Privacy policy

  • Your shopping cart is empty!

Privacy policy

1. Introduction

The purpose of this Privacy Policy is to explain what data we process, why we process it and what we do with it. We take your privacy seriously and never sell lists or email addresses. Being fully aware that personal information belongs to you, we do our best to store it securely and process it carefully. We do not provide information to third parties without informing you.

2. Other services

This Privacy Policy does not cover third-party applications and websites that you may access by clicking on links on our website. This is beyond our control. We encourage you to review the Privacy Policy on any website and/or application before providing any personal information.

3. Who are we?

LUVIMIXT IMPEX SRL, headquartered in Bucharest, str. Nada Florilor, no. 5, bl. 5, sc. 3, ap. 96, sector 2, Registration with the Trade Register Office: No. J40/7980/1999, Unique Registration Code: RO12139860 (hereinafter referred to as “LUVIMIXT IMPEX SRL”) is responsible for the processing of your personal data that it collects directly from you or from other sources.

According to the law, our company is a personal data controller. In order for your data to be processed securely, we have made every effort to implement reasonable measures to protect your personal information.

4. Who are you?

According to the law, you, the natural person who benefits from our products or the person in any kind of relationship with us, are a “data subject”, that is, an identified or identifiable natural person. In order to be completely transparent about data processing and to allow you to easily exercise your rights at any time, we have implemented measures to facilitate communication between us, the data controller, and you, the data subject.

5. Changes

We may change this Privacy Policy at any time. All updates and changes to this Policy are effective immediately upon notification, which we will provide by posting on the Site and/or email notification.

6. Questions and requests

If you have any questions or concerns regarding the processing of your data or wish to exercise your legal rights in relation to the data we hold or if you have concerns regarding how we handle any privacy issue, you can write to us at the email address office@luvshop.ro

7. Our commitment

The protection of your personal information is very important to us. Therefore, we are committed to respecting the following principles:

Legality, fairness and transparency – We process your data legally and fairly. We are always transparent about the information we use, and you are properly informed.

You are in control – Within the limits of the law, we offer you the ability to review, modify, delete the personal data you have shared with us and exercise your other rights.

Data Integrity and Purpose Limitation – We use data only for the purposes described at the time of collection or for new purposes compatible with the original ones. In all cases, our purposes are compatible with the law. We take reasonable steps to ensure that personal data is accurate, complete and up-to-date.

Security – We have implemented reasonable security and encryption measures to protect your information as best we can. However, please remember that no website, application, or internet connection is completely secure.

8. What kind of information do we collect about you?

You can use the Platform without disclosing any personal data. However, if you wish to benefit from our services, you will be asked to provide your data during a registration process.

The requested data may include: full name, telephone number, email address, home address.

We may collect data through cookies or other similar technologies, such as your IP address, internet browser, the ads you clicked on, your location, the web pages you access on our site.

9. Why do we collect this information?

We collect your information for specified and legitimate purposes which include, but are not limited to, the following:

  • For the purpose of entering into or performing a contract between you and us;

  • Account registration;

  • To respond to your questions and requests;

  • For marketing purposes, but only if we have your prior consent;

  • To provide and improve the services and products we offer;

  • To diagnose or fix technical problems;

  • To provide you with personalized advertising and content;

  • To defend against cyber attacks;

  • For the creation and/or maintenance of accounts;

  • To comply with the law;

  • To establish or claim a right in court.

10. What are the legal grounds for collecting data?

  • You have given your consent to the processing of personal data – Please note that you can withdraw your consent at any time by following the unsubscribe instructions in each email or by sending a written request to the email address office@luvshop.ro

  • The processing is necessary for the conclusion or performance of a contract between you and us – Such as the performance of a Contract regarding the sale or purchase of one or more services, or to take steps, at your request, prior to concluding a Contract.

  • Processing is necessary for compliance with a legal obligation – For example, keeping accounting documents for a period of 10 years.

11. How do we disclose your data?

  • LUVIMIXT IMPEX SRL may transfer the Data, by disclosing or granting remote access rights, only through secure applications, to third parties, such as affiliated entities and other business partners of LUVIMIXT IMPEX SRL, who act as processors, processing personal data for and on behalf of LUVIMIXT IMPEX SRL (e.g., storage of Data on "cloud" servers, legal and financial consultants, technical service providers or shipping assistance service providers), with whom LUVIMIXT IMPEX SRL has concluded the necessary contractual agreements in accordance with EU and national regulations.

