Privacy Policy

This Privacy Policy explains how the company BOLD DESIGN COLLECTION S.R.L., with its registered office in Bucharest, Sector 3, Bdul. Unirii no. 45, Bl. E3, TR 2+3, Et. MEZ, postal code 030824, registered with the Trade Register under no. J2020009763407, EUID ROONRC.J2020009763407, VAT no. RO42910222, hereinafter referred to as the Company, processes the personal data of users of the atelierrebul.ro website, in accordance with EU Regulation 2016/679 on the protection of personal data (GDPR) and applicable national legislation.

The protection of your personal data is very important to us, and this Policy is intended to inform you transparently about the categories of data processed, the purposes and legal grounds for processing, the storage period, and the rights you enjoy.

1. Data Controller

The personal data controller is:

BOLD DESIGN COLLECTION S.R.L.
Registered office: Bucharest, Sector 3, Bulevardul Unirii no. 45, Bloc E3, TR 2+3, Mezzanine Floor
Postal code: 030824
Trade Register: J2020009763407
EUID: ROONRC.J2020009763407
VAT no.: RO 42910222
Email: contact@atelierrebul.ro
Phone: 0784 225 355

2. Categories of Personal Data Processed

The Company may process the following categories of data:

identification data: name, surname
contact data: email address, phone number
delivery data: address, locality, postal code
billing data
data regarding orders placed: products, quantities, values
payment data, processed exclusively by authorized payment service providers
technical data: IP address, browser type, operating system, pages visited, visit duration

The Company does not store bank card data.

3. Purposes and Legal Grounds for Processing

Personal data is processed for the following purposes:

a) Performance of the contract

processing and delivery of orders
communication regarding order status
management of the business relationship

Legal ground: Art. 6(1)(b) GDPR

b) Compliance with legal obligations

invoicing
accounting records
reporting to authorities

Legal ground: Art. 6(1)(c) GDPR

c) Direct marketing

sending newsletters
promotional communications via email or SMS

This processing takes place only on the basis of the user's explicit consent, which may be withdrawn at any time.

Legal ground: Art. 6(1)(a) GDPR

d) Operation and security of the website

ensuring platform functionality
fraud prevention
protection of IT systems

Legal ground: Art. 6(1)(f) GDPR legitimate interest

4. Cookies and similar technologies

The website uses cookies and similar technologies to ensure proper operation, for statistical analysis, and to improve the user experience.

Cookies necessary for the operation of the website are used on the basis of the Company's legitimate interest.

Analytical and marketing cookies, including Google Analytics, are used only with the user's consent, expressed through the cookie banner.

Detailed information regarding the types of cookies used, their duration, and management options can be found in the Cookie Policy, available separately on the website.

5. Data recipients

Personal data may be transmitted to:

courier companies
payment processors
IT service providers
public authorities, to the extent that there is a legal obligation

The Company does not sell or transfer personal data to third parties for commercial purposes.

6. Data retention period

Data is stored:

for the duration of the contractual relationship
in accordance with the terms provided by applicable law

Financial and accounting documents are kept for 10 years, in accordance with the law.

7. Rights of the data subject

In accordance with the GDPR, you enjoy the following rights:

the right of access to data
the right to rectification of data
the right to erasure of data
the right to restriction of processing
the right to data portability
the right to object
the right to withdraw your consent
the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing