Privacy Policy

1. Introduction and Data Controller

This Privacy Policy describes how vixunel ("we", "our", or "us") collects, uses, and protects your personal information when you visit our website or use our services in Romania. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and Romanian Law 190/2018 on personal data protection measures.

2. Information We Collect

Personal Information You Provide:

• Name and contact information (email, phone number)
• Delivery address and billing information
• Order details and product preferences
• Communication preferences and correspondence with us
• Any additional information you voluntarily provide

Technical Information:

• IP address and browser information
• Device information and operating system
• Website usage data and navigation patterns
• Cookies and similar tracking technologies (see Cookie Policy)

3. How We Use Your Information

Legal Basis for Processing:

4. Data Sharing and Third Parties

We do not sell your personal data to third parties. We may share your information only in the following circumstances:

• Delivery Partners: To fulfill your orders (name, address, phone number only)
• Payment Processors: For secure payment processing (when applicable)
• Legal Requirements: When required by Romanian or EU law
• Business Protection: To protect our rights, property, or safety
• Service Providers: Trusted partners who assist in our operations under strict data protection agreements

5. Your Rights Under GDPR

As a resident of Romania/EU, you have the following rights regarding your personal data:

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

6. Data Retention

We retain your personal data for the following periods:

• Order Data: 7 years (Romanian commercial law requirements)
• Marketing Consent: Until you withdraw consent or 3 years of inactivity
• Website Analytics: 26 months maximum
• Customer Support: 3 years from last interaction
• Legal Claims: Until statute of limitations expires

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:

• SSL encryption for data transmission
• Secure servers with access controls
• Regular security assessments and updates
• Staff training on data protection
• Data minimization and pseudonymization where possible

8. International Data Transfers

Your data is primarily processed within the European Economic Area. If we need to transfer data outside the EEA, we ensure appropriate safeguards are in place, including adequacy decisions or standard contractual clauses approved by the European Commission.

9. Complaints and Supervisory Authority

If you have concerns about how we handle your personal data, you can:

1. Contact us directly at [email protected]
2. File a complaint with the Romanian Data Protection Authority (ANSPDCP)

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. For significant changes, we may provide additional notice.

11. Contact Information