  • We may also disclose your data to business partners as a result of a joint effort to provide a product or service.

  • We will transfer Data to third parties solely to the extent necessary to fulfill the applicable Processing Purposes for which your data is collected and processed.

  • Personal data collected and processed for the Processing Purposes described in this Privacy Policy may be stored on servers located abroad or transferred to affiliated entities headquartered outside the European Union. In the event of the transfer of Data to third countries, LUVIMIXT IMPEX SRL will communicate the intention of the transfer as well as the third countries concerned, the purpose of the transfer and the request for consent, when such consent is required according to the legal provisions in force.

  • LUVIMIXT IMPEX SRL may disclose the Data to comply with legal provisions or in response to a request from a court or other public authority.

11. For how long do we store the data?

  • Personal data collected by LUVIMIXT IMPEX SRL will be stored for a period of 5 years from the termination of contractual relations or any other longer period imposed by law, regulations or applicable norms regarding obligations to retain accounting documents or requests from public authorities.

    Immediately after the end of the applicable storage period, the data will be:

  • deleted or destroyed; or

  • anonymized; or

  • transferred to an archive (unless prohibited by law or

    applicable regulation providing for record keeping).

    The personal data collected and used to create your Account will be deleted immediately if you close your account.

    To ensure that the Data is not retained longer than necessary, LUVIMIXT IMPEX SRL will periodically review the Data and, if necessary, delete it.

12. What security measures have we taken?

  • As part of the administration of the Platform, we have taken technical and organizational measures to ensure a level of security appropriate to the risks posed by the processing of Data, in particular through improper use, accidental destruction, illegal or unauthorized access, loss, alteration, disclosure, intentional or accidental manipulation, access by third parties, deletion and modification. To this end, we have developed and implemented data security policies and other privacy practices. In addition, our security procedures are constantly reviewed based on new technological developments.

For additional information regarding our security practices, please complete the contact form in the Contact section of the Platform.

You will be notified of a data breach within a reasonable time after discovery of such breach, unless a competent public body determines that notification would impede a criminal investigation or harm national security. In such a case, notification will be delayed, as directed by such body. We will promptly respond to your questions regarding such data breach.

13. What are your rights?

  • Right to withdraw consent

    The data subject has the right to withdraw consent where consent is used as a legal basis for processing (e.g. where the processing is not based on a different justification permitted by the GDPR such as a legal or contractual obligation).
    Before we exclude the data subject's data from processing, we must confirm that the request for consent is indeed the legal basis for the processing. If not, the request may be rejected on the grounds that the processing does not require the data subject's consent. Otherwise, the request should be granted.

    In many cases, the provision and withdrawal of consent will be available electronically – online, and this procedure will not be necessary.
    When consent concerns a child (defined by the GDPR Regulation as a person aged 16 or under), the expression and withdrawal of consent must be authorized by the holder of parental responsibility over the child.

  • The right to be informed about the processing of your data

    When personal data is collected from the data subject or obtained from other sources, there is a requirement to inform the data subject about the purpose of using this data and about the rights they have over it.

  • Right of access to data
    The data subject has the right to ask the company what data it processes about him, to have access to

    those dates, as well as the following information:

  1. Purpose of processing

  2. Categories of personal data involved

  3. Recipients or categories of recipients of the data if any, in particular third countries or international organisations

  4. The duration of storage of personal data (or the criteria used to determine this period)

  5. The rights of the data subject to rectification or erasure of their personal data and limitation or opposition to its processing

  6. The right of the data subject to lodge a complaint with a supervisory authority

  7. Information on the source of the data, if not obtained directly from the data subject

  8. If personal data will be subject to automated processing, including profiling, and,

    if so, the possible consequences involved

  9. If the data is transferred to a third country or an international organization,

    information on the guarantees that apply

    In most cases, the decision-making process for such requests will be straightforward unless it is concluded that the request is manifestly unfounded or excessive. However, compiling the information may require the assistance of the data owners.

  • The right to rectify inaccurate or incomplete data

    If personal data is inaccurate, the data subject has the right to request the correction and completion of incomplete personal data based on the information they provide.
    If necessary, we will take steps to validate the information provided by the data subject to ensure that it is correct before modifying it.

