Privacy Policy

The confidentiality of your personal data is one of the main concerns of SC Editura ATMAN SRL, headquartered in Bucharest, Romania, as the data controller, hereinafter referred to as the "Controller".

This document is intended to inform you about the processing of your personal data by the Controller in the context of using the website Eufloria.ro, hereinafter referred to as the "site".

Contents

Categories of personal data processed
Purposes and legal bases of processing
Retention period
Disclosure of personal data
Transfer of personal data
Your rights
Children’s privacy
Changes to the privacy policy

1. Categories of personal data processed

A. If you are a customer of the site, the Controller will process your personal data, such as:

First and last name
Phone number
Email address
Billing address
Shipping address
Data regarding how you use the site (for example, your behavior/preferences/habits within the site)
As well as any other categories of data that you provide directly when creating a user account, when placing an order through the site, or in any other way resulting from your use of the site.

If you use your Facebook or Google account to create a user account on the site, we will process the following public profile data displayed by those applications: username and email address.

If you choose to create a user account only right before finalizing an order for a product available on the site, your email address will be requested, based on which an account will be created automatically.

If you do not finalize the order, your email address and the other data provided will not be stored by the Controller, and the account created will be automatically deleted.

B. If you are a visitor to the site, the Controller will process the personal data you provide:

Directly, in the context of using the site, such as data you provide in the contact/questions/complaints section, insofar as you contact us in this way
Indirectly, data such as: IP address, browser used, browsing duration, search history, operating system used, language and pages viewed, full URLs, clickstream to, through and from our site, information or products viewed/searched, duration of visits on certain pages, information regarding interaction with pages (e.g., scrolling, clicks, mouse-overs), user behavior data.

2. Purposes and legal bases of processing

A. If you are a customer of the site, we process your personal data as follows:

for the performance of the contractual relationship between you and the Controller, namely for receiving, validating, shipping and invoicing the order placed on the site, informing you about the status of the order, organizing the return of ordered products, etc.

Legal basis: The processing of your data for this purpose is based on the contract concluded between you and the Controller, as defined in the Terms and Conditions https://eufloria.ro/termeni-si-conditii. Providing your personal data is necessary for the performance of this contract. Refusal to provide the data may result in the inability to carry out the contractual relationship between you and SC Editura ATMAN SRL.

for fulfilling legal obligations arising in the context of the services provided via the site, including tax obligations and archiving obligations.

Legal basis: Processing your data for this purpose is necessary to comply with legal obligations. Providing your data for this purpose is necessary. Refusal to provide the data may result in the inability to comply with legal obligations and therefore in the inability to provide the services via the site.

for marketing activities, namely sending, by means of distance communication (email, SMS), commercial communications regarding the products and services offered by the Controller via the site.

Legal basis: Processing your data for this purpose is based on your consent, if you choose to provide it.

You can express your consent for processing in this purpose by ticking the corresponding box at the time of account creation, or after creating the account, in the “my account information” section.

To unsubscribe from receiving such commercial communications, you can use the option at the end of each email/SMS containing commercial communications. In addition, you can unsubscribe by accessing the “My account information” section.

Providing your data for this purpose is voluntary. Refusing to consent to processing for this purpose will not have negative consequences for you.

for various analyses, reporting on the operation of the site, creating consumer preference profiles, mainly to improve the experience offered on the site.

Legal basis: Processing your data for this purpose is based on the legitimate interest of the Controller to continuously improve the customer experience on the site. Providing your data for this purpose is voluntary. Refusal to provide the data for this purpose will not have negative consequences for you.

B. If you are a visitor to the site, the Controller processes your personal data as follows:

for marketing activities, namely sending, by means of distance communication (email, SMS), commercial communications regarding the products and services offered by the Controller via the site.

Legal basis: Processing your data for this purpose is based on your consent, if you choose to provide it.

You can express your consent for processing in this purpose by completing and ticking the corresponding box in the newsletter subscription form available on the site.

To unsubscribe from receiving such commercial communications, you can use the option at the end of each email/SMS containing commercial communications.

Providing your data for this purpose is voluntary. Refusing to consent to processing for this purpose will not have negative consequences for you.

for handling complaints, and to monitor traffic and improve your experience on the site.

Legal basis: Processing your data for this purpose is based on the Controller’s legitimate interest to ensure the proper functioning of the site and to continuously improve the visitors’ experience, including by addressing various comments, questions or complaints.

