Privacy Policy – Last updated: July 2023

  1. General Information

Your personal data privacy is a primary concern for Giftart Shop SRL, located in Bucharest, Argentina no.25, as the data controller.
This document aims to inform you about the processing of your personal data in the context of using the website “invitatiibotez.ro” – hereinafter referred to as “the Site”.

  1. Categories of Processed Personal Data

II.1. If you are a client of the Site, Giftart Shop SRL will process your personal data, such as name and surname, phone, email address, billing address, delivery address, data related to how you use the Site, for example, your behavior/preferences/habits within Giftart Shop SRL, as well as any other categories of data you provide directly in the context of creating a user account, placing an order through the site, or in any other way that results from using the Site.

If you create a user account on the Site using your Facebook or Google account, Giftart Shop SRL will process the following public profile data displayed by those applications: username, email address.

If you choose to create a user account just before finalizing the order of a product available on the Site, your email address will be requested, based on which an account will be created automatically. If you do not finalize the order, the email address and other provided data will not be stored by Giftart Shop SRL, and the created account will be automatically deleted.

II.2. If you are a visitor to the Site, Giftart Shop SRL will process your personal data provided directly in the context of using the Site, such as the data you provide in the contact/questions/complaints section, to the extent you contact us this way.

III. Purposes and Grounds for Processing

III.1. If you are a client of the Site, Giftart Shop SRL processes your personal data as follows:

  • to carry out the contractual relationship between you and Giftart Shop SRL, respectively for taking, validating, shipping, and invoicing the order placed on the Site, informing you about the status of the order, organizing the return of ordered products, etc.

Grounds: Processing your data for this purpose is based on the contract between you and Giftart Shop SRL, as defined in the Terms and Conditions. Providing your personal data is necessary for the execution of this contract. Refusal to provide data may result in the impossibility of the contractual relationship between you and Giftart Shop SRL.

  • to fulfill the legal obligations incumbent on Giftart Shop SRL in the context of the services provided through the Site, including tax obligations and archiving obligations.

Grounds: Processing your data for this purpose is necessary based on legal obligations. Providing your data for this purpose is necessary. Refusal to provide data may result in the impossibility for Giftart Shop SRL to comply with its legal obligations and therefore the impossibility of offering you services through the Site.

  • for marketing activities, namely for sending, through remote communication means (email, SMS), commercial communications regarding the products and services offered by Giftart Shop SRL through the Site.

Grounds: Processing your data for this purpose is based on your consent, if you choose to provide it.

You can express your consent for data processing for this purpose by checking the corresponding box at the time of account creation, or after account creation, in the My Account Information section. To unsubscribe from receiving such commercial communications, you can use the option at the end of each email/SMS containing commercial communications. Additionally, you can unsubscribe by accessing the My Account Information section.

Providing your data for this purpose is voluntary. Refusal to provide consent for data processing for this purpose will not have negative consequences for you.

  • for conducting various analyses, reports on how the Site operates, creating consumer preference profiles, mainly to improve the experience offered on the Site.

Grounds: Processing your data for this purpose is based on the legitimate interest of Giftart Shop SRL to continuously improve the customer experience on the Site. Providing your data for this purpose is voluntary. Refusal to provide data for this purpose will not have negative consequences for you.

III.2. If you are a visitor to the Site, Giftart Shop SRL processes your personal data as follows:

  • for marketing activities, namely for sending, through remote communication means (email, SMS), commercial communications regarding the products and services offered by Giftart Shop SRL through the Site.

Grounds: Processing your data for this purpose is based on your consent, if you choose to provide it.

You can express your consent for data processing for this purpose by completing and checking the corresponding box in the subscription form available on the Site. To unsubscribe from receiving such commercial communications, you can use the option at the end of each email/SMS containing commercial communications.

Providing your data for this purpose is voluntary. Refusal to provide consent for data processing for this purpose will not have negative consequences for you.

  • for resolving complaints, and claims, and to monitor traffic and improve your experience offered on the Site.

Grounds: Processing your data for this purpose is based on the legitimate interest of Giftart Shop SRL to ensure the proper functioning of the Site, as well as to continuously improve the experience of Site visitors, including by resolving various comments, questions, or complaints.

Providing your data for this purpose is voluntary. Refusal to provide data for this purpose will not have negative consequences for you.

  1. Duration for which we process your data

As a principle, Giftart Shop SRL will process your personal data as long as necessary to achieve the processing purposes mentioned above.

If you are a client, we will process your data for the entire duration of the contractual relationship and subsequently according to the legal obligations incumbent on Giftart Shop SRL (e.g., in the case of financial-accounting supporting documents for which the retention period provided by law is 10 years from the date of the end of the financial year during which they were drawn up).

