Your personal data privacy is a key concern for Patricia Luiza, headquartered in Romania, as the data controller.

This document aims to inform you about the processing of your personal data in the context of using the website https://en.patricialuiza.com, hereafter referred to as „the site.”

Contents

  • Categories of personal data processed
  • Purposes and legal grounds for processing
  • Duration of data processing
  • Disclosure of personal data
  • Transfer of personal data
  • Your rights
  • Confidentiality of minors
  • Changes to the privacy policy

Categories of Personal Data Processed

If you are a client of the site, en.patricialuiza.com will process the following personal data:

  • Name and surname
  • Phone number
  • Email address
  • Billing address
  • Delivery address
  • Data regarding how you use the site (e.g., your behavior/preferences/habits on the domain)
  • Any other categories of data you directly provide when creating a user account, placing an order, or through any other interaction with the site.

If you create a user account on the site using your Facebook or Google account, en.patricialuiza.com will process the following public profile data displayed by these applications: username, email address.

If you choose to create a user account before finalizing the purchase of a product on the site, you will be required to provide your email address, based on which an account will be automatically created.

If you do not complete the order, the provided email address and other data will not be stored by en.patricialuiza.com, and the created account will be automatically deleted.

If you are a visitor of the site, en.patricialuiza.com will process the personal data you provide:

  • Directly in the context of using the site, such as data provided in the contact/questions/complaints section
  • Indirectly, such as IP address, browser used, browsing duration, search history, operating system used, language, pages viewed, full URLs, click sequences to, through, and from our site, information or products viewed/searched for, visit duration on certain pages, page interaction data (e.g., scrolling, clicks, mouseovers), and user behavior data.

Purposes and Legal Grounds for Processing

If you are a client of the site, en.patricialuiza.com processes your personal data for the following purposes:

  • To execute the contractual relationship between you and en.patricialuiza.com, including the receipt, validation, shipping, and invoicing of orders placed on the site, informing you about the order status, arranging product returns, etc.

Legal Ground: The processing of your data for this purpose is based on the contract between you and en.patricialuiza.com, as defined in the Terms and Conditions. Providing your personal data is necessary to execute this contract. Refusal to provide data may result in the inability to carry out the contractual relationship between you and en.patricialuiza.com.

  • To fulfill legal obligations that en.patricialuiza.com has in the context of services provided through the site, including tax obligations and archiving.

Legal Ground: Processing your data for this purpose is required by legal obligations. Providing your data is necessary. Refusal to provide data may prevent en.patricialuiza.com from fulfilling its legal obligations and from offering services through the site.

  • For marketing activities, including sending commercial communications via remote communication methods (email, SMS) about products and services offered by en.patricialuiza.com through the site.

Legal Ground: The processing of your data for this purpose is based on your consent, if you choose to provide it.

You can express your consent for data processing for this purpose by checking the appropriate box when creating your account or later, in the „My Account Information” section.

To unsubscribe from such commercial communications, you can use the option at the end of each email/SMS containing commercial messages. You can also unsubscribe by accessing the „My Account Information” section.

Providing your data for this purpose is voluntary. Refusing to provide consent will not have any negative consequences for you.

  • For various analyses and reports regarding how the site functions, creating consumer preference profiles, and improving the site experience.

Legal Ground: Processing your data for this purpose is based on en.patricialuiza.com’s legitimate interest in continuously improving the customer experience on the site. Providing your data for this purpose is voluntary. Refusing to provide data will not negatively affect you.

If you are a site visitor, en.patricialuiza.com processes your personal data for the following purposes:

  • For marketing activities, including sending commercial communications via email/SMS regarding products and services offered by en.patricialuiza.com.

Legal Ground: Processing your data for this purpose is based on your consent, if you choose to provide it.

You can express your consent by filling out and checking the appropriate box in the newsletter subscription form available on the site.

To unsubscribe from receiving such commercial communications, you can use the option at the end of each email/SMS containing commercial messages.

Providing your data for this purpose is voluntary. Refusing to provide consent will not have negative consequences for you.

  • For resolving complaints and improving your experience on the site.

