provide directly in the context of creating the user account,        in the context of placing an order through the Website or in any other way resulting from the use of the Site.

If in order to create a user account on the Site, you use your Facebook or Google account, [website owner] will process the following public profile data displayed by those applications: username, e-mail address.

If you choose to create a user account only before completing the order of a product available on the Site, your e-mail address will be requested based on which an account will be automatically created. If you do not complete the order, the e-mail address and other data provided will not be stored by the [website owner], and the created account will be automatically deleted.

II.2. If you are a visitor of the Site, [the owner of the website] will process your personal data that you provide directly in the context of using the Site, such as the data you provide within the contact / questions / complaints section, to the extent that you contact us in this way.

III. Purposes and grounds for processing

III.1. If you are a client of the Site, [the owner of the website] processes your personal data as follows:

• for the development of the contractual relationship between you and the [owner of the website], respectively for the taking over, validation, dispatch and billing of the order placed on the Site, informing you about the status of the order, organizing the return of ordered products, etc.

Basis: The processing of your data for this purpose is based on the contract concluded between you and [the owner of the website], defined in the Terms and Conditions [hyperlink to T&Cs]. The provision of your personal data is necessary for the performance of this contract. The refusal to provide the data may result in the impossibility of carrying out the contractual relations between you and [the owner of the website].

• for the fulfillment of the legal obligations incumbent on [the owner of the website] in the context of the services provided through the Site, including the obligations in tax matters, as well as in the field of archiving.

Grounds: The processing of your data for this purpose is necessary on the basis of legal obligations. The provision of your data for this purpose is necessary. The refusal to provide the data may result in the impossibility of [the owner of the website] to comply with his legal obligations and thus the impossibility to provide you with the services through the Site.

• for marketing activities, respectively for the transmission, through remote communication means (e-mail, sms) of commercial communications regarding the products and services offered by [the owner of the website], through the Site.

Basis: The processing of your data for this purpose is based on your consent, if you choose to provide it. [Note: A separate direct marketing agreement (tick) that is not pre-prepared or that conditions the completion of the order placement must be collected. Proof of agreement must be kept.]

You can express your consent to the processing of data for this purpose by ticking the appropriate box at the time of creating the account, or after creating the account, in the my account information section. To unsubscribe from receiving such commercial communications you can use the option at the end of each e-mail / sms containing commercial communications. In addition, you can unsubscribe by accessing the My Account Information section.

The provision of your data for this purpose is voluntary. The refusal to provide consent to the processing of your data for this purpose will not have negative consequences for you.

• for the purpose of carrying out various analyzes, reporting on the functioning of the Site, creating profiles of consumer preferences, mainly, in order to improve the experience offered on the Site.

Basis: The processing of your data for this purpose is based on the legitimate interest of [the owner of the website] to permanently improve the customer experience on the Site. The provision of your data for this purpose is voluntary. Refusing to provide data for this purpose will not have negative consequences for you.

III.2. If you are a visitor to the Site, [the owner of the website] processes your personal data as follows:

• for marketing activities, respectively for the transmission, through remote communication means (e-mail, sms), of commercial communications regarding the products and services offered by [the owner of the website], through the Site.

Basis: The processing of your data for this purpose is based on your consent, if you choose to provide it.

You can express your consent to the processing of data for this purpose by filling in and ticking the appropriate box in the form for subscribing to the newsletter available on the Site. To unsubscribe from receiving such commercial communications you can use the option at the end of each e-mail / sms containing commercial communications.

The provision of your data for this purpose is voluntary. The refusal to provide consent to the processing of your data for this purpose will not have negative consequences for you.

• to resolve complaints, complaints and to monitor traffic and improve your experience on the Site.

Basis: The processing of your data for this purpose is based on the legitimate interest of the [website owner] to ensure the correct functioning of the Site, as well as to permanently improve the experience of visitors to the Site, including by resolving various comments, questions or complaints.

The provision of your data for this purpose is voluntary. Refusing to provide data for this purpose will not have negative consequences for you.

1. The duration for which we process your data

As a matter of principle, [website owner] will process your personal data for as long as it is necessary to achieve the processing purposes mentioned above.

[Note: only if applicable] If you are a customer, we will process your data for the entire duration of the contractual relations and subsequently according to the legal obligations incumbent on [the owner of the website] (e.g., in the case of financial-accounting supporting documents for which the retention period provided by law is 10 years from the date of the end of the financial year during which they were drawn up).