  • The right to erasure ("right to be forgotten")
    We offer the data subject the right to request us to erase personal data without delay.

    in connection with one of the following situations:

    • the personal data are no longer necessary for the purposes for which they were collected or processed;

    • the data subject withdraws the consent on the basis of which the processing takes place and there is no other legal basis for the processing;

    • the data subject objects to the processing and there are no overriding legitimate grounds for the processing;

    • the personal data has been processed illegally;

    • personal data must be deleted to comply with the law;

    • the personal data was collected in connection with the provision of online services

      children.

We will make a decision on each case of such requests as to whether the request can or should be rejected for one of the following reasons:

  • the data is necessary for the exercise of the right to freedom of expression and information;  the data is necessary for the fulfillment of a legal obligation;
  • for reasons of public interest in the field of public health;
  • for archiving purposes in the public interest;
  • for the establishment, exercise or defense of a right in court. The right to restriction of processing

The data subject may exercise the right to restriction of processing in the following situations:

  • the data subject contests the accuracy of the data, for a period enabling the controller to verify the accuracy of the data;

  • the processing is unlawful and the data subject opposes the erasure of personal data, requesting instead the restriction of their use;

  • the controller no longer needs the personal data for the purposes of processing, but the data subject requests them for the establishment, exercise or defence of legal claims; or

  • the data subject has objected to the processing for the period during which it is verified whether the legitimate rights of the operator prevail over those of the data subject.

    If the data are restricted, they will remain stored but may not be processed without the consent of the person. As an exception, they may be processed for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State (provided that the data subject is informed of this). Other organisations that process personal data on our behalf must also be informed of the restriction.

  • The right to transmit the data we have about you to another operator

The data subject has the right to request that personal data be provided in a "structured, commonly used and machine-readable" format (Article 20 of the GDPR) and to transfer those data to another party, for example to another service provider. This applies to personal data for which the processing is based on the data subject's consent, on the legal basis of the contract or where the processing is carried out by automated means.

  • The right to object to data processing

The data subject has the right to object to processing based on the following legal grounds:

  • For the performance of a task carried out in the public interest or in the exercise of official authority of the controller

  • For the purposes of the operator's legitimate interests

    Once the objection has been made, the organization must justify the grounds on which the processing is based and suspend the processing until the decision has been taken (the rule). The organization will no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

    If personal data is used for direct marketing, the organization will cease processing.

  • The right not to be subject to a decision based solely on automated processing, including profiling

The data subject has the right not to be subject to automated decision-making, including profiling, where the decision significantly affects him or her, and the right to express his or her point of view, to request human intervention and to contest the decision.

There are exceptions to this right, when the decision:

1. It is necessary for the conclusion or performance of a contract; 2. It is authorized by national or European law;
3. It is based on the explicit consent of the data subject;

In the situations referred to in points (1) and (2), the organization will implement appropriate measures to safeguard the rights, freedoms and legitimate interests of the data subject, at least the right to obtain human intervention on the part of the operator, to express his or her point of view and to contest the decision.

The right to seek justice
The data subject also has the right to seek justice when they consider that they have been

rights were violated.

  • The right to lodge a complaint with a Supervisory Authority

It is important to know that:

  • If you have given your consent for direct marketing, you can withdraw it at any time by following the unsubscribe instructions in each email/sms or other electronic message.

  • If you want to exercise your rights, you can do so by sending a written, signed and dated request to the email address office@luvshop.ro.

  • The rights listed above are not absolute. There are exceptions, therefore each request received will be analyzed in order to decide whether it is well-founded or not. To the extent that the request is well-founded, we will facilitate the exercise of your rights. If the request is unfounded, we will reject it, but we will inform you of the reasons for the refusal and of your rights to file a complaint with the Supervisory Authority and to seek legal action.

  • We will try to respond to your request within 30 days. However, this deadline may be extended depending on various factors, such as the complexity of the request, the large number of requests received, or the inability to identify you in a timely manner.

  • If, despite our best efforts, we are unable to identify you, and you do not provide us with additional information to enable us to identify you, we are not obligated to comply with the request.

14. Questions, requests and exercise of rights

  • If you have any questions or concerns regarding the processing of your information or wish to exercise your legal rights or have any other privacy concerns, you can write to us at the email address office@luvshop.ro.