I. General Information
The confidentiality of your personal data is one of the primary concerns of JAMES TREVINO and ELIZABETH SAGAN (hereinafter referred to as the WEBSITE OWNER), as a data controller. This document is intended to inform you about the processing of your personal data in the context of using the website you are currently visiting.
II. Categories of Processed Personal Data
II.1. If you are a customer of the Website, the WEBSITE OWNER will process your personal data, such as your first and last name, phone number, email address, billing address, delivery address, data related to how you use the Website (e.g., behavior/preferences/habits within the WEBSITE OWNER), as well as any other categories of data you provide directly in the context of creating a user account, placing an order through the Website, or in any other way resulting from using the Website.
If you create a user account on the Website using your Facebook or Google account, the WEBSITE OWNER will process the following public profile data displayed by these applications: username and email address.
If you choose to create a user account just before completing the order for a product available on the Website, your email address will be requested, and an account will be created automatically. If you do not complete the order, your email address and other provided data will not be stored by the WEBSITE OWNER, and the automatically created account will be deleted.
II.2. If you are a visitor to the Website, the WEBSITE OWNER will process your personal data that you provide directly in the context of using the Website, such as the data you provide in the Contact/Questions/Complaints section, to the extent that you contact us in this way.
III. Purposes and Legal Grounds for Processing
III.1. If you are a customer of the Website, the WEBSITE OWNER processes your personal data as follows:
For carrying out the contractual relationship between you and the WEBSITE OWNER, including order processing, validation, shipping, invoicing, order status updates, handling product returns, etc.
Legal basis: Processing your data for this purpose is based on the contract concluded between you and the WEBSITE OWNER, as defined in the Terms and Conditions. Providing your personal data is necessary for contract execution. Refusal to provide data may result in the inability to carry out the contractual relationship.
For fulfilling legal obligations related to the services provided through the Website, including tax obligations and archiving requirements.
Legal basis: Processing your data for this purpose is necessary to comply with legal obligations. Refusal to provide data may prevent the WEBSITE OWNER from fulfilling its legal obligations and consequently, from providing services through the Website.
For marketing activities, including sending commercial communications via email or SMS regarding products and services offered by the WEBSITE OWNER through the Website.
Legal basis: Processing your data for this purpose is based on your consent, if you choose to provide it. You can express your consent by checking the corresponding box when creating an account or later in the My Account Information section. You can unsubscribe at any time using the option at the end of each marketing email/SMS or by updating your preferences in My Account Information.
Providing your data for this purpose is voluntary. Refusing to provide consent will not have negative consequences for you.
For analysis and reporting, such as monitoring Website performance, analyzing user behavior, and creating consumer preference profiles to improve the Website experience.
Legal basis: Processing your data for this purpose is based on the legitimate interest of the WEBSITE OWNER in continuously improving the customer experience. Providing your data for this purpose is voluntary. Refusal will not have negative consequences for you.
III.2. If you are a visitor to the Website, the WEBSITE OWNER processes your personal data as follows:
For marketing activities, including sending promotional communications via email or SMS regarding the WEBSITE OWNER’s products and services.
Legal basis: Processing your data for this purpose is based on your consent, if you choose to provide it. You can express consent by filling out the newsletter subscription form on the Website. You can unsubscribe at any time using the option at the end of each marketing email/SMS.
Providing your data for this purpose is voluntary. Refusing to provide consent will not have negative consequences for you.
For complaint resolution and monitoring website traffic to improve the Website experience.
Legal basis: Processing your data for this purpose is based on the legitimate interest of the WEBSITE OWNER in ensuring the proper functioning of the Website and improving visitor experience.
Data Retention Period
As a principle, the WEBSITE OWNER will process your personal data for as long as necessary to achieve the processing purposes mentioned above.
- If you are a customer, your data will be processed for the duration of the contractual relationship and thereafter according to legal obligations (e.g., financial and accounting documents must be kept for 10 years).
- If you request the deletion of your user account, the WEBSITE OWNER will interpret this as an unsubscribe request for marketing communications. However, account deletion does not automatically mean that your personal data will be deleted unless you request it specifically.
Disclosure of Personal Data
For processing purposes, the WEBSITE OWNER may disclose your personal data to partners, third parties, or entities supporting the WEBSITE OWNER in operating the Website (e.g., courier services, IT service providers) or public authorities in the following cases:
- For website administration;
- To fulfill legal obligations;
- To process user requests (e.g., complaints, marketing campaigns);
- To improve the Website’s functionality and security.
Transfer of Personal Data
Personal data provided to the WEBSITE OWNER will not be transferred outside of Romania.
VII. Your Rights
According to data protection legislation, as a data subject, you have the following rights:
- Right to information – to receive details about data processing.
- Right to access – to obtain confirmation that your data is being processed.
- Right to rectification – to request corrections to inaccurate/incomplete data.
- Right to erasure (“Right to be forgotten”) – under specific legal conditions.
- Right to restrict processing – in certain circumstances, such as disputes over accuracy or unlawful processing.
- Right to data portability – to receive your data in a structured format and transmit it to another controller.
- Right to object – to processing based on legitimate interest or for direct marketing.
- Right not to be subject to automated decisions – including profiling that significantly affects you.
- Right to lodge a complaint – with the National Authority for the Supervision of Personal Data Processing or in court.
If you request data deletion, the WEBSITE OWNER may anonymize data for statistical purposes.