This Privacy Policy is applicable to the data controller ZAHAVIT TSHUBA FASHION S.R.L., a Romanian limited liability company, with registered office in Romania, Bucharest municipality, 14 Jandarmeriei St., 1st district, registered with the Trade Register Office attached to Bucharest Court under order no. J40/12702/2020, sole tax number (CUI) 43128594, hereinafter referred to as the “Company” or “Zahavit Tshuba”
This Privacy and Personal Data Protection Policy has been designed to inform visitors, users and customers of the website www.zahavittshuba.com about the categories of personal data, the purpose, duration, legal basis for processing personal data, the disclosure of personal data and the rights data subjects have with regard to the processing of their personal data.
By using this website, you consent to the collection and use of your personal information (where provided) in accordance with this policy.
We invite you to carefully read this section, in connection with the Cookies Policy, as well as the Terms and Conditions section available on the www.zahavittshuba.com website.
You can browse the www.zahavittshuba.com website without disclosing any personal data, as a visitor to the website, without creating an account or sending us a contact form.
Should you wish to actively use the website or intend to place an order, you will be asked to provide the following personal data, exemplified as follows:
Action | Category of Personal data | Purpose | Legal basis |
Contacting the customer online via contact form | Last name, first name, e-mail, telephone number | Contacting the customer online in connection with the offer requested or in connection with the resolution of a complaint | The data processing is required for the performance of a contract that you, as the data subject, are a party to, or in order to take steps at your request prior to the conclusion of a contract, in accordance with Art. 6 (1) (b) of EU Regulation 679/2016 |
Creation and maintenance of an online store account | Last name, first name, e-mail, Billing address, Delivery address | Taking the steps prior to the conclusion of a contract between the store and the customer | The data processing is required for the performance of a contract that you, as the data subject, are a party to, or in order to take steps at your request prior to the conclusion of a contract, in accordance with Art. 6 (1) (b) of EU Regulation 679/2016 |
Commercial activities for sale, supply of goods | Desired product, last name and first name, contact details (phone number, e-mail address), delivery address, billing address, payment method, bank card details, invoice details. | Order taking and validation, dispatch, stock information, order status information, delivery, product returns, product warranty | The data processing is required for the performance of a contract that you, as the data subject, are a party to, or in order to take steps at your request prior to the conclusion of a contract, in accordance with Art. 6 (1) (b) of EU Regulation 679/2016 |
Issue of tax documents, financial- accounting registration, performance of economic, financial and/or administrative management activities of the company. Filing of documents relating to products sold | Identification data Financial data (invoices, contracts, payments, other data) | Fulfillment of the company’s legal obligations in the context of carrying out sales operations. Follow-up and collection of payment debts. Keeping an archive of accounting records. | The processing is required for the fulfillment of a legal obligation incumbent on the controller pursuant to Art. 6 (1) (c) of EU Regulation 679/2016 |
The Company processes personal data only for the period required for the fulfillment of the above-mentioned processing purposes.
In the case of sales transactions, the data shall be processed for the period required for the execution of the contractual relationships, but not more than 3 years from the termination of the sales contract. By way of exception, in the case of financial-accounting supporting documents, the retention period laid down by law is 10 years from the end of the financial year during which they were drawn up.
The Company may disclose personal data to external partners with whom the company collaborates on the basis of pre-established contractual relationships with them, in order to carry out the company’s object of activity, such as: courier service providers, IT service providers, marketing and market research service providers, accounting, archiving, legal, or other specialized professional service providers, as well as at the request of tax, judicial or other public authorities, as a result of fulfilling a legal obligation or express requests in this regard.
These recipients may be located in the European Union and/or the European Economic Area. To the extent that we export data to countries outside the European Economic Area, we shall, in all cases, ensure that the transfers are lawful and based on your explicit consent or other legal basis designed to ensure adequate protection of your rights.
The security of your personal data is an area of concern to us. Data shall be processed through the implementation of administrative and technical security measures in order to protect them against destruction, transfer or decryption and to minimize any risk of unlawful transfer or access. However, we cannot always guarantee the effectiveness of the security measures put in place, and therefore we cannot at all times 100% guarantee the security of personal data.
Under national and international law, you have the following rights in relation to the processing of personal data:
Right of access: you have the right to receive, upon request, information on the processing of your data and a copy of the data processed. This right allows you to obtain a copy of the personal data processed free of charge, as well as any additional copies at cost.
Right to rectification of data: you have the right to request the rectification of inaccurate data or the completion of incomplete data.
The right to erasure: you have the right to obtain the erasure of personal data in situations where: (i) the data are no longer necessary in relation to the purposes for which we have collected or otherwise processed them; (ii) you have withdrawn your consent to the processing of personal data and the company can no longer process them on other legal grounds; (iii) personal data are unlawfully processed; (iv) personal data have to be erased in accordance with the relevant legislation, in case you object to the processing and there are no legitimate grounds that prevail.
Right to portability: you have the right to request and receive your personal data in a structured, commonly used and machine-readable format, as well as the right to transmit those data to another data controller, provided that the conditions provided by law are met.
The right to withdraw the consent: you may withdraw your consent at any time in order to cease the processing of the data on which your consent is based. The withdrawal shall not affect the lawfulness of the processing carried out on the basis of the consent given before the withdrawal.
Right to restriction of processing: you have the right to have processing restricted if you are in one of the following situations: (i) you contest the accuracy of the personal data (ii) the processing is unlawful and thus you oppose the erasure of the personal data and request the restriction of processing instead (iii) the data are no longer necessary for processing but you request them for the establishment, exercise or defense of a legal claim; or (iv) where you have objected to the processing, for the period of time during which it is ascertained whether our legitimate rights as controller override your rights as data subject.
Right to object: you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you, including profiling based on these provisions.
You have the right to object at any time, free of charge and without any justification, to the processing of your personal data for advertising, marketing and publicity purposes or to their disclosure to third parties for such purposes.
The right not to be subject to an automated individual decision is the right not to be subject to a decision taken solely on the basis of automated processing activities, including profiling, which produces legal effects or similarly affects you to a substantial extent;
Right to lodge a complaint with the supervisory authority: data subjects have the right to lodge a complaint with the data processing supervisory authority if they believe their rights have been violated: National Authority for the Supervision of Personal Data Processing 28-30 B-dul G-ral. Gheorghe Magheru, 1st district, postal code 010336, Bucharest, Romania anspdcp@dataprotection.ro.
Any request concerning the processing of your personal data may be sent in writing to the above-mentioned registered office address or to the e-mail address info@zahavittsuba.com