If you are a client and you exercise your option to delete the user account, by pressing the Delete Account button in the My Account Information section, Giftart Shop SRL will interpret this action as your option to unsubscribe from receiving commercial communications through which we keep you updated about the products and services offered through the site. In this sense, if you choose to delete your user account, we will no longer send you such emails and/or SMS. However, we would like to inform you that deleting the account will not automatically delete your personal data. If you want your personal data to no longer be processed or if you want the data to be deleted, you can exercise your rights detailed in point VII below. If you request the deletion of the account, but there is at least one active order on that account, the account deletion request can be registered only after the delivery of the products and the completion of the last active order.

If you withdraw your consent for data processing for marketing purposes, Giftart Shop SRL will cease processing your personal data for this purpose, without affecting the processing carried out by Giftart Shop SRL based on the consent expressed by you before its withdrawal.

  1. Disclosure of Personal Data

To achieve the processing purposes, Giftart Shop SRL may disclose your data to partners, third parties, or entities that support Giftart Shop SRL in carrying out its activity through the Site (for example, courier companies, IT service providers), or to public authorities, in the following cases:

  • for the administration of the Site;
  • in situations where this communication is necessary for awarding prizes or other facilities to the data subjects, obtained as a result of their participation in various promotional campaigns organized by Giftart Shop SRL through the Site;
  • to maintain, personalize, and improve the Site and the services provided through it;
  • to conduct data analysis, testing and research, monitor usage and activity trends, develop safety features, and authenticate users;
  • for sending marketing communications, within the conditions and limits provided by law;
  • when the disclosure of personal data is required by law, etc.
  1. Transfer of Personal Data

Personal data provided to Giftart Shop SRL may be transferred outside of Romania, but only to states within the European Union.

VII. Your Rights

Under the conditions provided by the legislation on personal data processing, as data subjects, you benefit from the following rights:

  • right to information, i.e., the right to receive details about the processing activities performed by Giftart Shop SRL, as described in this document;
  • right to access data, i.e., the right to obtain confirmation from Giftart Shop SRL regarding the processing of personal data, as well as details about the processing activities such as how data is processed, the purpose of processing, recipients or categories of recipients of the data, etc.;
  • right to rectification, i.e., the right to obtain the correction, without justified delays, by Giftart Shop SRL of inaccurate/unjustified personal data, as well as the completion of incomplete data; Rectification/completion will be communicated to each recipient to whom the data was sent unless this proves impossible or involves disproportionate efforts.
  • right to data deletion, without unjustified delays, (“right to be forgotten”), if one of the following reasons applies:
    • they are no longer necessary for the purposes for which they were collected or processed;
    • if consent is withdrawn and there is no other legal basis for processing;
    • if the data subject objects to processing and there are no legitimate reasons that prevail;
    • if personal data has been processed illegally;
    • if personal data must be deleted to comply with a legal obligation;
    • personal data has been collected in connection with the provision of information society services according to Union or national law to which the controller is subject.

It is possible that following a data deletion request, Giftart Shop SRL may anonymize this data (thus depriving it of personal character) and continue processing for statistical purposes;

  • right to restrict processing to the extent that:
    • the person contests the accuracy of the data, for a period that allows us to verify the correctness of the data;
    • processing is illegal, and the data subject opposes the deletion of personal data, requesting instead the restriction of its use;
    • the controller no longer needs personal data for processing purposes, but the data subject requests it for the establishment, exercise, or defense of legal claims; or
    • the data subject has objected to processing (other than for direct marketing), for the period necessary to verify whether the legitimate rights of the controller prevail over those of the data subject.
  • right to data portability, i.e., (i) the right to receive personal data in a structured, commonly used, and readable format, as well as (ii) the right to have this data transmitted by Giftart Shop SRL to another data controller, to the extent that the conditions provided by law are met;
  • right to object – regarding processing activities, it can be exercised by sending a request as indicated below;
    • at any time, for reasons related to the particular situation of the data subject, that data concerning them be processed based on the legitimate interest of Giftart Shop SRL or the public interest, except where Giftart Shop SRL can demonstrate that it has legitimate and compelling reasons that justify processing and that prevail over the interests, rights, and freedoms of data subjects or that the purpose is to establish, exercise or defend a legal claim;
    • at any time, free of charge and without any justification, that data concerning them be processed for direct marketing purposes.
  • right not to be subject to an automatic individual decision, i.e., the right not to be the subject of a decision based solely on automated processing activities, including profiling, which produces legal effects concerning the data subject or significantly affects them similarly;
  • the right to address the National Supervisory Authority for Personal Data Processing or the competent courts, to the extent deemed necessary.

For any additional questions regarding how personal data is processed and to exercise your rights mentioned above, please contact us at: contact@giftart.ro. This website uses cookies. For more information on how these files are used, please access the following link