🔒 Privacy Policy for doina-art.com

The online store doina-art.com (hereinafter referred to as the "Site"), operated by [Cotfas Doina Magazinului/Firmei, ex: Doina Art PFA] with No. Registration Reg. Commerce [ F/19/13.07.2010] and registered office on [Str Stefan Cel Mare ], processes personal data provided by the Client for a period of time specified by law. The main purpose of data processing is the fulfillment and confirmation of the Terms and Conditions, processing electronic orders for paintings, making deliveries and the necessary communication.1. ⚙️ General ProvisionsData Controller: The personal data controller, in accordance with the GDPR Regulation, is [Name or Legal Name of the Owner of the Store/Company], No. Registration Reg. Trade F/19/13.07.2010], with its registered office on […] (hereinafter referred to as the "Operator"); Contact Details: The Operator's contact details are: e-mail: [cotfasdoina@gmail.com], tel.: [Your teleph 0740285191]. Definition: Personal data (PD) is any information relating to an identified or identifiable natural person.2. 📝 Source and Categories of Personal DataObtaining Data: The Operator processes personal data obtained directly from the Client by:Placing an order for a painting/art product.Creating a user account on the Site.Subscribing to the newsletter (if applicable).Contacting the Operator by email or contact form.Categories of Processed Data: The Operator processes only the data necessary for the fulfillment of the sale-purchase contract (purchase of a work of art), including:Identification and Contact Data: Name, Surname, Email address, Telephone number.Delivery and Billing Data: Delivery address, Billing address, Personal Numeric Code (CNP - required only for invoices issued to individuals according to tax legislation).Order Data: Details about the paintings purchased, order value, payment method.Technical Data (Google Analytics): IP address, browser type, data about browsing the Site.3. 🎯 Purpose and Legal Basis of ProcessingThe Operator processes the Customer's personal data based on the following legal grounds and purposes:Legal BasisPurpose of ProcessingCategory of DataRelevant Execution of the Contract (Art. 6.1.b GDPR)For taking over, processing and delivering art orders.Name, Address, Email, Phone, Order details.Legal Obligation (Art. 6.1.c GDPR)For issuing tax invoices and keeping accounting records according to the legislation.Name, Address, CNP (if applicable), Order details.Consent (Art. 6.1.a GDPR)For sending newsletters, promotional offers and news about paintings/art events (if the Customer has subscribed).E-mail address.Legitimate Interest (Art. 6.1.f GDPR)For improving the Site's services, defending rights in court and preventing fraud.Technical data (IP, Cookies), Transaction details.4. ⏳ Duration of Storage of Personal DataThe Operator stores personal data for the period necessary to fulfill the purposes mentioned above.Invoicing data will be stored for a period of 10 years, in accordance with legal obligations regarding the archiving of financial and accounting documents.Data stored on the basis of consent (e.g. newsletter) will be stored until the Client withdraws consent.5. 🤝 Recipients of Personal DataThe Customer's data may be disclosed to the following categories of recipients (authorized persons), strictly for the purpose of fulfilling the order:Delivery Service Providers: Courier companies (to deliver the paintings).IT Service Providers: Webnode AG (online store system), hosting providers.Analysis Service Providers: Google Analytics (for analyzing traffic on the Site).Public Authorities: At their legal request (ANAF, police, courts).Personal data will not be transferred outside the European Economic Area (EEA), unless the third-party service providers offer adequate protection guarantees (e.g. use of Standard Contractual Clauses).6. ⚖️ Customer RightsIn accordance with the GDPR Regulation, the Customer has the following rights:Right of Access: To request a copy of the data we hold about him.Right to Rectification: To request the correction of inaccurate data.Right to Erasure ("Right to be forgotten"): To request the deletion of data, except for those for which there is a legal obligation to retain (e.g. invoices).Right to Restriction of Processing: To limit the way in which we use his data.Right to Data Portability: To receive the data in a structured, commonly used and machine-readable format.Right to Objection: To object to the processing of his data, including processing for direct marketing purposes.Right to Withdraw Consent: To withdraw the consent given for the processing of data at any time