At STRAȘNIC, we respect the privacy and personal data protection of our customers and visitors to our online store.

This Privacy Policy explains how we collect, use, store and protect personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Romanian legislation.

1. Identity of the Data Controller

The website www.strasnic.ro is operated by:

Toderău Octavian Constantin Întreprindere Individuală

Trade Name: STRAȘNIC
Registered Office: 2 Vasile Urechia Street, Iași, Romania
Tax Identification Number (CIF): 36639200
Trade Register Number: F22/998/17.10.2016
Email: hello@strasnic.ro
Phone: +40 751 501 016

The Data Controller is responsible for processing personal data collected through the online store in accordance with applicable legislation.

2. What Personal Data We Collect

Depending on how you use our online store, we may process the following categories of data:

  • First and last name;
  • Email address;
  • Phone number;
  • Shipping and billing addresses;
  • Information required to issue tax documents;
  • Information regarding orders, payments and returns;
  • Information provided through contact forms;
  • Data associated with your customer account;
  • Technical information, such as IP address, device type and website usage data;
  • Preferences regarding marketing communications and cookies.

We do not normally request a Romanian Personal Identification Number (CNP) when placing an order. This information may only be processed where an appropriate legal basis exists.

3. Purposes and Legal Bases for Processing

Personal data is used exclusively for specific and legitimate purposes, as follows:

Order Processing and Delivery

We process the information necessary to register and confirm orders, process payments, ship products and manage returns.

Legal basis: Performance of a contract or steps necessary to enter into a contract, in accordance with Article 6(1)(b) of the GDPR.

Invoicing and Tax Obligations

We process the data necessary to issue and retain tax documents and to fulfil our legal obligations.

Legal basis: Compliance with a legal obligation, in accordance with Article 6(1)(c) of the GDPR.

Customer Communication

We use contact information to respond to questions, provide product support and handle requests or complaints.

Legal basis: Performance of a contract, pre-contractual steps or our legitimate interest in managing requests received, as applicable.

Website Security and Functionality

We may process technical data necessary to prevent unauthorised access, detect attempted fraud and ensure the proper functioning of the online store.

Legal basis: Our legitimate interest in protecting the online store and its users, in accordance with Article 6(1)(f) of the GDPR, while respecting the rights of data subjects.

Marketing Communications

Offers, news and promotional messages sent by email are based on consent where required by law.

Consent may be withdrawn at any time.

4. Who We May Share Personal Data With

To manage the online store and process orders, certain data may be shared with service providers involved in our business operations:

  • MerchantPro – the e-commerce platform provider;
  • Courier companies – for order delivery;
  • Payment processors and banking institutions – for processing transactions;
  • PayPal – for orders paid through this service;
  • IT, maintenance and communications service providers;
  • Accounting and invoicing service providers;
  • Public authorities, where required by law.

We only share the data necessary to fulfil the respective purposes.

We do not sell databases containing our customers’ personal information.

5. International Data Transfers

Certain payment, analytics or advertising service providers may process personal data outside the European Economic Area.

Where such transfers take place, they must comply with the requirements of the GDPR, including the use of adequacy decisions or appropriate safeguards, as applicable.

Information regarding recipients and applicable safeguards may be requested at hello@strasnic.ro.

6. Data Retention Period

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected.

  • Order data and tax documents are retained in accordance with the periods established by applicable legislation;
  • Customer account data is retained for as long as the account remains active or as long as there is a legal basis for retaining it;
  • Customer correspondence is retained for as long as necessary to manage requests and any applicable legal obligations;
  • Data used for marketing purposes is processed until consent is withdrawn or the purpose of processing ceases;
  • Technical data and cookies are retained according to the retention periods applicable to each category.

Once the necessary retention periods have expired, the data is deleted or anonymised, except where a legal obligation requires its retention.

7. Rights of Data Subjects

Under the GDPR, you have the following rights, subject to the conditions provided by law:

  • The right to access your personal data;
  • The right to rectify inaccurate data;
  • The right to erasure of personal data;
  • The right to restrict processing;
  • The right to data portability;
  • The right to object to certain types of processing;
  • The right to withdraw consent at any time;
  • The right not to be subject to certain decisions based solely on automated processing;
  • The right to lodge a complaint with the competent supervisory authority.

Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

To exercise these rights, you may contact us at:

hello@strasnic.ro

We will respond to requests without undue delay, generally within one month, with the possibility of extending this period in the circumstances provided for by the GDPR.

8. Personal Data Security

STRAȘNIC uses the MerchantPro platform to manage its online store.

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or unauthorised disclosure.

Access to personal information is restricted to individuals and service providers who require it to perform their duties or contracted services.

Online payments are processed through the payment service providers available in the online store, in accordance with their own procedures and security measures.

9. Cookies and Similar Technologies

The website www.strasnic.ro uses cookies and similar technologies to ensure the proper functioning of the online store, save user preferences and, depending on accepted preferences, analyse website traffic or provide advertising.

Strictly necessary cookies are used to ensure website functionality.

Optional analytics and advertising cookies are used in accordance with the law and the preferences expressed by visitors.

Users can manage their preferences through the cookie consent mechanism available on the website.

10. Newsletter and Promotional Communications

Customers and visitors who choose to receive marketing information may receive messages about new products, offers and STRAȘNIC news.

Subscription to promotional communications is carried out in accordance with applicable legislation.

Users may unsubscribe using the link included in marketing communications or by sending a request to hello@strasnic.ro.

Withdrawal of consent for marketing purposes does not affect order processing or communications necessary for the performance of contracts.

11. Provision of Personal Data

Data marked as mandatory during the checkout process is required to register, process and deliver orders.

Without this information, we may be unable to complete your order.

Providing data for promotional communications and the use of optional cookies is not mandatory for purchasing products.

12. Data Protection Complaints

If you believe that your personal data has been processed in violation of applicable legislation, you may contact us to clarify the situation.

You also have the right to lodge a complaint with:

The Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)

Website: www.dataprotection.ro

You may also seek legal remedies before the competent courts, in accordance with the law.

13. Updates to the Privacy Policy

STRAȘNIC reserves the right to update this Privacy Policy to reflect legislative, technical or operational changes.

The updated version will be published on www.strasnic.ro, together with the date of the latest modification.

14. Contact

For questions regarding personal data protection:

STRAȘNIC – Toderău Octavian Constantin Întreprindere Individuală

Email: hello@strasnic.ro

Phone: +40 751 501 016

Address: 2 Vasile Urechia Street, Iași, Romania

Website: www.strasnic.ro