1. About this policy
Our privacy and personal data processing policy describes the personal information we collect from you or that you provide, and how this information may be used or disclosed by us.
2. The controller of your data
The controller of your personal data is PRIMA SAFE DEVELOPMENT S.R.L., with its registered office at Drumul Creţeştilor, Nr. 19, Bucureşti, Sectorul 4, Romania, Romania, registered with the Trade Register under no. J2014005130404, Tax ID (CUI) RO33109102.
E-mail: [email protected]
3. The personal data we process
- Contact information: last name, first name, address, e-mail, phone number.
- Order-related information: products, amounts, delivery and billing addresses, order history.
- Payment information (without full card details): confirmations, transaction status, payment references.
- Communications: messages sent to us, correspondence, requests and complaints.
- Usage details and technical data: IP address, cookies, device and browser identifiers (where applicable).
4. Purposes and legal bases
We use the information we collect for purposes such as:
- receiving and processing orders, delivering products and issuing tax documents (performance of the contract);
- communicating with customers (performance of the contract / legitimate interest);
- complying with legal obligations (accounting, taxation, warranties, complaint resolution);
- improving our services and website security (legitimate interest);
- marketing / newsletter, only where consent has been given, where applicable.
Any processing operation will be carried out on the basis of one of the applicable legal bases: performance of the contract, legal obligation, consent, legitimate interest or other grounds provided by law.
5. Data processing period
We will keep your data for the period necessary to fulfill the stated purposes and/or for the period required by legal obligations. We will stop processing when you withdraw your consent (if applicable) and there are no longer any legal grounds for processing.
6. Cookies and similar technologies
We may obtain information about general use of the website by using cookies. A cookie is a small file stored on your device. Cookies help us improve the website, estimate usage patterns, remember preferences and recognize users when they return.
For full details, see the separate Cookie Policy page (if linked on the website).
7. Disclosure and transfer of information
We may disclose data to contractual partners (for example: couriers, IT providers, marketing services, accounting), solely to the extent necessary to provide the services, subject to confidentiality obligations and in accordance with the law.
Information may also be provided to the competent authorities (Prosecutor's Office, Police, courts, etc.) on the basis and within the limits of the law. In exceptional cases, data may be transferred within the European Economic Area or to countries recognized as providing an adequate level of protection, if necessary for the purposes described.
8. Your rights
- Right of access
- Right to rectification
- Right to object
- Right to restriction of processing
- Right to data portability
- Right to erasure (“right to be forgotten”), under the conditions provided by law
With regard to marketing communications, you may withdraw your consent at any time (e.g., via the unsubscribe link in the e-mail).
9. Exercising your rights / complaints
To exercise these rights, you may submit a signed and dated written request to the registered office of PRIMA SAFE DEVELOPMENT S.R.L. at Drumul Creţeştilor, Nr. 19, Bucureşti, Sectorul 4, Romania, Romania, or to the following e-mail address: [email protected].
If you believe that the processing is carried out in breach of the law, you may file a complaint with the supervisory authority in Romania (Autoritatea Nationala de Supraveghere a Prelucrarii Datelor cu Caracter Personal – the National Supervisory Authority for Personal Data Processing).
11. Deleting your account and data
You can request deletion of your account and associated data at any time, whether you created it with an e-mail and password or with Google, Facebook or LinkedIn: send an e-mail to [email protected], from your account's e-mail address, with the subject “Data deletion”. No form is required.
We delete your account, contact details, saved addresses, the link to Google, Facebook or LinkedIn, your favorites list and the reviews you have written. Only the documents we are required by law to keep remain (invoices and accounting documents, 10 years), unlinked from the account. Requests are handled within 30 days at most, and we confirm by e-mail once completed.
12. Updates
Please note that our policy is to publish any changes made to this section as required by law or when needed in the current context. If the changes are material, we may request a new consent, where applicable.
10. Signing in with Google, Facebook or LinkedIn
You can also create your account or sign in with your Google, Facebook or LinkedIn account. In this case, we receive from the chosen provider only your name, e-mail address and an account identifier, used to recognize you the next time you sign in. We do not receive your account password and we do not post anything on your behalf.
You can revoke access at any time from your account settings: Google (Security → Third-party apps), Facebook (Settings → Apps and Websites) or LinkedIn (Settings → Data privacy → Permitted services). Revoking access stops sign-in with that button, but does not delete your Prima Shop account; for that, see the next section.