Providing your data for this purpose is voluntary. Refusal to provide the data for this purpose will not have negative consequences for you.

3. Retention period

The Controller will process your personal data for as long as necessary to achieve the processing purposes mentioned above.

If you are a customer, we will process your data for the entire duration of the contractual relationship and thereafter in accordance with our legal obligations (e.g., for accounting documents for which the statutory retention period is 10 years from the end of the financial year in which they were issued).

If you are a customer and exercise your option to delete your user account by pressing the “delete account” button in the “my account information” section, the Controller will interpret this action as your option to unsubscribe from receiving commercial communications by which we keep you informed about the products and services offered via the site.

In this regard, if you choose to delete your user account, we will no longer send you such emails and/or SMS messages.

However, please note that deleting the account will not automatically result in the deletion of your personal data.

If you want your personal data to no longer be processed or if you want your data to be deleted, you can exercise your rights detailed in section 6 below.

If you request the deletion of your account but there is at least one active order on that account, the deletion request can be registered only after the delivery of the products and the completion of the last active order.

If you withdraw your consent for the processing of data for marketing purposes, the Controller will stop processing your personal data for this purpose, without affecting processing carried out based on the consent you provided before its withdrawal.

4. Disclosure of personal data

We do not rent or sell your personal data to third parties.

In addition to the Controller, in certain situations, the data may be accessible to third parties such as service providers, carriers, hosting providers, IT companies, which may be appointed, where necessary, as processors on behalf of the Controller.

These entities are contractually obliged to maintain the confidentiality of the data and to use it solely for the purpose for which it was provided.

We may also disclose your personal data to central/local public authorities in the following cases, by way of example:

for the administration of the site
in situations where such communication is necessary for awarding prizes or other benefits to data subjects, obtained as a result of their participation in promotional campaigns organized by the Controller via the site;
for maintaining, customizing and improving the site and the services carried out through it
for performing data analysis, testing and research, monitoring usage and activity trends, developing security features and authenticating users
for sending marketing commercial communications, under the conditions and within the limits provided by law
when the disclosure of personal data is provided by law, etc.

5. Transfer of personal data

The personal data provided to the Controller may be transferred outside Romania, but only to countries within the European Union.

6. Your rights

Under the legislation on the processing of personal data, as a data subject, you have the following rights:

right to be informed – the right to receive details regarding the processing activities carried out by the Controller, as described in this document;
right of access – the right to obtain confirmation as to whether personal data concerning you is being processed, as well as details regarding the processing activities, such as how the data is processed, the purpose of processing, the recipients or categories of recipients, etc.;
right to rectification – the right to obtain, without undue delay, the correction by the Controller of inaccurate/unjustified personal data, as well as the completion of incomplete data;
right to erasure (the “right to be forgotten”) – subject to certain conditions; following a request for erasure, the Controller may anonymize this data (thus removing its personal character) and continue processing for statistical purposes;
right to restriction of processing, under certain conditions;
right to data portability – the right to receive your personal data in a structured, commonly used and machine-readable format and to have this data transmitted by the Controller to another data controller, where the legal conditions are met;
right to object
– regarding processing activities, this may be exercised by submitting a request as indicated below;
– at any time, on grounds relating to your particular situation, to processing based on the Controller’s legitimate interest or on public interest, except where the Controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims;
– at any time, free of charge and without any justification, to processing for direct marketing purposes.
right not to be subject to an automated individual decision – the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you;
right to lodge a complaint with the National Supervisory Authority for Personal Data Processing or with the competent courts, as you consider necessary.

For any additional questions regarding how personal data is processed and to exercise your rights mentioned above, please contact us at: office@eufloria.ro

7. Children’s privacy

The Controller does not knowingly contact or collect information from persons under the age of 18. The website does not aim to request information of any kind from persons under the age of 18.

If, by mistake, we come into possession of such information and are notified of this, we will obtain appropriate parental consent to use that information or, if this is not possible, we will delete the information from our servers.

If you wish to notify us about the receipt of information concerning persons under the age of 18, please contact us by email at office@eufloria.ro

8. Changes to the privacy policy

We reserve the right to modify this privacy policy. In the event of major changes in the future, you will be notified by email (where possible) or by displaying a specific message on the site.

This website uses cookies. For more information about how these files are used, please access the following link: https://www.eufloria.ro/politica-de-cookies