Legal Ground: Processing your data for this purpose is based on en.patricialuiza.com’s legitimate interest in ensuring the proper functioning of the site and continuously improving the experience of site visitors, including by addressing various comments, questions, or complaints.

Providing your data for this purpose is voluntary. Refusing to provide data will not negatively affect you.

Duration of Data Processing

En.patricialuiza.com will process your personal data as long as necessary to achieve the purposes mentioned above.

If you are a customer, we will process your data for the entire duration of the contractual relationship and afterward, in accordance with en.patricialuiza.com’s legal obligations (e.g., for financial-accounting records, which must be kept for 10 years from the end of the fiscal year in which they were issued).

If you are a customer and you choose to delete your user account by clicking the „delete account” button in the „My Account Information” section, en.patricialuiza.com will interpret this action as your choice to unsubscribe from receiving commercial communications.

If you choose to delete your account, we will no longer send you emails and/or SMS messages of this kind.

However, we would like to inform you that deleting your account will not automatically erase your personal data.

If you no longer want your personal data processed or if you want your data deleted, you can exercise your rights, detailed in section 6 below.

If you request the deletion of your account, but you have at least one active order, the account deletion request will only be recorded after the products have been delivered, and the last active order has been completed.

If you withdraw your consent for data processing for marketing purposes, en.patricialuiza.com will cease processing your personal data for this purpose, without affecting the processing carried out by en.patricialuiza.com based on the consent provided before its withdrawal.

Disclosure of Personal Data

We do not rent or sell your personal data to third parties.

In addition to the controller, in certain situations, your data may be accessible to third parties, such as service providers, transport operators, hosting providers, IT companies, and others, who may be designated as processors, if necessary.

These entities are contractually obligated to maintain the confidentiality of the data and to use it exclusively for the purposes for which it was provided.

We may also disclose your personal data to central or local public authorities in the following cases:

  • For site administration
  • When such communication is necessary to award prizes or other benefits to individuals, as a result of their participation in promotional campaigns organized by en.patricialuiza.com
  • For maintaining, personalizing, and improving the site and the services provided through it
  • For data analysis, testing and research, usage trend monitoring, development of security features, and user authentication
  • For sending marketing communications, as per legal conditions and limits
  • When the disclosure of personal data is required by law, etc.

Transfer of Personal Data

Personal data provided to en.patricialuiza.com may be transferred outside Romania, but only to countries within the European Union.

Your Rights

Under data protection legislation, as a data subject, you have the following rights:

  • The right to information – the right to receive details about the processing activities carried out by en.patricialuiza.com, as described in this document;
  • The right of access to data – the right to obtain confirmation from en.patricialuiza.com regarding the processing of your personal data, as well as details of the processing activities;
  • The right to rectification – the right to have incorrect or unjustified personal data corrected by en.patricialuiza.com without undue delay;
  • The right to data erasure without undue delay („the right to be forgotten”) – subject to certain conditions;
  • The right to restrict data processing, under certain conditions;
  • The right to data portability – the right to receive personal data in a structured, commonly used, and machine-readable format, and to have this data transferred to another data controller;
  • The right to object to processing, for reasons related to your particular situation, in cases where the data processing is based on en.patricialuiza.com’s legitimate interest or a public interest, unless en.patricialuiza.com can demonstrate compelling legitimate grounds for processing that outweigh your interests;
  • The right to object, at any time, to the processing of data for direct marketing purposes, free of charge and without any justification;
  • The right not to be subject to automated decision-making, including profiling, which produces legal effects concerning you;
  • The right to file a complaint with the National Supervisory Authority for Personal Data Processing or the competent courts.

For any additional questions regarding how your personal data is processed or to exercise your rights, please contact us at info@en.patricialuiza.com.

Confidentiality of Minors

En.patricialuiza.com does not knowingly collect personal data from minors.

If a parent or legal guardian becomes aware that their minor child has provided en.patricialuiza.com with personal data, they must notify en.patricialuiza.com immediately.

If en.patricialuiza.com discovers that any user is under 16 years of age, their account will be deleted immediately, along with all related personal data.

Changes to the Privacy Policy

This privacy policy may be subject to updates from time to time. Any changes to the privacy policy will be communicated through the website or via email.

Updated September 2024.