[Note: only if applicable] If you are a customer and you exercise your option to delete your user account, by pressing the Delete Account button in the My Account Information section, [website owner] will interpret this action as your option to unsubscribe from receiving commercial communications through which we keep you informed about the products and services offered through the site. In this regard, if you choose to delete your user account, we will no longer send you emails and/or sms of this kind. However, we would like to inform you that deleting your account will not automatically have the effect of deleting your personal data. If you wish your personal data to stop being processed or if you want your data deleted, you can exercise the rights detailed in point VII below. If you request the deletion of the account, but there is at least one active order on that account, the request to delete the account will be registered only after the delivery of the products and the completion of the last active order.

If you withdraw your consent to the processing of data for marketing purposes, [the website owner] will cease processing your personal data for this purpose, without affecting the processing carried out by [the website owner] based on the consent expressed by you before its withdrawal.

1. Disclosure of personal data

In order to fulfill the processing purposes, [the owner of the website] may disclose your data to partners, to third parties or entities that support [the website owner] in carrying out the activity through the Site (e.g. courier companies, IT service providers), or to the central / local public authorities, in the following cases exemplificatively listed:

• for the administration of the Site;
• in situations where such communication would be necessary for the award of prizes or other facilities to the data subjects, obtained as a result of their participation in various promotional campaigns organized by the [website owner] through the Site;
• to maintain, personalize and improve the Site and the services carried out through it;
• for conducting data analysis, testing and research, monitoring usage and activity trends, developing safety features and authenticating users;
• for the transmission of commercial marketing communications, under the conditions and limits provided by law;
• when the disclosure of personal data is provided for by law, etc.

1. Transfer of personal data

The personal data provided to [the website owner] may be transferred outside Romania, but only to states in the European Union. [Note: If transferred outside the EU, states should also be mentioned and what the data protection safeguards are in the context of the transfer.]

VII. Your rights

Under the conditions provided by the legislation on the processing of personal data, as data subjects, you benefit from the following rights:

• the right to information, respectively the right to receive details of the processing activities carried out by the [owner of the website], as described in this document;
• the right of access to the data, respectively the right to obtain confirmation from the [website owner] regarding the processing of personal data, as well as details on the processing activities such as the way the data are processed, the purpose for which the processing is made, the recipients or categories of data recipients, etc.;
• the right to rectification, respectively the right to obtain the correction, without justified delays, by the [website owner] of inaccurate / unjustified personal data, as well as the completion of incomplete data; The rectification/ completion will be communicated to each recipient to whom the data were transmitted, unless this proves impossible or involves disproportionate efforts.
• the right to erasure without undue delay (“the right to be forgotten”), if one of the following reasons applies:
  • they are no longer necessary for the purposes for which they were collected or processed;
  • if consent is withdrawn and there is no other legal basis for processing;
  • if the data subject objects to the processing and there are no legitimate grounds to prevail;
  • where the personal data have been processed unlawfully;
  • if personal data need to be deleted for compliance with a legal obligation;
  • the personal data have been collected in connection with the provision of information society services in accordance with Union or national law within which the controller is subject.

It is possible that, following the request to delete the data, the [website owner] will anonymize this data (thus depriving them of its personal character) and continue processing under these conditions for statistical purposes;

• the right to restrict the processing to the extent that:
  • the person disputes the accuracy of the data, for a period that allows us to verify the correctness of the data;
  • the processing is unlawful and the data subject opposes the erasure of the personal data, requesting instead the restriction of their use;
  • the controller no longer needs the personal data for the purposes of the processing, but the data subject requests them for the establishment, exercise or defence of a right in court; or
  • the data subject has objected to the processing (other than direct marketing) for the period of time during which it is verified whether the legitimate rights of the controller prevail over those of the data subject.
• the right to data portability, respectively (i) the right to receive personal data in a structured way, commonly used and in an easy-to-read format, as well as (ii) the right for such data to be transmitted by the [website owner] to another data controller, provided that the conditions laid down by law are met;
• the right to object – in terms of processing activities can be exercised by sending a request as indicated below;
  • at any time, for reasons related to the particular situation of the data subject, that the data concerning him or her are processed on the basis of the legitimate interest of [the website owner] or the public interest, unless [the website owner] can demonstrate that he has legitimate and compelling reasons justifying the processing and prevailing over the interests,       the rights and freedoms of data subjects or that the purpose is to establish, exercise or defend a right in court;
  • at any time, free of charge and without any justification, that the data concerning it be processed for direct marketing purposes.
• the right not to be subject to an automatic individual decision, i.e. the right not to be subject to a decision taken solely on the basis of automated processing activities, including profiling, which produces legal effects concerning the data subject or similarly affects him or her to a significant extent;
• the right to address the National Supervisory Authority for Personal Data Processing or to the competent courts, to the extent that you consider it necessary.

For any further questions on how personal data is processed and to exercise your rights mentioned above, please contact the email address: [to add]. This website uses cookies. For more information on how to use these files, please visit the following link: [to add]